All Episodes
Application Security Weekly (Video) — 732 episodes · page 4 of 8
Rust in the Linux Kernel, Uber Security Verdict, Prototype Pollution, PHP Composer - ASW #215
Creating and Curating Educational Resources for Secure Coding - Akira Brand - ASW #215
Exchange RCE, Patching at Scale, DORA Metrics, USENIX Best Papers, Passkeys - ASW #214
Critical Requirements for Cloud Native Application Security - Dean Agron - ASW #214
Authz Bypass in Oracle Cloud, Chrome Prototype Pollution, Why Security Products Fail - ASW #213
Show, Don't Tell, Your Developers How To Write Secure Code - Janet Worthington - ASW #213
Uber Breach, Rust Security Team, MiraclePtr, Supply Chain Criticism, Careers - ASW #212
API Security from a Developer's Perspective - Sam Placette - ASW #212
Go Vuln Project, OSS-Fuzz Successes, No More Basic Auth, NSA Supply Chain Hardening - ASW #211
Shifting Left Probably Left You Vulnerable. Here's How You Can Make it Right. - Sonali Shah - ASW #211
Twitter Whistleblower Complaint, LastPass Breach, Threat Modeling Culture - ASW #210
Cloud Security Frameworks: Clarity vs. Confusion - Doug Dooley - ASW #210
Debugging & Dev Tools, Isolating PostgreSQL, Abusing the DevOps Pipeline, Xiaomi Flaw - ASW #209
AppSec Tips & Tricks for Cloud Native and Kubernetes Environments - Kiran Kamity - ASW #209
Microsoft Bounties & Edge Security, Strategic Bounty Programs, HTTP Desync Attacks - ASW #208
Good, Not Perfect, AppSec - Tanya Janca - ASW #208
Auth Problems from Parsing, Slack's Password Hashes, Twitter's Info Breach - ASW #207
Agility Broke AppSec. Now It's Going to Fix It - Chen Gour Arie - ASW #207
Smart Lock and Simple Vulns, Macros and Secure Defaults, Breaches and Costs - ASW #206
Reachability & Attackability - Manish Gupta - ASW #206
Atlassian Vuln, Attacking OAuth, OpenSSF Security Audits, Tabletop Exercises - ASW #205
How to Build a Successful Continuous Application Security Program - Ferruh Mavituna - ASW #205
0-Day Vulnerabilities & What's Next - Larry Maccherone - ASW #204
Retbleed, CSRB's First Report, a Case-Sensitive Action, Mac Malware Book - ASW #204
iOS Lockdown Mode, 2FA in PyPI, CloudVulnDB, & Practical Attacks on ML - ASW #203
The Security Challenges That Devs Encounter When Building Secure Apps - Farshad Abasi - ASW #203
Answering the 'How' Questions of Software Security - Nikhil Gupta - ASW #199
Pwn2own, Verizon's DBIR, Zoom's XMPP Flaws, $10M Bounty, & More Bad Packages - ASW #199
More Fuzzing, a Decade of OT Security, & Top Threats to Cloud Computing - ASW #202
How GraphQL & Template Injection Threats Influence App Architectures - Mike Benjamin - ASW #202
Hertzbleed, SynLapse, Java Deserialization, More MFA, Firmware Flaws, & Zombie 0-Day - ASW #201
IE11 Goes to Zero -- A History of Browser Security and Bug Bounties - ASW #201
OWASP Top 10 for K8s, Firefox Process Isolation, Secure Software Factory, CFAA Policy - ASW #198
The Psychology of Training - Matias Madou - ASW #198
RSAC Micro Interviews - Cisco & Invicti Security - Jeetu Patel, Sonali Shah - ASW #200
HTTP RFCs Have Evolved, Breaking Into Cloud, Scaling AppSec at Netflix, & Confluence - ASW #200
Developing Future Cybersecurity Contributors - Brian Glas - ASW #197
Typosquatting, Curl's Security Update, & OpenSSF's 10 Point Mobilization Plan - ASW #197
Smart Contract Security, Heroku Breach, & Real World Crypto Highlights - ASW #196
Securing SAP: Addressing the Critical & Complex Challenge - Christoph Nagy - ASW #196
ExtraReplica, Document.domain Disfavored, & Highlights From Thinkst Quarterly - ASW #195
Bad Bots - Automated Threat Targeting Your Websites, Mobile Apps, & APIs - Lynn Marks - ASW #195
Java's ECDSA for Nought, Writing a Kernel RCE, Okta's Conclusion, Log4Shell Hot Patch - ASW #194
What Does Software Supply Chain Security Threat Mean to Developers? - Dr. Chenxi Wang - ASW #194
OAuth Tokens Taken, Vulns in Medical IoT, Scoring a Proactive Security Culture - ASW #193
Appsec (and adjacent) Metrics - ASW #193
SSRF at a FinTech, Zoom's Bounties, SLSA Build Provenance, & Raspberry Pi Credentials - ASW #192
Service Mesh & Zero Trust Kubernetes Security - William Morgan - ASW #192
