Podcast Episodes

The Complexities, Configurations, and Challenges in Cloud Security - Scott Piper - ASW #304

Building cloud native apps doesn't mean you're immune to dealing with legacy systems. Cloud services have changed significantly over the last decade,…

1 year, 4 months ago

The Future of Zed Attack Proxy - Simon Bennetts, Ori Bendet - ASW #302

Zed Attack Proxy has been a crucial web app testing tool for decades. It's also had a struggle throughout 2024 to obtain funding that would enable th…

1 year, 5 months ago

More Car Hacks, CUPS Vulns, Microsoft's SFI, Memory Safety, Password Complexity - Farshad Abasi - ASW #301

More remote car control via web interfaces, an RCE in CUPS, Microsoft reduces attack surface, migrating to memory safety, dealing with dependency con…

1 year, 5 months ago

Vulnerable APIs and Bot Attacks: Two Interconnected, Growing Security Threats - David Holmes - ASW #300

APIs are essential to modern application architectures, driving rapid development, seamless integration, and improved user experiences. However, thei…

1 year, 5 months ago

Bringing Secure Coding Concepts to Developers - Dustin Lehr - ASW #299

When a conference positioned as a day of security for developers has to be canceled due to lack of interest from developers, it's important to unders…

1 year, 6 months ago

Paying Down Tech Debt, Rust in Firmware, EUCLEAK, Deploying SSO - ASW #298

Considerations in paying down tech debt, make Rust work on bare metal, ECDSA side-channel in Yubikeys, trade-offs in deploying SSO quickly, and more!…

1 year, 6 months ago

Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW Vault

Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on May 9, 2023.

What does sof…

1 year, 6 months ago

Changing the Course of IoT's Future from Its Insecure Past - Paddy Harrington - ASW #297

IoT devices are notorious for weak designs, insecure implementations, and a lifecycle that mostly ignores patching. We look at external factors that …

1 year, 6 months ago

The Fallout and Lessons Learned from the CrowdStrike Fiasco - Shimon Modi, Jeff Pollard, Allie Mellen, Boaz Barzel - ASW #296

This week, Jeff Pollard and Allie Mellen join us to discuss the fallout and lessons learned from the CrowdStrike fiasco. They explore the reasons beh…

1 year, 6 months ago

When Appsec Needs to Start Small - Kalyani Pawar, Danny Jenkins, Nikos Kiourtis - ASW #295

Startups and small orgs don't have the luxury of massive budgets and large teams. How do you choose an appsec approach that complements a startup's n…

1 year, 7 months ago