Application Security Weekly Episode Index

1. TBD – 12:30 PM-01:00 PM
2. Application News – 01:00 PM-01:30 PM

No Guest Info

Coming Soon

1. Sam Placette, ThreatX – 12:30 PM-01:00 PM
2. Application News – 01:00 PM-01:30 PM

No Guest Info

Coming Soon

1. Sonali Shah, Invicti – 12:30 PM-01:00 PM
2. Application News – 01:00 PM-01:30 PM

No Guest Info

Coming Soon

1. Application News – 12:30 PM-01:00 PM
2. BlackHat Executive Interviews – 01:00 PM-01:30 PM

No Guest Info

Coming Soon

1. Application News – 12:30 PM-01:00 PM
2. BlackHat Executive Interviews – 01:00 PM-01:30 PM

No Guest Info

Coming Soon

1. Good, Not Perfect, AppSec – 12:30 PM-01:00 PM
2. Application News – 01:00 PM-01:30 PM

Tanya Janca

Coming Soon

1. Agility Broke AppSec. Now It’s Going to Fix It – 12:30 PM-01:00 PM
2. Auth Problems from Parsing, Slack’s Password Hashes, Twitter’s Info Breach – 01:00 PM-01:30 PM

Chen Gour Arie

Coming Soon

1. Reachability & Attackability – 12:30 PM-01:00 PM
2. Smart Lock and Simple Vulns, Macros and Secure Defaults, Breaches and Costs – 01:00 PM-01:30 PM

Manish Gupta

Published

1. How to Build a Successful Continuous Application Security Program – 12:30 PM-01:00 PM
2. Atlassian Vuln, Attacking OAuth, OpenSSF Security Audits, Tabletop Exercises – 01:00 PM-01:30 PM

Ferruh Mavituna

Published

1. 0-Day Vulnerabilities & What’s Next – 12:30 PM-01:00 PM
2. Retbleed, CSRB’s First Report, a Case-Sensitive Action, & Mac Malware Book – 01:00 PM-01:30 PM

Larry Maccherone

Published

1. The Security Challenges That Devs Encounter When Building Secure Apps – 12:30 PM-01:00 PM
2. iOS Lockdown Mode, 2FA in PyPI, CloudVulnDB, & Practical Attacks on ML – 01:00 PM-01:30 PM

Farshad Abasi

Published

1. How GraphQL & Template Injection Threats Influence App Architectures – 12:30 PM-01:00 PM
2. More Fuzzing, a Decade of OT Security, & Top Threats to Cloud Computing – 01:00 PM-01:30 PM

Mike Benjamin

Published

1. IE11 Goes to Zero — A History of Browser Security and Bug Bounties – 12:00 PM-12:30 PM
2. Hertzbleed, SynLapse, Java Deserialization, More MFA, Firmware Flaws, & Zombie 0-Day – 12:30 PM-01:00 PM

No Guest Info

Published

1. HTTP RFCs Have Evolved, Breaking Into Cloud, Scaling AppSec at Netflix, & Confluence – 12:30 PM-01:00 PM
2. Protect Entire IT Ecosystem with Cisco Security Cloud and The Culture Blindspot – 01:00 PM-01:30 PM

Jeetu Patel

Sonali Shah

Published

1. Answering the ‘How’ Questions of Software Security – 01:00 PM-01:30 PM
2. Pwn2own, Verizon’s DBIR, Zoom’s XMPP Flaws, $10M Bounty, & More Bad Packages – 01:30 PM-02:00 PM

Nikhil Gupta

Published

1. The Psychology of Training – 12:30 PM-01:00 PM
2. OWASP Top 10 for K8s, Firefox Process Isolation, Secure Software Factory, CFAA Policy – 01:00 PM-01:30 PM

Matias Madou

Published

1. Developing Future Cybersecurity Contributors – 12:30 PM-01:00 PM
2. Typosquatting, Curl’s Security Update, & OpenSSF’s 10 Point Mobilization Plan – 01:00 PM-01:30 PM

Brian Glas

Published

1. Securing SAP: Addressing the Critical & Complex Challenge – 12:30 PM-01:00 PM
2. Smart Contract Security, Heroku Breach, & Real World Crypto Highlights – 01:00 PM-01:30 PM

Christoph Nagy

Published

1. Bad Bots – Automated Threat Targeting Your Websites, Mobile Apps, & APIs – 12:30 PM-01:00 PM
2. ExtraReplica, Document.domain Disfavored, & Highlights From Thinkst Quarterly – 01:00 PM-01:30 PM

Lynn Marks

Published

1. What Does Software Supply Chain Security Threat Mean to Developers? – 12:30 PM-01:00 PM
2. Java’s ECDSA for Nought, Writing a Kernel RCE, Okta’s Conclusion, Log4Shell Hot Patch – 01:00 PM-01:30 PM

Dr. Chenxi Wang

Published

1. Appsec (and adjacent) Metrics – 12:30 PM-01:00 PM
2. OAuth Tokens Taken, Vulns in Medical IoT, Scoring a Proactive Security Culture – 01:00 PM-01:30 PM

No Guest Info

Published

1. Service Mesh & Zero Trust Kubernetes Security – 12:30 PM-01:00 PM
2. SSRF at a FinTech, Zoom’s Bounties, SLSA Build Provenance, & Raspberry Pi Credentials – 01:00 PM-01:30 PM

