Application Security Weekly (Video)

Détails du podcast

Informations techniques et générales issues du flux RSS du podcast.

Site

RSS

Apple

Classements récents

Dernières positions dans les classements Apple Podcasts et Spotify.

Liens partagés entre épisodes et podcasts

Liens présents dans les descriptions d'épisodes et autres podcasts les utilisant également.

https://www.securityweekly.com/asw
732 partages
http://securityweekly.com
76 partages
https://securityweekly.com/imperva
14 partages

https://www.twitter.com/securityweekly
193 partages
https://twitter.com/OwaspSAMM
4 partages

https://www.youtube.com/securityweekly
32 partages
https://www.youtube.com/channel/UCEZDbvQrj5APg5cEET49A_g
3 partages
https://www.youtube.com/watch?v=mDKfZlQJO3k
2 partages

Qualité et score du flux RSS

Évaluation technique de la qualité et de la structure du flux RSS.

Historique des publications

Répartition mensuelle des publications d'épisodes au fil des années.

Derniers épisodes publiés

Liste des épisodes récents, avec titres, durées et descriptions.

RCE from Iconv + PHP, Fuzzing a Codec, Fuzzing LLMs, Revisiting Recall - ASW #302

mardi 8 octobre 2024 • Durée 37:03

The many lessons to take away from a 24-year old flaw in glibc and the mastery in crafting an exploit in PHP, changing a fuzzer's configuration to find more flaws, fuzzing LLMs for prompt injection and jailbreaks, security hardening of baseband code, revisiting the threat models in Microsoft's Recall, and more!

Show Notes: https://securityweekly.com/asw-302

Lire plusRéduire

The Future of Zed Attack Proxy - Simon Bennetts, Ori Bendet - ASW #302

mardi 8 octobre 2024 • Durée 35:34

Zed Attack Proxy has been a crucial web app testing tool for decades. It's also had a struggle throughout 2024 to obtain funding that would enable the tool to add more features while remaining true to its open source history. Simon Bennetts, founder of ZAP, and Ori Bendet from Checkmarx update us on that journey, share some exploration of LLM fuzzing that ZAP has been working on, and what the future looks like for this well-loved project.

Segment Resources:

Show Notes: https://securityweekly.com/asw-302

Lire plusRéduire

Changing the Course of IoT's Future from Its Insecure Past - Paddy Harrington - ASW #297

mardi 27 août 2024 • Durée 37:21

IoT devices are notorious for weak designs, insecure implementations, and a lifecycle that mostly ignores patching. We look at external factors that might lead to change, like the FCC's cybersecurity labeling for IoT. We explore the constraints that often influence poor security on these devices, whether those constraints are as consequential given modern appsec practices, and what the opportunities are to make these devices more secure for everyone.

Segment resources:

https://www.fcc.gov/document/cybersecurity-labeling-program-internet-things-iot-products

Show Notes: https://securityweekly.com/asw-297

Lire plusRéduire

Building a Scanner and a Community with Zed Attack Proxy - Simon Bennetts - ASW #254

mardi 12 septembre 2023 • Durée 36:43

Zed Attack Proxy is an essential tool for web app pentesting. The project just recently moved from OWASP to the Secure Software Project. Hear about the challenges of running an OSS security project, why Simon got involved in the first place, and why successful projects are about more than just code.

Segment Resources:

Show Notes: https://securityweekly.com/asw-254

Lire plusRéduire

Broadening What We Call AppSec - Christien Rioux - ASW Vault

mardi 5 septembre 2023 • Durée 35:36

Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on January 10, 2022. There's an understandable focus on "shift left" in modern DevOps and appsec discussions. So what does it take to broaden what we call appsec into something effective for modern apps, whether they're on the web, mobile, or cloud? We'll talk about moving on from niche offerings into successful appsec programs.

Show Notes: https://securityweekly.com/vault-asw-4

Lire plusRéduire

Go Crypto in Practice, Excel Executes Python, Protecting Users, DARPA Distills - ASW #253

mardi 29 août 2023 • Durée 34:34

A Go Crypto presentation from Real World Crypto, Excel releases support for Python, protecting users from malware like the Luna Grabber and WinRAR RCE, DARPA's V-SPELLS project, and more!

