Podcast Episodes

Security in a Cloud Native World & Mobile App Attacks - ASW #252

Two featured interviews from this year's Black Hat. In the news, Discord.io ceases to be, Azure AD breach to get scrutiny from the CSRB, Zoom's AI st…

2 years, 6 months ago

Pointers and Perils for Presentations - Josh Goldberg - ASW #251

A key part of modern appsec is communication. From interpersonal skills for fostering collaborations to presentation skills for delivering a message,…

2 years, 7 months ago

You've Got Appsec, But Do You Have ArchSec? - Merritt Baer - ASW #250

Mature shops should be looking to a security architecture process to help scale their systems and embrace security by design. We talk about what it m…

2 years, 7 months ago

Identity and Verifiable Credentials in Cars - Eve Maler - ASW #249

Identity isn't new, but we do have new ways of presenting and protecting identity with things like payment wallets and verifiable credentials. But we…

2 years, 7 months ago

Navigating the Complexities of Development to Create Secure APIs - Kristen Bell - ASW #248

Appsec teams and developers must both understand the consequences of what they're doing when building APIs. Appsec teams need to push for collaborati…

2 years, 7 months ago

Securing Non-Election Election Systems, Modernizing AppSec Education - Brian Glas - ASW #247

While much has been written and argued about the security of election systems - the things that do the actual ballot counting - there's other systems…

2 years, 7 months ago

Software Trust & Adversaries, Developer-Focused Security - Shannon Lietz, Melinda Marks - ASW #246

Infosec is still figuring out useful metrics, how to talk about risk, and how to make resilience more relevant. Shannon talks about a new community e…

2 years, 8 months ago

The Psychology of Training - Matias Madou - ASW Vault

Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on May 23, 2022.

Developers w…

2 years, 8 months ago

Latest Web Vulnerability Trends & Best Practices - Patrick Vandenberg - ASW #245

Without visibility and continuous monitoring, dangerous threats expose our blind spots and create risk. Invicti, who brought together Acunetix and Ne…

2 years, 8 months ago

Policy Momentum in Coordinated Vulnerability Disclosure - Amit Elazari - ASW Vault

Security is one of the most evolving and impactful landscapes in the regulatory sphere. Proposed initiatives in the areas of Incident Response, Softw…

2 years, 8 months ago