SELLEST PODCASTIST 🔗
About all things AppSec, DevOps, and DevSecOps. Hosted by Mike Shema and John Kinsella, the podcast focuses on helping its audience find and fix software flaws effectively.
Värskendamise sagedus:
weekly
Keskmine heli pikkus:
39 minutes
Külalisintervjuud
On sponsoreid
Videopodcast
Inglise
Ameerika Ühendriigid
735 jagu
alates 6. jaanuar 2018
episodic
AUDIENCE OF THIS PODCAST 🔗
~95.35% of listeners are from United States.
🇺🇸
US
95.35%
🇮🇳
IN
1.63%
🇫🇷
FR
0.54%
🇲🇰
MK
0.54%
🇨🇦
CA
0.40%
🇬🇧
GB
0.27%
🇵🇭
PH
0.27%
🇳🇬
NG
0.13%
🇦🇺
AU
0.13%
🇳🇱
NL
0.13%
🇨🇭
CH
0.13%
🇫🇮
FI
0.13%
🇹🇼
TW
0.13%
🇧🇩
BD
0.13%
Others
0.09%
* Data source: directly measured on Listen Notes. reaalajas
VIIMANE OSA 🔗
AI-enabled cyber attackers will check every third-party path into an application at scale and speed. The same process can help defenders just as much, but it's only as effective as the human expertise guiding it. Andrew Wesie, Xint co-founder and CTO. explains how human engineering in harness const…
OTSI VARASEMAID OSASID
Otsi kanali Application Security Weekly (Video) viimaseid osasid.
EELMISED OSAD 🔗
Following the catalog of CVEs is great for enumeration, but chasing those CVEs for patching is terrible for strategy. Jeremiah Grossman shows what breach data tells us about the differences between having over 400,000 CVEs, a few thousand KEVs, and a few hundred ways that attackers compromise orgs.…
Proactive security doesn't have to wait for a vuln to be disclosed. Even if a patch isn't available, it's possible to deploy controls and design systems to be resilient against how vulns are exploited. Rashid Feroze talks about runtime security and the benefits of deploying eBPF filters to improve …
The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the projec…
To celebrate our 404th episode we discuss what's not found in modern appsec and what still exists that should become not found. The conversation starts with a classic problem of appsec -- looking for a reliable vuln prioritization methodology. But we expand from there to challenge whether a focus o…
The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined …
Finding flaws with LLMs and agents is changing bug bounty programs. But it's not necessarily changing how orgs fix those flaws. Shlomie Liberow shares his experience across a decade of bounty programs and how they have changed for researchers and orgs. He explains why fixing the bug reported throug…
Prompt injection demonstrates one of the major challenges in securing LLMs and agents -- how do you ensure an agent ignores attackers and only does what you instructed it to do. The flaw highlights how LLMs mix inputs, context, and outputs without any strict boundaries between them. Julie Brunias j…
While agents and LLMs haven't fundamentally changed core mobile vulnerability types, they have supercharged speed, scale, and accessibility—democratizing threats like automated phishing, synthetic identity fraud, and easier identification of hard-coded secrets. Ryan Lloyd and Jason Cortlund break d…
We showcase recordings from this year's Black Hat.
The Hidden Risks of the AI Supply Chain - Black Hat interview with Michael Leland, VP and Field CTO of Island
Agents can independently discover and install tools, but the emerging ecosystem of Skills and MCP servers lacks many of the trust and se…
Vastutamatussäte: Sellele lehele manustatud taskuhäälingusaade ja kunstiteosed pärinevad Mike Shema-lt, mis on selle omaniku omand ja ei ole seotud ettevõttega Listen Notes, Inc.
PODCASTIDE OTSINGUMOOTOR
Saate kasutada meie veebisaiti3,834,647taskuhäälingusaadete ja197,305,122osade otsimiseks inimeste, kohtade või teemade järgi.
Investeering teadmistesse annab parima tootluse, seega kuulan podcaste.
‐ Benjamin "Llamacorn" Franklin
OTSI VARASEMAID OSASID
Otsi kanali Application Security Weekly (Video) viimaseid osasid.
VALI SEE PODCAST
Why to claim podcasts?
If you are a podcaster, the best way to manage your podcasts on Listen Notes is by claiming your Listen Notes
podcast pages.
It is a great, free way to engage the podcast community and increase the visibility of your podcasts.
After claiming your Listen Notes podcast pages, you will be able to:
✓
Manually refresh the RSS feed to sync up
✓
Get a verified badge (
✓
) alongside with your podcast name on Listen Notes
✓
Post kuulutused for sponsorship,
guests, co-hosts,
cross-promotion...
✓
Respond to listener comments on Listen Notes
✓
Use speech-to-text techniques to transcribe your show and
edit transcripts
✓
Improve the presence of your podcasts, e.g., self-service
taskuhäälingu tegija intervjuu...
✓
If you share your Listen Notes page and at-mention @ListenNotes
on X (formerly Twitter),
meie ametlik X-i konto (endine Twitter) will retweet to promote
your show to our followers.
Coming soon:
◯ Self-service promotion on Listen Notes
◯ Track your podcast stats on Listen
Notes, e.g., listens, page
views...
◯ Manage episodes
MUUDA
Aitäh, et aitad hoida podcastide andmebaasi ajakohasena.