Show Notes: https://securityweekly.com/asw-253

Lire plusRéduire

How Can Security Be Smart About Using AI? - Jeff Pollard - ASW #253

mardi 29 août 2023 • Durée 39:25

We go deep on LLMs and generative AIs to shine a light on areas that security leaders should focus on. There are technical concerns like prompt injection and access controls, and privacy concerns in training and usage. But there are also areas where security tools are starting to address these concerns as well as areas where security tools are adopting AI themselves. We'll share where we see AI showing promise, as well as where we suspect it's still premature.

Segment resources:

https://www.forrester.com/blogs/defending-ai-models-from-soon-to-yesterday/
https://www.forrester.com/blogs/generative-ai-goes-mainstream-in-security-with-microsoft-security-copilot/
https://www.forrester.com/blogs/chatgpt-cybersecurity-ramifications-beyond-malware/
https://www.forrester.com/report/securing-generative-ai/RES179497
https://www.forrester.com/report/generative-ai-what-it-means-for-security/RES179522

Show Notes: https://securityweekly.com/asw-253

Lire plusRéduire

Discord.io Stops, Azure AD Pops, Zoom AI Drops, Model Confusion Attacks, Early XSS - ASW #252

mardi 22 août 2023 • Durée 37:30

Discord.io ceases to be, Azure AD breach to get scrutiny from the CSRB, Zoom's AI stumbles show security concerns, model confusion attacks, a look at how far we have -- and haven't -- come with XSS flaws, an approachable article on AI, and more!

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw-252

Lire plusRéduire

Security in a Cloud Native World & Mobile App Attacks - Asaf Ashkenazi, Jason Rolleston - ASW #252

lundi 21 août 2023 • Durée 30:32

Modern applications are transforming how businesses serve their customers, employees, and partners. But they also challenge security teams with limited to no visibility or control while expanding an organization's attack surface. Jason Rolleston, vice president and general manager of VMware Carbon Black, discusses how security teams can enable their companies to safely adopt modern application environments.

Segment Resources:

https://blogs.vmware.com/security/2023/07/announcing-cloud-native-detection-and-response-for-carbon-black.html

This segment is sponsored by VMWare Carbon Black. Visit https://securityweekly.com/vmwarebh to learn more about them!

In today's mobile-first world, where Android and iOS apps are crucial for customer engagement, companies often overlook the vulnerability of their applications - which poses a growing risk to the enterprise. While business cybersecurity measures are robust, hackers exploit the app path to circumvent server-side security. To help you understand the risks and safeguard your mobile apps and your customer PII, Asaf Ashkenazi will talk about the top mobile app attacks, the real-world implications, the blind spot in many company security teams, and easy ways to protect, detect and respond to this growing threat.

Segment Resources:

[Asaf Ashkenazi introduces Verimatrix XTD](https://youtu.be/j3mJoc8OSY8)
[Verimatrix XTD](https://www.verimatrix.com/cybersecurity/verimatrix-xtd/)
[Verimatrix's Triple-Threat Initiative Enhances Mobile App Security](https://www.itsecurityguru.org/2023/04/13/verimatrixs-triple-threat-initiative-enhances-mobile-app-security/)

This segment is sponsored by Verimatrix. Visit https://securityweekly.com/verimatrixbh to learn more about them!

DARPA's AI Challenge, CISA Wants Secure Open Source, 5 Years of Vuln Research - ASW #251

mardi 15 août 2023 • Durée 33:44

DARPA unleashes an AI Cyber Challenge to find flaws, CISA asks for input on securing open source software and memory safety, what five years of vuln research shows for vuln management programs, siphoning security tokens from VS Code, and more!

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw-251

Lire plusRéduire

Podcasts et contenus similaires

Autres podcasts ou contenus associés partageant des thèmes ou audiences similaires.

Application Security Weekly (Video) – Détails, épisodes et analyse

Détails du podcast

Classements récents

Apple Podcasts

Spotify

Liens partagés entre épisodes et podcasts

Qualité et score du flux RSS

Historique des publications

Derniers épisodes publiés

Podcasts Similaires Basées sur le Contenu

Apple Podcasts

Spotify

Podcasts Similaires Basées sur le Contenu

Application Security Weekly (Video) – Détails, épisodes et analyse

Détails du podcast

Classements récents

Apple Podcasts

Spotify

Liens partagés entre épisodes et podcasts

Other99+

Twitter5

Youtube27

Qualité et score du flux RSS

Historique des publications

Derniers épisodes publiés

Podcasts et contenus similaires

Podcasts Similaires Basées sur le Contenu

Apple Podcasts

Spotify

Podcasts Similaires Basées sur le Contenu

Other99+

Twitter5

Youtube27