William Morgan

Published

1. Democratizing Software Security – 12:30 PM-01:00 PM
2. Escaping from BlastDoor’s Sandbox, Spring RCE, Old Zlib Flaw, Startup Security – 01:00 PM-01:30 PM

Eric Allard

Published

1. How to Build a Developer-First Application Security Program – 12:30 PM-01:00 PM
2. Okta & LAPSUS$, Fuzzing Rust, SQL Injection & Stale Code, Log4j Lessons – 01:00 PM-01:30 PM

Harshil Parikh

Published

1. Helping Secure OSS Software – 12:30 PM-01:00 PM
2. A Great Escape, Peace Not War, & How to Burp Good – 01:00 PM-01:30 PM

Alvaro Munoz

Published

1. Doing Application Security Right – 12:30 PM-01:00 PM
2. Dirty Pipe, AutoWarp Vuln in Azure, TLStorm Hits UPS Devices, Car Hacking – 01:00 PM-01:30 PM

Farshad Abasi

Published

1. Vulns in Markdown Parsers, Census II & Open Source Security, iCloud Private Relay – 12:00 PM-12:30 PM
2. Deep Visibility & Understanding the Underlying Data Layer – 12:30 PM-01:00 PM

Lebin Chang

Published

1. Integrating Appsec Tools for DevOps Teams – 12:30 PM-01:00 PM
2. Bug Bounty Costs, GitHub’s Advisory Database, ICS Vulns of 2021, CNCF Secure Software – 01:00 PM-01:30 PM

Steve Wilson

Published

1. The DIY AppSec Lab – 01:00 PM-01:30 PM
2. Cassandra RCE, Pixelation Is Poor Redaction, Rust’s Useful Errors, & Hardening Edge – 01:30 PM-02:00 PM

No Guest Info

Published

1. The Modern Developer Must be Security Minded, Too – 12:30 PM-01:00 PM
2. Docker Boundaries, Google Bounties, 2021’s Top Web Hacks, Apple AirTags, AI vs. RFCs – 01:00 PM-01:30 PM

Doug Kersten

Published

1. Policy Momentum in Coordinated Vulnerability Disclosure – 12:30 PM-01:00 PM
2. HTTP/3 Streams, Argo CD Paths, Log4j Devs, Cyber Safety Review Board, OSSF Projects – 01:00 PM-01:30 PM

Amit Elazari

Published

1. Shift Left, NOT S#!T LEFT – 12:30 PM-01:00 PM
2. PwnKit, Qubit Hack, Multichain Hack, Safari Bounty, & Python NaN – 01:00 PM-01:30 PM

Larry Maccherone

Published

1. API Security (Shadow APIs) – 12:30 PM-01:00 PM
2. IndexedDB Leak, Linux Kernel Bug, Zoom Security, SSRF & Allow Lists, Security Courses – 01:00 PM-01:30 PM

Himanshu Dwivedi

Published

1. Investing in Open Source Security – 12:00 PM-12:30 PM
2. Scams and Security in Web3*, URL Parsing Problems, AWS Glue, CI/CD Compromises – 12:30 PM-01:00 PM

No Guest Info

Published

1. Broadening What We Call AppSec – 12:30 PM-01:00 PM
2. Log4j for FTC, More JNDI, Cache Poisoning, Improving Default Configs, ThinkstScapes – 01:00 PM-01:30 PM

Christien Rioux

Published

1. Evolving Security Testing – 12:30 PM-01:00 PM
2. Latest Log4j, Outages & Availability, FPGA Security Concepts, & Bug Bounty Awards – 01:00 PM-01:30 PM

Dan Guido

Published

1. DevSecOps, Compliance GRC, and the Future of Application Security – 12:30 PM-01:00 PM
2. Log4Shell, Mozilla’s BigFix & New Sandbox, Rust in Linux Kernel, Path Traversal in Go – 01:00 PM-01:30 PM

Francesco Cipollone

Published

1. Solving Systemic Risk in Software Development – 12:30 PM-01:00 PM
2. Bug Bounties in Windows/WebKit, Edge Hardening, OAuth Hardening, & GoDaddy Breach – 01:00 PM-01:30 PM

Chris Wysopal

Published

1. wasmCloud – Distributed Computing With WebAssembly – 12:30 PM-01:00 PM
2. CVEs 4 CSPs, Malicious PyPi, Bounty Programs, Shared Responsibility, & Breach Costs – 01:00 PM-01:30 PM

Liam Randall

Published

1. Mobile Application Security – 12:30 PM-01:00 PM
2. PAN-OS Vuln, ChaosDB, Fuzzing BusyBox, Refactoring in Rust, HTML Smuggling – 01:00 PM-01:30 PM

Ryan Lloyd

Published

1. A Standardized Approach to SBOM – 12:30 PM-01:00 PM
2. Linux Kernel TIPC RCE, NPM Malware, OTP 2FA Bots, & Security Labels – 01:00 PM-01:30 PM

Dan McKinney

Published

1. Untangling API Security in 2022 – 12:30 PM-01:00 PM
2. Discourse RCE, Trojan Source, WhatsApp Security, & Privacy Engineering – 01:00 PM-01:30 PM

