All Episodes
Application Security Weekly (Video) — 732 episodes · page 5 of 8
OWASP Top 10, CISA Bad Practices, Azurescape, Confluence RCE, & API Security Tokens - ASW #165
Findings From the 2021 AppSec Shift Left Progress Report - Manish Gupta - ASW #165
ChaosDB, OpenSSL String Bugs, Revealing Locations, & More Top 15 Vulns - ASW #164
A DevOps Perspective on Risk Tolerance & Risk Transfer - Caroline Wong - ASW #164
BlackBerry's BadAlloc, Glibc's NULL, Backtick Command Injection, & ProxyLogon Details - ASW #163
Challenges in Open Source Application Security - Shubhra Kar - ASW #163
Cracked Concatenation, Injection Against DNS, Allstar GitHub, & DEF CON Highlights - ASW #162
DevSecOps - Making It Real - Mike Rothman - ASW #162
Securing Modern Web Apps: Development Techniques are Changing - Tom Hudson - ASW #161
Router Auth Bypass, Weak IoT RNG, HTTP/2 Request Smuggling, & Kindle Fuzzing - ASW #161
PunkSpider, Bug Bounties, RCE in PyPI, Kernel Pwning With eBPF, & Top Vulns From CISA - ASW #160
Platform Firmware Security - Maggie Jauregui - ASW #160
CWE Top 25, Bugs in Inconstancies, Sequoia Vuln, Twitter Transparency, & Cloud Risks - ASW #159
Navigating the Seas of Security in Serverless Functions - Peter Klimek - ASW #159
Code Comments, Decision Trees, Windows Hello, Telegram Analysis, & Cloud Risks - ASW #158
The Role of Open Source in DevSecOps - David DeSanto - ASW #158
Password Mismanager, Trusted Types vs. DOM XSS, PrintNightmare, & Fault Injections - ASW #157
Web App and API Security Needs to Be Modernized: Here's How - Sean Leach - ASW #157
Semgrep, Microsoft Signs With Rootkits, ATT&CK/D3FEND, & Injured Android - ASW #156
Scaling Your Application Security Program - Clint Gibler - ASW #156
Supply Chain Integrity, Format Strings, Systemd Bug, Instagram Bounty, & Refactoring - ASW #155
Challenges of DAST Scanners / Adoption by Developers - Nuno Loureiro, Tiago Mendo - ASW #155
ALPACA, EA Breach, sprintf Lives, Go Fuzzing, K8s Goat, & OT Basics - ASW #154
OWASP SAMM - Software Assurance Maturity Model - Sebastian Deleersnyder - ASW #154
HTTP Goes QUIC, Security & Humans, Amazon Sidewalk Privacy, & Product Abuse - ASW #153
API Security: Understanding Threats to Better Protect Your Organization - Daniel Hampton - ASW #153
IIS Bug, Browsers & Androids & Supply Chains Oh My! - ASW #152
Bringing AppSec to a Modern CI Pipeline - Manish Gupta - ASW #152
CNCF Supply Chain, Frag Attacks, Securing Webhooks, & Complexity vs. Security - ASW #151
Third Party Software Risk on the Web - Aanand Krishnan - ASW #151
AirTags & Threat Models, Qualcomm Modem Vuln, Exim RCE(s), & Binary Hardening - ASW #150
Delivering On the Promise of Application Security - Ankur Shah - ASW #150
BadAlloc Vulns, Gatekeeper Bypass, & More Spectre in Micro-Op Caches - ASW #149
Why Developers Need to Think Differently About Software Security - Rey Bango - ASW #149
Signal Aesthetics, AirDrop Privacy, Safety vs. Security, & Data Ordering Attacks - ASW #148
Deceptive Diffs From Subversive Submitters - ASW #148
Rust in Android, Vuln Disclosure, Postmortems, & BootHole Follow-Up - ASW #147
Supply Chain Management - Doug Barbin - ASW #147
Malicious PHP Commits, OAuth Attacks & XML Injection, & Zines For DevSecOps - ASW #146
Shifting Right: What Security Engineers Can Learn From DevSecOps - Leif Dreizler - ASW #146
TikTok Analysis, Patching Patches, CI/CD Integrity, Faster Fuzzing, & Slack Safety - ASW #145
OWASP Top 10 of 2021 - Andrew van der Stock - ASW #145
Supply Chains in Azure SDK/Xcode, GitHub Sessions, & GCP VRP - ASW #144
Approaching AppSec Like a Hacker - Johanna Ydergard, Roberto Giachetta - ASW #144
Unauth'd RCE, "Regexploits", Post-Spectre Web, & SigStore Signing - ASW #143
Cloud Native Security Platforms - John Morello - ASW #143
Security Engineering, Evil Packages, Exchange SSRF, & Observability - ASW #142
