À PROPOS DE CE PODCAST 🔗
About all things AppSec, DevOps, and DevSecOps. Hosted by Mike Shema and John Kinsella, the podcast focuses on helping its audience find and fix software flaws effectively.
Fréquence de mise à jour:
weekly
Durée audio moyenne:
39 minutes
Entretiens avec des invités
A des sponsors
Podcast vidéo
Anglais
États-Unis
735 épisodes
depuis 6 janvier 2018
episodic
AUDIENCE OF THIS PODCAST 🔗
~95.35% of listeners are from United States.
🇺🇸
US
95.35%
🇮🇳
IN
1.63%
🇫🇷
FR
0.54%
🇲🇰
MK
0.54%
🇨🇦
CA
0.40%
🇬🇧
GB
0.27%
🇵🇭
PH
0.27%
🇳🇬
NG
0.13%
🇦🇺
AU
0.13%
🇳🇱
NL
0.13%
🇨🇭
CH
0.13%
🇫🇮
FI
0.13%
🇹🇼
TW
0.13%
🇧🇩
BD
0.13%
Others
0.09%
* Data source: directly measured on Listen Notes. en temps réel
DERNIER ÉPISODE 🔗
AI-enabled cyber attackers will check every third-party path into an application at scale and speed. The same process can help defenders just as much, but it's only as effective as the human expertise guiding it. Andrew Wesie, Xint co-founder and CTO. explains how human engineering in harness const…
RECHERCHER LES ÉPISODES PASSÉS
Rechercher les épisodes précédents de Application Security Weekly (Video).
ÉPISODES PRÉCÉDENTS 🔗
Following the catalog of CVEs is great for enumeration, but chasing those CVEs for patching is terrible for strategy. Jeremiah Grossman shows what breach data tells us about the differences between having over 400,000 CVEs, a few thousand KEVs, and a few hundred ways that attackers compromise orgs.…
Proactive security doesn't have to wait for a vuln to be disclosed. Even if a patch isn't available, it's possible to deploy controls and design systems to be resilient against how vulns are exploited. Rashid Feroze talks about runtime security and the benefits of deploying eBPF filters to improve …
The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the projec…
To celebrate our 404th episode we discuss what's not found in modern appsec and what still exists that should become not found. The conversation starts with a classic problem of appsec -- looking for a reliable vuln prioritization methodology. But we expand from there to challenge whether a focus o…
The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined …
Finding flaws with LLMs and agents is changing bug bounty programs. But it's not necessarily changing how orgs fix those flaws. Shlomie Liberow shares his experience across a decade of bounty programs and how they have changed for researchers and orgs. He explains why fixing the bug reported throug…
Prompt injection demonstrates one of the major challenges in securing LLMs and agents -- how do you ensure an agent ignores attackers and only does what you instructed it to do. The flaw highlights how LLMs mix inputs, context, and outputs without any strict boundaries between them. Julie Brunias j…
While agents and LLMs haven't fundamentally changed core mobile vulnerability types, they have supercharged speed, scale, and accessibility—democratizing threats like automated phishing, synthetic identity fraud, and easier identification of hard-coded secrets. Ryan Lloyd and Jason Cortlund break d…
We showcase recordings from this year's Black Hat.
The Hidden Risks of the AI Supply Chain - Black Hat interview with Michael Leland, VP and Field CTO of Island
Agents can independently discover and install tools, but the emerging ecosystem of Skills and MCP servers lacks many of the trust and se…
Avertissement: Le podcast et les illustrations intégrés sur cette page proviennent de Mike Shema, qui est la propriété de son propriétaire et n'est ni affilié ni approuvé par Listen Notes, Inc.
MOTEUR DE RECHERCHE DE PODCASTS
Vous pouvez utiliser notre site Web pour rechercher des podcasts3,834,647et des épisodes197,305,122par personnes, lieux ou sujets.
Investir dans le savoir offre le meilleur rendement, c'est pourquoi j'écoute des podcasts.
‐ Benjamin "Llamacorn" Franklin
RECHERCHER LES ÉPISODES PASSÉS
Rechercher les épisodes précédents de Application Security Weekly (Video).
DEMANDER CE PODCAST
Why to claim podcasts?
If you are a podcaster, the best way to manage your podcasts on Listen Notes is by claiming your Listen Notes
podcast pages.
It is a great, free way to engage the podcast community and increase the visibility of your podcasts.
After claiming your Listen Notes podcast pages, you will be able to:
✓
Manually refresh the RSS feed to sync up
✓
Get a verified badge (
✓
) alongside with your podcast name on Listen Notes
✓
Post petites annonces for sponsorship,
guests, co-hosts,
cross-promotion...
✓
Respond to listener comments on Listen Notes
✓
Use speech-to-text techniques to transcribe your show and
edit transcripts
✓
Improve the presence of your podcasts, e.g., self-service
interview de podcasteur...
✓
If you share your Listen Notes page and at-mention @ListenNotes
on X (formerly Twitter),
notre compte officiel sur X (anciennement Twitter) will retweet to promote
your show to our followers.
Coming soon:
◯ Self-service promotion on Listen Notes
◯ Track your podcast stats on Listen
Notes, e.g., listens, page
views...
◯ Manage episodes
MODIFIER
Merci de nous avoir aidé à tenir la base de données de podcasts à jour.