Peter Klimek

Published

1. Security Champions in an Online First World – 12:30 PM-01:00 PM
2. UAParser.js Malware in NPM, Squirrel Sandbox Escape, Securing CI/CD, & AppSec Videos – 01:00 PM-01:30 PM

Ashish Rajan

Published

1. Dev(Sec)Ops Scanning Challenges & Tips – 12:30 PM-01:00 PM
2. View Source, Bindiff for Vuln Analysis, Bypass with GitHub Actions, & NIST DevSecOps – 01:00 PM-01:30 PM

Nuno Loureiro

Tiago Mendo

Published

1. Modernizing the Management of Your Software Supply Chain – 12:30 PM-01:00 PM
2. Twitch Breach, HTTPd Path Traversal, Disabling Macros, & Great Cybersecurity Programs – 01:00 PM-01:30 PM

Tom Gibson

Published

1. The Power of Developer-First Security – 12:30 PM-01:00 PM
2. Prototype Pollution, Funding Open Source Security, Expiring Root CA, Mariana Trench – 01:00 PM-01:30 PM

Hillary Benson

Published

1. AppSec Orchestration/Correlation & DevSecOps Efficiency – 12:30 PM-01:00 PM
2. Exchange’s Great Leak, RCE in VMware, IoT Bug in MQTT, & Chrome’s Memory Safety Nets – 01:00 PM-01:30 PM

Anita D’Amico

Patrick Carey

Published

1. Transforming Modern Software Development with Developer-First AppSec – 12:30 PM-01:00 PM
2. OMIGOD, FORCEDENTRY, Code Ownership, Security as a Product, & IoT Device Criteria – 01:00 PM-01:30 PM

Jeff Williams

Published

1. Findings From the 2021 AppSec Shift Left Progress Report – 12:30 PM-01:00 PM
2. OWASP Top 10, CISA Bad Practices, Azurescape, Confluence RCE, & API Security Tokens – 01:00 PM-01:30 PM

Manish Gupta

Published

1. A DevOps Perspective on Risk Tolerance & Risk Transfer – 12:30 PM-01:00 PM
2. ChaosDB, OpenSSL String Bugs, Revealing Locations, & More Top 15 Vulns – 01:00 PM-01:30 PM

Caroline Wong

Published

1. Challenges in Open Source Application Security – 12:30 PM-01:00 PM
2. BlackBerry’s BadAlloc, Glibc’s NULL, Backtick Command Injection, & ProxyLogon Details – 01:00 PM-01:30 PM

Shubhra Kar

Published

1. DevSecOps – Making It Real – 12:30 PM-01:00 PM
2. Cracked Concatenation, Injection Against DNS, Allstar GitHub, & DEF CON Highlights – 01:00 PM-01:30 PM

Mike Rothman

Published

1. Securing Modern Web Apps: Development Techniques are Changing – 12:30 PM-01:00 PM
2. Router Auth Bypass, Weak IoT RNG, HTTP/2 Request Smuggling, & Kindle Fuzzing – 01:00 PM-01:30 PM

Tom Hudson

Published

1. Platform Firmware Security – 12:30 PM-01:00 PM
2. PunkSpider, Bug Bounties, RCE in PyPI, Kernel Pwning With eBPF, & Top Vulns From CISA – 01:00 PM-01:30 PM

Magggie Jauregui

Published

1. Navigating the Seas of Security in Serverless Functions – 12:30 PM-01:00 PM
2. CWE Top 25, Bugs in Inconstancies, Sequoia Vuln, Twitter Transparency, & Cloud Risks – 01:00 PM-01:30 PM

Peter Klimek

Published

1. The Role of Open Source in DevSecOps – 12:30 PM-01:00 PM
2. Code Comments, Decision Trees, Windows Hello, Telegram Analysis, & Cloud Risks – 01:00 PM-01:30 PM

David DeSanto

Published

1. Password Mismanager, Trusted Types vs. DOM XSS, PrintNightmare, & Fault Injections – 12:30 PM-01:00 PM
2. Web App and API Security Needs to Be Modernized: Here’s How – 01:00 PM-01:30 PM

Sean Leach

Published

1. Scaling Your Application Security Program – 12:30 PM-01:00 PM
2. Semgrep, Microsoft Signs With Rootkits, ATT&CK/D3FEND, & Injured Android – 01:00 PM-01:30 PM

Clint Gibler

Published

1. Challenges of DAST Scanners / Adoption by Developers – 12:30 PM-01:00 PM
2. Supply Chain Integrity, Format Strings, Systemd Bug, Instagram Bounty, & Refactoring – 01:00 PM-01:30 PM

Nuno Loureiro

Tiago Mendo

Published

1. OWASP SAMM – Software Assurance Maturity Model – 12:30 PM-01:00 PM
2. ALPACA, EA Breach, sprintf Lives, Go Fuzzing, K8s Goat, & OT Basics – 01:00 PM-01:30 PM

Sebastian Deleersnyder

Published

1. API Security: Understanding Threats to Better Protect Your Organization – 12:30 PM-01:00 PM
2. HTTP Goes QUIC, Security & Humans, Amazon Sidewalk Privacy, & Product Abuse – 01:00 PM-01:30 PM

Daniel Hampton

Published

1. Bringing AppSec to a Modern CI Pipeline – 12:30 PM-01:00 PM
2. IIS Bug, Browsers & Androids & Supply Chains Oh My! – 01:00 PM-01:30 PM

