Ep. 5: SQL Injection

In this episode we talk about addressing the root cause of an issue versus the symptoms. How can the process of keeping application components updated be improved?     For more info go to https://www.developsec.com or follow us on twitter (@developsec).     DevelopSec provides application security …

Log4J has been the talk of the town recently and everyone is focused on the technical details of the specific vulnerabilities found. In this episode, James talks about the overarching ideas around dealing with vulnerable components. Are you vulnerable? If so, what needs to be done? For more info go…

In this episode we talk about the spell check feature of the browser and how it could present a risk to sensitive data.     Link to article referenced:  https://www.darkreading.com/application-security/spellchecking-google-chrome-microsoft-edge-browsers-leaks-passwords        For more info go to ht…

In this episode I talk about the evolving world of ransomware. I discuss a few examples of unique tactics the malicious actors are using to put pressure on organizations to pay the ransom.     Referenced Articles:  https://www.theregister.com/AMP/2024/04/30/finnish_psychotherapy_center_crook_senten…