Escaping from BlastDoor's Sandbox, Spring RCE, Old Zlib Flaw, Startup Security - ASW #191
Democratizing Software Security - Eric Allard - ASW #191
Okta & LAPSUS$, Fuzzing Rust, SQL Injection & Stale Code, Log4j Lessons - ASW #190
How to Build a Developer-First Application Security Program - Harshil Parikh - ASW #190
A Great Escape, Peace Not War, & How to Burp Good - ASW #189
Helping Secure OSS Software - Alvaro Munoz - ASW #189
Dirty Pipe, AutoWarp Vuln in Azure, TLStorm Hits UPS Devices, Car Hacking - ASW #188
Doing Application Security Right - Farshad Abasi - ASW #188
Vulns in Markdown Parsers, Census II & Open Source Security, iCloud Private Relay - ASW #187
Deep Visibility & Understanding the Underlying Data Layer - Lebin Cheng - ASW #187
Bug Bounty Costs, GitHub's Advisory Database, ICS Vulns of 2021, CNCF Secure Software - ASW #186
Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186
Cassandra RCE, Pixelation Is Poor Redaction, Rust's Useful Errors, & Hardening Edge - ASW #185
The DIY AppSec Lab - ASW #185
Docker Boundaries, Google Bounties, 2021's Top Web Hacks, Apple AirTags, AI vs. RFCs - ASW #184
The Modern Developer Must be Security Minded, Too - Doug Kersten - ASW #184
HTTP/3 Streams, Argo CD Paths, Log4j Devs, Cyber Safety Review Board, OSSF Projects - ASW #183
Policy Momentum in Coordinated Vulnerability Disclosure - Amit Elazari - ASW #183
PwnKit, Qubit Hack, Multichain Hack, Safari Bounty, & Python NaN - ASW #182
Shift Left, NOT S#!T LEFT - Larry Maccherone - ASW #182
IndexedDB Leak, Linux Kernel Bug, Zoom Security, SSRF & Allow Lists, Security Courses - ASW #181
API Security (Shadow APIs) - Himanshu Dwivedi - ASW #181
Scams and Security in Web3*, URL Parsing Problems, AWS Glue, CI/CD Compromises - ASW #180
Investing in Open Source Security - ASW #180
Log4j for FTC, More JNDI, Cache Poisoning, Improving Default Configs, ThinkstScapes - ASW #179
Broadening What We Call AppSec - Christien Rioux - ASW #179
Latest Log4j, Outages & Availability, FPGA Security Concepts, & Bug Bounty Awards - ASW #178
Evolving Security Testing - Dan Guido - ASW #178
Log4Shell, Mozilla's BigFix & New Sandbox, Rust in Linux Kernel, Path Traversal in Go - ASW #177
DevSecOps, Compliance GRC, and the Future of Application Security - Francesco Cipollone - ASW #177
Bug Bounties in Windows/WebKit, Edge Hardening, OAuth Hardening, & GoDaddy Breach - ASW #176
Solving Systemic Risk in Software Development - Chris Wysopal - ASW #176
CVEs 4 CSPs, Malicious PyPi, Bounty Programs, Shared Responsibility, & Breach Costs - ASW #175
wasmCloud - Distributed Computing With WebAssembly - Liam Randall - ASW #175
PAN-OS Vuln, ChaosDB, Fuzzing BusyBox, Refactoring in Rust, HTML Smuggling - ASW #174
Mobile Application Security - Ryan Lloyd - ASW #174
Linux Kernel TIPC RCE, NPM Malware, OTP 2FA Bots, & Security Labels - ASW #173
A Standardized Approach to SBOM - Dan McKinney - ASW #173
Discourse RCE, Trojan Source, WhatsApp Security, & Privacy Engineering - ASW #172
Untangling API Security in 2022 - Peter Klimek - ASW #172
UAParser.js Malware in NPM, Squirrel Sandbox Escape, Securing CI/CD, & AppSec Videos - ASW #171
Security Champions in an Online First World - Ashish Rajan - ASW #171
View Source, Bindiff for Vuln Analysis, Bypass with GitHub Actions, & NIST DevSecOps - ASW #170
Dev(Sec)Ops Scanning Challenges & Tips - Nuno Loureiro, Tiago Mendo - ASW #170
Twitch Breach, HTTPd Path Traversal, Disabling Macros, & Great Cybersecurity Programs - ASW #169
Modernizing the Management of Your Software Supply Chain - Tom Gibson - ASW #169
Prototype Pollution, Funding Open Source Security, Expiring Root CA, Mariana Trench - ASW #168
The Power of Developer-First Security - Hillary Benson - ASW #168
AppSec Orchestration/Correlation & DevSecOps Efficiency - Anita D'Amico, Patrick Carey - ASW #167
Exchange's Great Leak, RCE in VMware, IoT Bug in MQTT, & Chrome's Memory Safety Nets - ASW #167
OMIGOD, FORCEDENTRY, Code Ownership, Security as a Product, & IoT Device Criteria - ASW #166
Transforming Modern Software Development with Developer-First AppSec - Jeff Williams - ASW #166