Manish Gupta

Published

1. Third Party Software Risk on the Web – 07:00 PM-07:30 PM
2. CNCF Supply Chain, Frag Attacks, Securing Webhooks, & Complexity vs. Security – 07:30 PM-08:00 PM

Aanand Krishnan

Published

1. Delivering On the Promise of Application Security – 12:30 PM-01:00 PM
2. AirTags & Threat Models, Qualcomm Modem Vuln, Exim RCE(s), & Binary Hardening – 01:00 PM-01:30 PM

Ankur Shah

Published

1. Why Developers Need to Think Differently About Software Security – 12:30 PM-01:00 PM
2. BadAlloc Vulns, Gatekeeper Bypass, & More Spectre in Micro-Op Caches – 01:00 PM-01:30 PM

Rey Bango

Published

1. Deceptive Diffs From Subversive Submitters – 12:30 PM-01:00 PM
2. Signal Aesthetics, AirDrop Privacy, Safety vs. Security, & Data Ordering Attacks – 01:00 PM-01:30 PM

No Guest Info

Published

1. Supply Chain Management – 12:30 PM-01:00 PM
2. Rust in Android, Vuln Disclosure, Postmortems, & BootHole Follow-Up – 01:00 PM-01:30 PM

Doug Barbin

Published

1. Shifting Right: What Security Engineers Can Learn From DevSecOps – 12:30 PM-01:00 PM
2. Malicious PHP Commits, OAuth Attacks & XML Injection, & Zines For DevSecOps – 01:00 PM-01:30 PM

Leif Dreizler

Published

1. OWASP Top 10 of 2021 – 12:30 PM-01:00 PM
2. TikTok Analysis, Patching Patches, CI/CD Integrity, Faster Fuzzing, & Slack Safety – 01:00 PM-01:30 PM

Andrew van der Stock

Published

1. Approaching AppSec Like a Hacker – 12:30 PM-01:00 PM
2. Supply Chains in Azure SDK/Xcode, GitHub Sessions, & GCP VRP – 01:00 PM-01:30 PM

Johanna Ydergard

Roberto Giachetta

Published

1. Cloud Native Security Platforms – 12:30 PM-01:00 PM
2. Unauth’d RCE, “Regexploits”, Post-Spectre Web, & SigStore Signing – 01:00 PM-01:30 PM

John Morello

Published

1. Privacy, Data Security & Compliance – 12:30 PM-01:00 PM
2. Security Engineering, Evil Packages, Exchange SSRF, & Observability – 01:00 PM-01:30 PM

Cynthia Burke

Published

1. Hackable; How to do Application Security Right – 12:30 PM-01:00 PM
2. JSON, OpenSSL, Educational Resources, & Flaws in CodeQL – 01:00 PM-01:30 PM

Ted Harrington

Published

1. Targeting, Exploiting, & Defending Linux – 12:30 PM-01:00 PM
2. Dependency Confusion, Suspender Falls, Web Shells, & AppSec Scale – 01:00 PM-01:30 PM

Brandon Edwards

Published

1. Being a Serial Entrepreneur, Business Leader, & Hacker – 12:30 PM-01:00 PM
2. BBPLR, API Security Trends, Memory Unsafety, & Patching 0-Days – 01:00 PM-01:30 PM

Alissa Knight

Published

1. Groundhog Day – It’s Time to Reset the Script on Vulnerabilities – 12:30 PM-01:00 PM
2. Sudo Vuln, Libgcrypt, BlastDoor on iMessage, & AWS Lambda security – 01:00 PM-01:30 PM

John Delaroderie

Published

1. Reading Industry Analyst Tea Leaves To Predict The Future – 12:30 PM-01:00 PM
2. KindleDrip, State of Messaging State Machines, DoH, & Data Security Strategies – 01:00 PM-01:30 PM

Taylor McCaslin

Published

1. Fuzz Testing – 12:30 PM-01:00 PM
2. Google 2FA Cloning, Speed vs. Security, & “Hack The Army” Bug Bounty 3.0 – 01:00 PM-01:30 PM

Andrei Serban

Published

1. Security By Design – 12:30 PM-01:00 PM
2. Kubernetes Clusters, Microsoft Solarigate, & Apple’s Security DIY – 01:00 PM-01:30 PM

No Guest Info

Published

1. Freedom From Computing Environments – 12:30 PM-01:00 PM
2. Atheris Python Fuzzer, Bronze Bit Attack, & FireEye Highlights – 01:00 PM-01:30 PM

Ev Kontsevoy

Published

1. Security Web Applications Against Modern Threats – 12:30 PM-01:00 PM
2. Google Play Bug, GitHub, iPhone Radio Reboots, & Docker Hub Vulns – 01:00 PM-01:30 PM

John Delaroderie

Mike Manrod

Published

1. Security Decisions During Application Development – 12:30 PM-01:00 PM
2. Top CyberSec Skills for 2021, Xbox Gamertag Bug, & MobileIron RCE Flaw – 01:00 PM-01:30 PM

Tim Mackey

Published

1. Threat Modeling Deep Dive – 12:30 PM-01:00 PM
2. Drupal Flaws, DevSecOps Implementation, & Cloud Native Security White Paper – 01:00 PM-01:30 PM

