A DevOps Perspective on Risk Tolerance & Risk Transfer – Caroline Wong – ASW #164
In the segment Mike and Caroline will discuss Risk Tolerance and Risk Transfer. They’ll touch on the following: risk ranking, risk transfer in supply chain,…
Deciduous / Decision trees + Security Chaos Engineering – Kelly Shortridge – ESW #240
Deciduous is an app Kelly built with Ryan Petrich that simplifies the process of creating security decision trees. Security decision trees are valuable aids in…
Securing Modern Web Apps: Development Techniques are Changing – Tom Hudson – ASW #161
Sponsored By Visit https://securityweekly.com/detectify for more information! The use of web apps, SPAs, and APIs are growing steadily and traditional scanning methods don’t provide enough…
PurpleSharp: Automated Adversary Simulation – Mauricio Velazco – BH21 #2
Defending enterprise networks against attackers continues to present a difficult challenge for blue teams. Prevention has fallen short; improving detection & response capabilities has proven…
OT Security for Critical Infrastructure and Why It Is Not “Intuitive” – Edward Liebig – BSW #226
The IT and operational technologies of critical infrastructure are under attack. The “general expectation” from the public and lawmakers is “fix it already” but we…
PunkSpider, Bug Bounties, RCE in PyPI, Kernel Pwning With eBPF, & Top Vulns From CISA – ASW #160
This week in the AppSec News: PunkSpider coming to DEF CON, Google matures its VRP, $50K bounty for an access token, RCE in PyPI, kernel…
Platform Firmware Security – Magggie Jauregui – ASW #160
Firmware security is complex and continues to be an industry challenge. In this podcast we’ll talk about the reasons firmware security remains a challenge and…
CISO Roundtable: Ransomware Attacks and the True Cost to Business – CSP #28
Sponsored By Visit https://www.cybereason.com/cisostories for more information! A recent global research report conducted by Cybereason, titled “Ransomware: The True Cost to Business”,…
CWE Top 25, Bugs in Inconstancies, Sequoia Vuln, Twitter Transparency, & Cloud Risks – ASW #159
This week in the AppSec News: CWE releases the top 25 vulns for 2021, findings bugs in similar code, Sequoia vuln in the Linux kernel,…
Filter By:
ChaosDB, OpenSSL String Bugs, Revealing Locations, & More Top 15 Vulns – ASW #164
This week in the Application Security News, Mike and John talk: Flaws in Azure’s CosmosDB, OpenSSL vulns in string handling, dating app location security, cloud…