Privacy, Data Security & Compliance - Cynthia Burke - ASW #142
JSON, OpenSSL, Educational Resources, & Flaws in CodeQL - ASW #141
Hackable; How to do Application Security Right - Ted Harrington - ASW #141
Dependency Confusion, Suspender Falls, Web Shells, & AppSec Scale - ASW #140
Targeting, Exploiting, & Defending Linux - Brandon Edwards - ASW #140
BBPLR, API Security Trends, Memory Unsafety, & Patching 0-Days - ASW #139
Being a Serial Entrepreneur, Business Leader, & Hacker - Alissa Knight - ASW #139
Sudo Vuln, Libgcrypt, BlastDoor on iMessage, & AWS Lambda security - ASW #138
Groundhog Day - It's Time to Reset the Script on Vulnerabilities - John Delaroderie - ASW #138
KindleDrip, State of Messaging State Machines, DoH, & Data Security Strategies - ASW #137
Reading Industry Analyst Tea Leaves To Predict The Future - Taylor McCaslin - ASW #137
Google 2FA Cloning, Speed vs. Security, & "Hack The Army" Bug Bounty 3.0 - ASW #136
Fuzz Testing - Andrei Serban - ASW #136
Kubernetes Clusters, Microsoft Solarigate, & Apple's Security DIY - ASW #135
Security By Design - ASW #135
Atheris Python Fuzzer, Bronze Bit Attack, & FireEye Highlights - ASW #134
Freedom From Computing Environments - Ev Kontsevoy - ASW #134
Google Play Bug, GitHub, iPhone Radio Reboots, & Docker Hub Vulns - ASW #133
Security Web Applications Against Modern Threats - John Delaroderie, Mike Manrod - ASW #133
Top CyberSec Skills for 2021, Xbox Gamertag Bug, & MobileIron RCE Flaw - ASW #132
Security Decisions During Application Development - Tim Mackey - ASW #132
Drupal Flaws, DevSecOps Implementation, & Cloud Native Security White Paper - ASW #131
Threat Modeling Deep Dive - ASW #131
'Platypus' Attack, IDOR DOD Bug, & 2 More Chrome 0-Days - ASW #130
Automated Hacker Knowledge - Rickard Carlsson - ASW #130
Security Is a Feature - Keith Hoodlet - ASW #129
China's Top Hacking Contest, GitHub Actions, & Vulnonym - ASW #129
Lax IoT, Adobe Flash Croaks, Link Preview Vulns, & Security Theatre! - ASW #128
Azure App Service & Cloud-Native Signal Sciences Deployments - Alfred Chung - ASW #128
Cyber Risk in Industrial IoT, Firefox 'Site Isolation', & Chrome 0-Day Bug - ASW #127
Cyber Resiliency Through Self-Healing Cloud Infrastructure - Cesar Rodriguez - ASW #127
Windows "Ping of Death", SonicWall VPN RCE , & MediaTek BootROM Glitch - ASW #126
The Future of Application Security Testing (AST) - Taylor McCaslin - ASW #126
Fortinet SIEM RCE, Facebook Bug Bounty, & Anti-Virus Vulnerabilities - ASW #125
Application Security Best Practices - James Manico - ASW #125
DOMOS 5.8 OS Command Injection, API Shield, & TRB245 Vulnerabilities - ASW #124
Things Every Developer Should Know About Security - Chris Romeo - ASW #124
Bypassing TikTok's MFA, Instragram RCE, & Chrome Security Updates - ASW #123
The Difference Between Finding Vulns & Securing Apps - ASW #123
Project OneFuzz, Bluetooth Spoofing Bug, & Safeguarding Secrets - ASW #122
Visualizing & Detecting Threats For Your Custom Application - Justin Massey - ASW #122
RCE via BACKBLAZE, Microsoft Patch Tuesday, & CRYLOGGER - ASW #121
The People & Process of DevOps - Frank Catucci - ASW #121
GitHub to Ruby 2.7, CISO Success, & Lessons From Uber - ASW #120
Detecting Threats & Avoiding Misconfigs In The Cloud-Age - Marc Tremsal - ASW #120
ATM Attacks, gcploit, & ClusterFuzz - ASW #119
DevOps-First Application Security For Mid-Markets - Sundar Krish - ASW #119
AWS S3 Crypto SDK, ReVoLTE Attack, & Microsoft Bug Bounties - ASW #118
Immutable Security For Immutable Infrastructure - Cesar Rodriguez - ASW #118
SWVHSC: Amazon GuardDuty, Sandboxing & Workload Isolation, & No More SHA-1 - ASW #117
SWVHSC: How Does Sec Live In A DevOps World? - Mike Rothman - ASW #117
TaskRouter JS SDK, EL1/EL3 Vulnerability, & 234 Alexa Skills Store Violations - ASW #116
Fixing Vulnerabilities Effectively & Efficiently - John Matherly - ASW #116