No Guest Info

Published

1. Automated Hacker Knowledge – 12:30 PM-01:00 PM
2. ‘Platypus’ Attack, IDOR DOD Bug, & 2 More Chrome 0-Days – 01:00 PM-01:30 PM

Rickard Carlsson

Published

1. China’s Top Hacking Contest, GitHub Actions, & Vulnonym – 12:30 PM-01:00 PM
2. Security Is a Feature – 01:00 PM-01:30 PM

Keith Hoodlet

Published

1. Azure App Service & Cloud-Native Signal Sciences Deployments – 12:30 PM-01:00 PM
2. Lax IoT, Adobe Flash Croaks, Link Preview Vulns, & Security Theatre! – 01:00 PM-01:30 PM

Alfred Chung

Published

1. Cyber Resiliency Through Self-Healing Cloud Infrastructure – 12:30 PM-01:00 PM
2. Nvidia GeForce Experience Flaws, Firefox ‘Site Isolation’, & Chrome 0-Day Bug – 01:00 PM-01:30 PM

Cesar Rodriguez

Published

1. The Future of Application Security Testing (AST) – 12:30 PM-01:00 PM
2. Windows “Ping of Death”, SonicWall VPN RCE , & MediaTek BootROM Glitch – 01:00 PM-01:30 PM

Taylor McCaslin

Published

1. Application Security Best Practices – 12:30 PM-01:00 PM
2. Fortinet SIEM RCE, Facebook Bug Bounty, & Anti-Virus Vulnerabilities – 01:00 PM-01:30 PM

James Manico

Published

1. Things Every Developer Should Know About Security – 12:30 PM-01:00 PM
2. DOMOS 5.8 OS Command Injection, API Shield, & TRB245 Vulnerabilities – 01:00 PM-01:30 PM

Chris Romeo

Published

1. The Difference Between Finding Vulns & Securing Apps – 12:30 PM-01:00 PM
2. Bypassing TikTok’s MFA, Instragram RCE, & Chrome Security Updates – 01:00 PM-01:30 PM

No Guest Info

Published

1. Visualizing & Detecting Threats For Your Custom Application – 12:30 PM-01:00 PM
2. Project OneFuzz, Bluetooth Spoofing Bug, & Safeguarding Secrets – 01:00 PM-01:30 PM

Justin Massey

Published

1. The People & Process of DevOps – 12:30 PM-01:00 PM
2. RCE via BACKBLAZE, Microsoft Patch Tuesday, & CRYLOGGER – 01:00 PM-01:30 PM

Frank Catucci

Published

1. Detecting Threats & Avoiding Misconfigs In The Cloud-Age – 12:30 PM-01:00 PM
2. GitHub to Ruby 2.7, CISO Success, & Lessons From Uber – 01:00 PM-01:30 PM

Marc Tremsal

Published

1. DevOps-First Application Security For Mid-Markets – 12:30 PM-01:00 PM
2. ATM Attacks, gcploit, & ClusterFuzz – 01:00 PM-01:30 PM

Sundar Krish

Published

1. Immutable Security For Immutable Infrastructure – 12:30 PM-01:00 PM
2. AWS S3 Crypto SDK, ReVoLTE Attack, & Microsoft Bug Bounties – 01:00 PM-01:30 PM

Cesar Rodriguez

Published

1. SWVHSC: How Does Sec Live In A DevOps World? – 07:00 PM-07:30 PM
2. SWVHSC: Amazon GuardDuty, Sandboxing & Workload Isolation, & No More SHA-1 – 07:30 PM-08:00 PM

Mike Rothman

Published

1. Fixing Vulnerabilities Effectively & Efficiently – 12:30 PM-01:00 PM
2. TaskRouter JS SDK, EL1/EL3 Vulnerability, & 234 Alexa Skills Store Violations – 01:00 PM-01:30 PM

John Matherly

Published

1. Cloud Security Posture Management & Governance – 12:30 PM-01:00 PM
2. SIGRed RCE, Google Cloud ‘Confidential VMs’, & Twitter Hack Crypto Scam – 01:00 PM-01:30 PM

Bhasker Nallapothula

Kris Rajana

Published

1. DevSecOps – 12:30 PM-01:00 PM
2. Top Bug Bounty Rankings, Zoom 0-Day, & Firefox Send Malware – 01:00 PM-01:30 PM

Judy Ngure

Published

1. Protecting Mobile Applications – 12:30 PM-01:00 PM
2. Guacamole RCE, PAN-OS Flaw, & A Culture of Resilience – 01:00 PM-01:30 PM

Catherine Chambers

Will Hickie

Published

1. Using IaC to Establish & Analyze Secure Environments – 12:30 PM-01:00 PM
2. DLL Hijacking, Trust Through Privacy, & Adobe EOL Data – 01:00 PM-01:30 PM

Cesar Rodriguez

Published

1. Data Mapping & Data Value Journey – 12:30 PM-01:00 PM
2. CallStranger, SMBleedingGhost, & Misconfigured Kubeflow – 01:00 PM-01:30 PM

