INFORMAZIONI SU QUESTO PODCAST 🔗
About all things AppSec, DevOps, and DevSecOps. Hosted by Mike Shema and John Kinsella, the podcast focuses on helping its audience find and fix software flaws effectively.
Frequenza di aggiornamento:
weekly
Durata media dell'audio:
39 minutes
Interviste agli ospiti
Ha degli sponsor
Podcast video
Inglese
Stati Uniti
735 episodi
da 06 Gennaio 2018
episodic
IN QUESTO PODCAST 🔗
AUDIENCE OF THIS PODCAST 🔗
~95.35% of listeners are from United States.
🇺🇸
US
95.35%
🇮🇳
IN
1.63%
🇫🇷
FR
0.54%
🇲🇰
MK
0.54%
🇨🇦
CA
0.40%
🇬🇧
GB
0.27%
🇵🇭
PH
0.27%
🇳🇬
NG
0.13%
🇦🇺
AU
0.13%
🇳🇱
NL
0.13%
🇨🇭
CH
0.13%
🇫🇮
FI
0.13%
🇹🇼
TW
0.13%
🇧🇩
BD
0.13%
Others
0.09%
* Data source: directly measured on Listen Notes. in tempo reale
ULTIMO EPISODIO 🔗
AI-enabled cyber attackers will check every third-party path into an application at scale and speed. The same process can help defenders just as much, but it's only as effective as the human expertise guiding it. Andrew Wesie, Xint co-founder and CTO. explains how human engineering in harness const…
CERCA TRA GLI EPISODI PASSATI
Cerca gli episodi passati di Application Security Weekly (Video).
EPISODI PRECEDENTI 🔗
Following the catalog of CVEs is great for enumeration, but chasing those CVEs for patching is terrible for strategy. Jeremiah Grossman shows what breach data tells us about the differences between having over 400,000 CVEs, a few thousand KEVs, and a few hundred ways that attackers compromise orgs.…
Proactive security doesn't have to wait for a vuln to be disclosed. Even if a patch isn't available, it's possible to deploy controls and design systems to be resilient against how vulns are exploited. Rashid Feroze talks about runtime security and the benefits of deploying eBPF filters to improve …
The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the projec…
To celebrate our 404th episode we discuss what's not found in modern appsec and what still exists that should become not found. The conversation starts with a classic problem of appsec -- looking for a reliable vuln prioritization methodology. But we expand from there to challenge whether a focus o…
The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined …
Finding flaws with LLMs and agents is changing bug bounty programs. But it's not necessarily changing how orgs fix those flaws. Shlomie Liberow shares his experience across a decade of bounty programs and how they have changed for researchers and orgs. He explains why fixing the bug reported throug…
Prompt injection demonstrates one of the major challenges in securing LLMs and agents -- how do you ensure an agent ignores attackers and only does what you instructed it to do. The flaw highlights how LLMs mix inputs, context, and outputs without any strict boundaries between them. Julie Brunias j…
While agents and LLMs haven't fundamentally changed core mobile vulnerability types, they have supercharged speed, scale, and accessibility—democratizing threats like automated phishing, synthetic identity fraud, and easier identification of hard-coded secrets. Ryan Lloyd and Jason Cortlund break d…
We showcase recordings from this year's Black Hat.
The Hidden Risks of the AI Supply Chain - Black Hat interview with Michael Leland, VP and Field CTO of Island
Agents can independently discover and install tools, but the emerging ecosystem of Skills and MCP servers lacks many of the trust and se…
Dichiarazione di non responsabilità: Il podcast e la grafica incorporati in questa pagina provengono da Mike Shema, che è di proprietà del suo proprietario e non è affiliato o approvato da Listen Notes, Inc.
MOTORE DI RICERCA PODCAST
Puoi utilizzare il nostro sito Web per cercare podcast3,834,647ed episodi197,305,122per persone, luoghi o argomenti.
If I have seen further than others, it is by listening to podcasts and standing upon the shoulders of
giants.
‐ Isaac "Llamacorn" Newton
CERCA TRA GLI EPISODI PASSATI
Cerca gli episodi passati di Application Security Weekly (Video).
RIVENDICA QUESTO PODCAST
Why to claim podcasts?
If you are a podcaster, the best way to manage your podcasts on Listen Notes is by claiming your Listen Notes
podcast pages.
It is a great, free way to engage the podcast community and increase the visibility of your podcasts.
After claiming your Listen Notes podcast pages, you will be able to:
✓
Manually refresh the RSS feed to sync up
✓
Get a verified badge (
✓
) alongside with your podcast name on Listen Notes
✓
Post annunci economici for sponsorship,
guests, co-hosts,
cross-promotion...
✓
Respond to listener comments on Listen Notes
✓
Use speech-to-text techniques to transcribe your show and
edit transcripts
✓
Improve the presence of your podcasts, e.g., self-service
intervista a un podcaster...
✓
If you share your Listen Notes page and at-mention @ListenNotes
on X (formerly Twitter),
il nostro account ufficiale X (in precedenza Twitter) will retweet to promote
your show to our followers.
Coming soon:
◯ Self-service promotion on Listen Notes
◯ Track your podcast stats on Listen
Notes, e.g., listens, page
views...
◯ Manage episodes
MODIFICA
Grazie, ci hai aiutato a mantenere aggiornato il database dei podcast.
