על אודות פודקאסט זה 🔗
About all things AppSec, DevOps, and DevSecOps. Hosted by Mike Shema and John Kinsella, the podcast focuses on helping its audience find and fix software flaws effectively.
תדירות עדכון:
weekly
אורך אודיו ממוצע:
39 minutes
ראיונות אורחים
יש ספונסרים
פודקאסט וידאו
אנגלית
ארצות הברית
735 פרקים
מאז 6 בינואר 2018
episodic
AUDIENCE OF THIS PODCAST 🔗
~95.35% of listeners are from United States.
🇺🇸
US
95.35%
🇮🇳
IN
1.63%
🇫🇷
FR
0.54%
🇲🇰
MK
0.54%
🇨🇦
CA
0.40%
🇬🇧
GB
0.27%
🇵🇭
PH
0.27%
🇳🇬
NG
0.13%
🇦🇺
AU
0.13%
🇳🇱
NL
0.13%
🇨🇭
CH
0.13%
🇫🇮
FI
0.13%
🇹🇼
TW
0.13%
🇧🇩
BD
0.13%
Others
0.09%
* Data source: directly measured on Listen Notes. בזמן אמת
הפרק החדש ביותר 🔗
AI-enabled cyber attackers will check every third-party path into an application at scale and speed. The same process can help defenders just as much, but it's only as effective as the human expertise guiding it. Andrew Wesie, Xint co-founder and CTO. explains how human engineering in harness cons…
חיפוש פרקים ישנים
חפש פרקים קודמים של Application Security Weekly (Video).
פרקים קודמים 🔗
Following the catalog of CVEs is great for enumeration, but chasing those CVEs for patching is terrible for strategy. Jeremiah Grossman shows what breach data tells us about the differences between having over 400,000 CVEs, a few thousand KEVs, and a few hundred ways that attackers compromise orgs…
Proactive security doesn't have to wait for a vuln to be disclosed. Even if a patch isn't available, it's possible to deploy controls and design systems to be resilient against how vulns are exploited. Rashid Feroze talks about runtime security and the benefits of deploying eBPF filters to improve…
The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the proje…
To celebrate our 404th episode we discuss what's not found in modern appsec and what still exists that should become not found. The conversation starts with a classic problem of appsec -- looking for a reliable vuln prioritization methodology. But we expand from there to challenge whether a focus …
The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined…
Finding flaws with LLMs and agents is changing bug bounty programs. But it's not necessarily changing how orgs fix those flaws. Shlomie Liberow shares his experience across a decade of bounty programs and how they have changed for researchers and orgs. He explains why fixing the bug reported throu…
Prompt injection demonstrates one of the major challenges in securing LLMs and agents -- how do you ensure an agent ignores attackers and only does what you instructed it to do. The flaw highlights how LLMs mix inputs, context, and outputs without any strict boundaries between them. Julie Brunias …
While agents and LLMs haven't fundamentally changed core mobile vulnerability types, they have supercharged speed, scale, and accessibility—democratizing threats like automated phishing, synthetic identity fraud, and easier identification of hard-coded secrets. Ryan Lloyd and Jason Cortlund break …
We showcase recordings from this year's Black Hat.
The Hidden Risks of the AI Supply Chain - Black Hat interview with Michael Leland, VP and Field CTO of Island
Agents can independently discover and install tools, but the emerging ecosystem of Skills and MCP servers lacks many of the trust and s…
הצהרה: הפודקאסט והגרפיקה המוטבעים בדף זה הם מ-Mike Shema, שהוא רכושו של בעליו ואינו קשור או מאושר על ידי Listen Notes, Inc.
מנוע חיפוש PODCAST
אתה יכול להשתמש באתר שלנו כדי לחפש3,834,647פודקאסטים ופודקאסטים197,305,122לפי אנשים, מקומות או נושאים.
If I have seen further than others, it is by listening to podcasts and standing upon the shoulders of
giants.
‐ Isaac "Llamacorn" Newton
חיפוש פרקים ישנים
חפש פרקים קודמים של Application Security Weekly (Video).
בקש/י פודקאסט זה
Why to claim podcasts?
If you are a podcaster, the best way to manage your podcasts on Listen Notes is by claiming your Listen Notes
podcast pages.
It is a great, free way to engage the podcast community and increase the visibility of your podcasts.
After claiming your Listen Notes podcast pages, you will be able to:
✓
Manually refresh the RSS feed to sync up
✓
Get a verified badge (
✓
) alongside with your podcast name on Listen Notes
✓
Post מודעות מסווגות for sponsorship,
guests, co-hosts,
cross-promotion...
✓
Respond to listener comments on Listen Notes
✓
Use speech-to-text techniques to transcribe your show and
edit transcripts
✓
Improve the presence of your podcasts, e.g., self-service
ריאיון עם פודקאסטר...
✓
If you share your Listen Notes page and at-mention @ListenNotes
on X (formerly Twitter),
חשבון ה־X הרשמי שלנו (לשעבר Twitter) will retweet to promote
your show to our followers.
Coming soon:
◯ Self-service promotion on Listen Notes
◯ Track your podcast stats on Listen
Notes, e.g., listens, page
views...
◯ Manage episodes