Michelle Dennedy

Published

1. The Future State of AppSec – 12:30 PM-01:00 PM
2. Zoom Vulns, Apple 0-Days, & Abandoned Domains – 01:00 PM-01:30 PM

Phillip Maddux

Published

1. How to Prevent Account Takeover Attacks – 12:30 PM-01:00 PM
2. Apps Are the New Endpoint – 01:00 PM-01:30 PM

Catherine Chambers

John Chirhart

Published

1. Using Rate Limiting to Protect Web Apps and APIs – 12:30 PM-01:00 PM
2. Highlights From the New Open Source Security and Risk Analysis Report – 01:00 PM-01:30 PM

Tim Mackey

Jack Zarris

Published

1. How Can Security Work TOGETHER, Not Against, Developers – 12:30 PM-01:00 PM
2. Samsung RCE 0-Click, Whispers, & Compromising Pluton – 01:00 PM-01:30 PM

Joe Garcia

Published

1. Modern Application Security & Container Security – 12:30 PM-01:00 PM
2. Psychic Paper, Salt RCE, & Love Bugs – 01:00 PM-01:30 PM

Gareth Rushgrove

Published

1. Nintendo Breach, NSA Advisory, & Security of IoMT
2. Threat Modeling in AppSec

Avi Douglen

Published

1. Building an AppSec Ecosystem
2. Malicious Ruby Gems & JSON Web Token Bypass

Rebecca Deck

Published

1. Making Kubernetes a Hostile Place for Attackers
2. Zooming Alex Stamos & Building Security TestOps

Brad Geesaman

Published

1. You’re (probably) Doing AppSec Wrong
2. Zoom Flaws, ‘Zombie’ win32k Bug, & Inputscope

Grant Ongers

Published

1. Singularity: A Different Take on Container Security
2. The Benefits of SAST and SCA in Your IDE – Utsav Sanghani

Adam Hughes

Utsav Sanghani

Published

1. Bottlerocket, Supply Chain Casualty, DevOps Sweet Spot
2. DevSecOps / Scaling Security

No Guest Info

Published

1. CISOs, CVE, DevOps, Gandalf
2. Guy Podjarny, Snyk

Guy Podjarny

Published

1. Ghsotcat, Apache, NeTworks, Starliner
2. InfoSec World Workshop: DevSecOps and Cultural Transformation

Dan Petit

Published

1. Application News – RSA Conference News and Activities
2. Chris Eng Interview – What’s New with Veracode

Chris Eng

Published

1. Lessons Learned From The DevSecOps Trenches
2. SweynTooth, OWASP, CRXcavator, DevSecOps

Doug DePerry

Published

1. Mitigating at Design Time
2. WhatsApp Flaw, Dropbox Bug Bounty Program, Investigating Web Shell Attacks

Shaun Lamb

Published

1. Scaling an AppSec Program
2. Xbox Bounty Program, Magento Patch, RCE in OpenSMTPD

No Guest Info

Published

1. Dynamically Protecting Mobile Applications With RASP
2. Pwn2Own In Miami, Cloud Vuln., Deconstructing Web Cache Deception Attacks

John Butler

Published

1. Crypto Bugs, IoT Planes and Application Inspectors, Oh My!
2. Protecting Data in Apps and Protecting Apps from Data

No Guest Info

Published

1. Application News
2. The Evolution of DevSecOps and AppSec Trends in 2020

Hillel Solow

Published

1. Application News
2. Privacy by Design

No Guest Info

Published

1. API Security
2. Binary Planting, GitLab, and DevOps Pipelines

Dave Ferguson

Dave Ferguson

Published

1. Software Bill of Materials (SBOM)
2. The World Runs On Open-Source, But Who’s Paying For Gas?

Allan Friedman

Published

1. Bot Management
2. Facebook, Twitter, & Firefox

Sandy Carielli

Published

1. Application News
2. Development Decisions Affect The Security Of Any Application

Tim Mackey

Published

1. Mirantis’ Docker, CISOs, & End of Life Dates
2. Sysdig Secure 3.0

Pawan Shankar

Published

1. Application News
2. Security Testing

No Guest Info

Published

1. Application News
2. Teaching Security In Software Development

Daniel Lowrie

Justin Dennison

Published

1. Application News
2. Bug Bounties, Pentesting, & Scanners

No Guest Info

Published

1. Application News
2. Doug Coburn, Signal Sciences

Doug Coburn

Published

1. Application News
2. Francois Lascelles, Ping Identity –
3. Francois Lascelles, Ping Identity – ASW #80

Francois Lascelles

Published

1. Application News
2. Cloud Security for Small Teams

No Guest Info

Published

1. Application News
2. Information Disclosure Vulnerabilities

Ryan Kelso

Published

1. Application News
2. Training For Developers
3. Training For Developers – Nicolas Valc\u00e1rcel – ASW #77

Nicolas Valcárcel

Published

1. Bugs, Breaches, & More
2. OWASP Application Security Verification Standard – ASW #76
3. OWASP Application Security Verification Standard

Jay Durga

Published

1. Bugs, Breaches, & More
2. Tools in the DevOps Pipeline: Ty Sbano, Sisense – ASW #75
3. Tools in the DevOps Pipeline: Ty Sbano, Sisense

