معلومات عن هذا البودكاست 🔗
About all things AppSec, DevOps, and DevSecOps. Hosted by Mike Shema and John Kinsella, the podcast focuses on helping its audience find and fix software flaws effectively.
تردد التحديث:
weekly
متوسط طول الصوت:
39 minutes
مقابلات الضيوف
لديها رعاة
بودكاست الفيديو
الإنجليزية
الولايات المتحدة
735 حلقة
منذ 6 يناير، 2018
episodic
AUDIENCE OF THIS PODCAST 🔗
~95.35% of listeners are from United States.
🇺🇸
US
95.35%
🇮🇳
IN
1.63%
🇫🇷
FR
0.54%
🇲🇰
MK
0.54%
🇨🇦
CA
0.40%
🇬🇧
GB
0.27%
🇵🇭
PH
0.27%
🇳🇬
NG
0.13%
🇦🇺
AU
0.13%
🇳🇱
NL
0.13%
🇨🇭
CH
0.13%
🇫🇮
FI
0.13%
🇹🇼
TW
0.13%
🇧🇩
BD
0.13%
Others
0.09%
* Data source: directly measured on Listen Notes. الوقت الفعلي
أحدث حلقة 🔗
AI-enabled cyber attackers will check every third-party path into an application at scale and speed. The same process can help defenders just as much, but it's only as effective as the human expertise guiding it. Andrew Wesie, Xint co-founder and CTO. explains how human engineering in harness const…
البحث في الحلقات الماضية
البحث في الحلقات السابقة من Application Security Weekly (Video).
الحلقات السابقة 🔗
Following the catalog of CVEs is great for enumeration, but chasing those CVEs for patching is terrible for strategy. Jeremiah Grossman shows what breach data tells us about the differences between having over 400,000 CVEs, a few thousand KEVs, and a few hundred ways that attackers compromise orgs.…
Proactive security doesn't have to wait for a vuln to be disclosed. Even if a patch isn't available, it's possible to deploy controls and design systems to be resilient against how vulns are exploited. Rashid Feroze talks about runtime security and the benefits of deploying eBPF filters to improve …
The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the projec…
To celebrate our 404th episode we discuss what's not found in modern appsec and what still exists that should become not found. The conversation starts with a classic problem of appsec -- looking for a reliable vuln prioritization methodology. But we expand from there to challenge whether a focus o…
The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined …
Finding flaws with LLMs and agents is changing bug bounty programs. But it's not necessarily changing how orgs fix those flaws. Shlomie Liberow shares his experience across a decade of bounty programs and how they have changed for researchers and orgs. He explains why fixing the bug reported throug…
Prompt injection demonstrates one of the major challenges in securing LLMs and agents -- how do you ensure an agent ignores attackers and only does what you instructed it to do. The flaw highlights how LLMs mix inputs, context, and outputs without any strict boundaries between them. Julie Brunias j…
While agents and LLMs haven't fundamentally changed core mobile vulnerability types, they have supercharged speed, scale, and accessibility—democratizing threats like automated phishing, synthetic identity fraud, and easier identification of hard-coded secrets. Ryan Lloyd and Jason Cortlund break d…
We showcase recordings from this year's Black Hat.
The Hidden Risks of the AI Supply Chain - Black Hat interview with Michael Leland, VP and Field CTO of Island
Agents can independently discover and install tools, but the emerging ecosystem of Skills and MCP servers lacks many of the trust and se…
إخلاء المسؤولية: البودكاست والأعمال الفنية المضمنة في هذه الصفحة مأخوذة من Mike Shema، وهي مملوكة لمالكها وليست تابعة لشركة Listen Notes, Inc أو معتمدة منها.
محرك بحث البودكاست
يمكنك استخدام موقعنا الإلكتروني للبحث في ملفات podcast3,834,647وحلقات197,305,122حسب الأشخاص أو الأماكن أو المواضيع.
I have no special talent. I am only passionately curious, and
I listen to podcasts.
‐ Albert "Llamacorn" Einstein
البحث في الحلقات الماضية
البحث في الحلقات السابقة من Application Security Weekly (Video).
المطالبة بهذا البودكاست
Why to claim podcasts?
If you are a podcaster, the best way to manage your podcasts on Listen Notes is by claiming your Listen Notes
podcast pages.
It is a great, free way to engage the podcast community and increase the visibility of your podcasts.
After claiming your Listen Notes podcast pages, you will be able to:
✓
Manually refresh the RSS feed to sync up
✓
Get a verified badge (
✓
) alongside with your podcast name on Listen Notes
✓
Post الإعلانات المبوبة for sponsorship,
guests, co-hosts,
cross-promotion...
✓
Respond to listener comments on Listen Notes
✓
Use speech-to-text techniques to transcribe your show and
edit transcripts
✓
Improve the presence of your podcasts, e.g., self-service
مقابلة مع صانع بودكاست...
✓
If you share your Listen Notes page and at-mention @ListenNotes
on X (formerly Twitter),
حسابنا الرسمي على X (المعروف سابقًا باسم Twitter) will retweet to promote
your show to our followers.
Coming soon:
◯ Self-service promotion on Listen Notes
◯ Track your podcast stats on Listen
Notes, e.g., listens, page
views...
◯ Manage episodes
تعديل
شكراً على مساعدتنا في الحفاظ على قاعدة بيانات البودكاست مُحدَّثة.