Ty Sbano

Published

1. Black Hat Interviews – WhiteSource and Venafi
2. Container Security With Sysdig Secure 2.4

Pawan Shankar

Published

1. Ping Identity, Cequence, & NowSecure
2. Bugs, Breaches, and More!

No Guest Info

Published

1. Application News
2. Hacker Summer Camp Round-UP

No Guest Info

Published

1. Application News
2. Container Security

Murray Goldschmidt

Published

1. News
2. Secure App Deployment With Unikernels

No Guest Info

Published

1. News
2. Securing Multi-Cloud Environments

No Guest Info

Published

1. News
2. Cloud Native

No Guest Info

Published

1. Application News
2. Security Training for Devs

No Guest Info

Published

1. API Security
2. Application News

No Guest Info

Published

1. News
2. Interview

No Guest Info

Published

1. DevSecOps and Securing Software Supply Chains
2. News

No Guest Info

Published

1. News
2. Topic

No Guest Info

Published

1. News
2. Interview

No Guest Info

Published

1. news
2. DevSecOps and Securing Software Supply Chains

No Guest Info

Published

1. News
2. Application News – Application Security Weekly #60
3. Interview
4. Sven Morgenroth, Netsparker – Application Security Weekly #60

No Guest Info

Published

1. News
2. Interview

No Guest Info

Published

1. News
2. Interview

No Guest Info

Published

1. News
2. Topic

No Guest Info

Published

1. News
2. Falco

No Guest Info

Published

1. News
2. Where the wins and challenges are in appsec
3. Wins & Challenges In AppSec , Square – Application Security Weekly #55

No Guest Info

Published

1. Application News
2. Interview

No Guest Info

Published

1. News
2. RSA Conference

No Guest Info

Published

1. Application News
2. Interview

No Guest Info

Published

1. news
2. Interview

No Guest Info

Published

1. News
2. Interview

No Guest Info

Published

1. news
2. The Current State of Privacy and Software Development
3. Privacy & Software Development – Application Security Weekly #49
4. The Current State of Privacy & Software Development – Application Security Weekly #49

No Guest Info

Published

1. News
2. Interview

No Guest Info

Published

1. News
2. Bugs, Breaches, and More – Application Security Weekly #47
3. The Human Element of Application Security Training and Testing

No Guest Info

Published

1. news
2. Interview

No Guest Info

Published

1. Approaching AppSec the Right Way
2. News

No Guest Info

Published

1. Harry Sverdlove, Edgewise –
2. Harry Sverdlove, Edgewise – Application Security Weekly #44
3. Signal App, Jenkins Servers, & WordPress –

No Guest Info

Published

1. Chris Elgee, Counter Hack Challenge –
2. Kubernetes, Firefox, & WordPress –

No Guest Info

Published

1. Aleksei Tiurin, Acunetix –
2. NSA Malware, AFL Fuzzer, & Firecracker –

No Guest Info

Published

1. Brent Dukes –
2. Drupalgeddon, USPS, & JavaScript –
3. Drupalgeddon, USPS, & JavaScript – Application Security Weekly #41

No Guest Info

Published

1. Instagram, Kraken, GitMiner –
2. John Kinsella, Layered Insight –

No Guest Info

Published

1. Brian Kelly, CyberArk –
2. ColdFusion, Destroying Logs, & Tracing Meme’s –

No Guest Info

Published

1. ‘Stalkerware’, DHCPv6 Packets , & Python –
2. Daniel Cuthbert, Banco Santander –

No Guest Info

Published

1. Airline Hacks, MicroTik Bug, & WordPress –
2. Johnny Xmas, Kasada.io –

No Guest Info

Published

1. Bugs, Breaches, and More! –
2. Cryptocurrency, Disney, and Adobe –

No Guest Info

Published

1. Garrett Gross, Rapid7 –
2. Git Project, Google+, & Facebook –

No Guest Info

Published

1. Bugs, Breaches, and More –
2. Landing a Job in Application Security –

No Guest Info

Published

1. Newegg, Ticketmaster, & iOS 12 –
2. Ron Gula, Gula Tech Adventures –

No Guest Info

Published

1. April Wright, ArchitectSecurity.org –
2. April Wright, ArchitectSecurity.org – Application Security Weekly #32
3. Bluebox-ng, Stock Data Breaches, and CommitStrip-
4. Bluebox-ng, Stock Data Breaches, and CommitStrip- Application Security Weekly #32

No Guest Info

Published

1. Microsoft, Equifax, MacOS, and Bug Bounties –
2. Zane Lackey, Signal Sciences –

No Guest Info

Published

1. Fortnite, Netflix, & Black Hat –
2. Fortnite, Netflix, & Black Hat – Application Security Weekly #30
3. The Apache Struts2 RCE Vulnerability –
4. The Apache Struts2 RCE Vulnerability – Application Security Weekly #30

No Guest Info

Published

1. Matt Alderman & Paul Asadoorian, Def Con 2018 –
2. Matt Alderman & Paul Asadoorian, Def Con 2018 – Application Security Weekly #29
3. Tom McLaughlin, ServerlessOps –
4. Tom McLaughlin, ServerlessOps – Application Security Weekly #29

No Guest Info

Published

1. Alibaba Cloud Security, Comcast, and Facebook –
2. Alibaba Cloud Security, Comcast, and Facebook – Application Security Weekly #28
3. Secure Coding Practices –
4. Secure Coding Practices – Application Security Weekly #28

No Guest Info

Published

1. Galen Hunt, Microsoft –
2. Galen Hunt, Microsoft – Application Security Weekly #27
3. Resources, Bugs, Breaches, and Learning Tools –
4. Resources, Bugs, Breaches, and Learning Tools – Application Security Weekly #27

No Guest Info

Published

1. Jessica Rozhin, Marqueta –
2. Jessica Rozhin, Marqueta – Application Security Weekly #26
3. Spectre, OWASP, and iGoat –
4. Spectre, OWASP, and iGoat – Application Security Weekly #26

No Guest Info

Published

1. Joe Garcia, CyberArk –
2. Joe Garcia, CyberArk – Application Security Weekly #25
3. Venmo, Oracle, & Linux –
4. Venmo, Oracle, & Linux – Application Security Weekly #25

No Guest Info

Published

1. AppSec Solutions in a DevOps World –
2. AppSec Solutions in a DevOps World – Application Security Weekly #24
3. iOS Bugs, Burp Suite, & DevSecOps –
4. iOS Bugs, Burp Suite, & DevSecOps – Application Security Weekly #24

No Guest Info

Published

1. Facebook, Google, & GitLab –
2. The Hardest Problem in Application Security –

No Guest Info

Published

1. PHPMyAdmin, GitHub, and VS Code –
2. PHPMyAdmin, GitHub, and VS Code – Application Security Weekly #22
3. Thomas GX, Yelda –
4. Thomas GX, Yelda – Application Security Weekly #22

No Guest Info

Published

1. Dan Kuykendall, Rapid7 –
2. Microsoft, JavaScript, AI Can Fire –

No Guest Info

Published

1. Ron Gula, Gula Tech Adventures –
2. Windows, Smart Lock, & iPhone Hackers –

No Guest Info

Published

1. FireFox, Windows 10, DevOps, and BitHubLab –
2. Peter Chestna, Veracode –

No Guest Info

Published

1. Agile vs. DevOps –
2. GitHub, Oracle, & GDPR –

No Guest Info

Published

1. James Wickett, Signal Sciences – Application Security Weekly #17
2. Nest, Node.js, & F.Secure – Application Security Weekly #17

No Guest Info

Published

1. Adam Gordon, ITProTV – Application Security Weekly #16
2. Text Bombs, Black Dots of Death, and Azure – Application Security Weekly #16

No Guest Info

Published

1. Building Your AppSec Program – Application Security Weekly #15
2. Twitter, Meltdown, & RSAC – Application Security Weekly #15

No Guest Info

Published

1. Building Your AppSec Program: Getting Started – Application Security Weekly #14
2. FDA, Microsoft, & Android – Application Security Weekly #14

No Guest Info

Published

1. Drupal, RSAC, & Facebook – Application Security Weekly #13
2. Rami Sass, CEO & Co-Founder of WhiteSource – Application Security Weekly #13

No Guest Info

Published

1. Open Source Software – Application Security Weekly #12
2. Windows, MacOS, & Javascript – Application Security Weekly #12

No Guest Info

Published

1. Intel, Slack, Spectre, & NASA – Application Security Weekly #11
2. One Language to Rule Them All – Application Security Weekly #11

No Guest Info

Published

1. Cloudflare, Facebook, & Red Team Wisdom – Application Security Weekly #10
2. DevOps or DevSecOps? – Application Security Weekly #10

No Guest Info

Published

No Topics

No Guest Info

Published

1. AMD, MailChimp, & Equifax – Application Security Weekly #9
2. Personal Development in Application Security – Application Security Weekly #9

No Guest Info

Published

No Topics

No Guest Info

Published

1. AppSec Development Partnership – Application Security Weekly #8
2. AppSec\/Development Partnership – Application Security Weekly #8
3. Ethereum, Kali Linux, & Creepy Alexa – Application Security Weekly #8

No Guest Info

Published

No Topics

No Guest Info

Published

1. DigiCert, GitHub, & Black Panther – Application Security Weekly #7
2. Facebook Malware Scan – Application Security Weekly #7

No Guest Info

Published

No Topics

No Guest Info

Published

1. Bitcoin, Salon, Oxford Comma Dispute, and Amazon – Application Security Weekly #6
2. Topic: Bug Bounties – Application Security Weekly #6

No Guest Info

Published

1. NSA, Google, & Microsoft – Application Security Weekly #05
2. OWASP ASVS pt. 2 – Application Security Weekly #05

No Guest Info

Published

1. Intel, CloudFair, & Lenovo – Application Security Weekly #04
2. OWASP Application Security Verification Standard – Application Security Weekly #04

No Guest Info

Published

1. Facebook, RedHat, & Russian Twitterbots – Application Security Weekly #03
2. Matias Madou, Secure Code Warrior – Application Security Weekly #03

No Guest Info

Published

1. Google, Oracle, and Apple – Application Security Weekly #02
2. Top 10 OWASP pt.2 – Application Security Weekly #02

No Guest Info

Published

No Topics

No Guest Info

Published

1. NVIDIA, Oracle, Coinbase, and Bitcoin – Application Security Weekly #1
2. OWASP Top 10 (2017) Overview – Application Security Weekly #1

No Guest Info

Published

1. Google, Intel, Mozilla, and Starbucks – Application Security Weekly #00
2. Rise of Application Security – Application Security Weekly #00

No Guest Info

Published