NSA Malware, AFL Fuzzer, & Firecracker - Application Security Weekly #42 | Security Weekly Podcast Network (Video) Podcast

NSA Malware, AFL Fuzzer, & Firecracker - Application Security Weekly #42: Hackers are opening SMB ports on routers to infect PCs with NSA malware, bug detectives whip up smarter version of classic AFL fuzzer to hunt code vulnerabilities, malware & rogue users can spy on some apps' HTTPS crypto, exploiting developer... by Application Security Weekly (Video)

30 min listen

Application News - Application Security Weekly #58: In the Application Security News, Breach at IT outsourcer Wipro, SCP serves the file it wants, Confluence Path traverses to RCE, another Local PrivEsc on Windows, easier sandboxing for C and C++ APIs, and Computer Science plus Ethics! Full Show... by Security Weekly Podcast Network (Video)

32 min listen

Application News - Application Security Weekly #58: In the Application Security News, Breach at IT outsourcer Wipro, SCP serves the file it wants, Confluence Path traverses to RCE, another Local PrivEsc on Windows, easier sandboxing for C and C++ APIs, and Computer Science plus Ethics! Full Show... by Application Security Weekly (Video)

32 min listen

PSW #776 - Santiago Torres Arias: Software supply chain attacks, those in which hackers target the "water supply" of software are on the rise. This makes software developers everywhere valid targets. We will discuss the developer perspective on software supply chain attacks. Segment... by Security Weekly Podcast Network (Audio)

171 min listen

Python Pickling, Sophos 0-Day, & AWS RDS MySQL - PSW #649: In the Security News, Half a Million Zoom Accounts Compromised by Credential Stuffing, Sold on Dark Web, Scammers pounce as stimulus checks start flowing, NSA shares list of vulnerabilities commonly exploited to plant web shells, Using Pythons... by Security Weekly Podcast Network (Video)

59 min listen

Cortex XSOAR, Fortinet, & YubiEnterprise - ESW #183: In the Enterprise Security News, how GitHub Code Scanning aims to prevent vulnerabilities in open source software, SlashNext Integrates with Palo Alto Networks Cortex XSOAR to Deliver Automated Phishing IR and Threat Hunting, Portshift Announces... by Enterprise Security Weekly (Video)

29 min listen

Cortex XSOAR, Fortinet, & YubiEnterprise - ESW #183: In the Enterprise Security News, how GitHub Code Scanning aims to prevent vulnerabilities in open source software, SlashNext Integrates with Palo Alto Networks Cortex XSOAR to Deliver Automated Phishing IR and Threat Hunting, Portshift Announces... by Security Weekly Podcast Network (Video)

29 min listen

Supermicro, Apache Struts, & HTTPS - Paul's Security Weekly #574: In the security news, Spanish driver tests positive for every drug test, vulnerabilities found in the remote management interface of Supermicro servers, Apache Struts 2 flaw in the wild, HTTPS crypto-shame, and how to manipulate Apple's podcast... by Security Weekly Podcast Network (Video)

44 min listen

PSW #742 - John Pescatore: Kicking off the show, John Pescatore joins for an interview & will go through his mostly random career choices that led to a long and fun career in information/cybersecurity - and how that ties into today's demand to secure the increase complex... by Security Weekly Podcast Network (Audio)

175 min listen

Application News - Application Security Weekly #60: Firefox gives more scrutiny to add-ons but Firefox also forgot to give more scrutiny to a cert, Path traversals trampled by ransomware, Secure Software Design: The Next Frontier In Cybersecurity, Trust the Stack, Not the People, VRT adds a CAN, and... by Application Security Weekly (Video)

34 min listen

Application News - Application Security Weekly #60: Firefox gives more scrutiny to add-ons but Firefox also forgot to give more scrutiny to a cert, Path traversals trampled by ransomware, Secure Software Design: The Next Frontier In Cybersecurity, Trust the Stack, Not the People, VRT adds a CAN, and... by Security Weekly Podcast Network (Video)

34 min listen

The Cure - ASW #144: This week, we welcome Johanna Ydergard, VP of Detectify Crowdsource at Detectify, and Roberto Giachetta, Engineering Manager at Detectify, to discuss Approaching AppSec Like a Hacker! Security is struggling to keep up with securing modern web... by Security Weekly Podcast Network (Audio)

68 min listen

Short Term Memory Issues - PSW #689: This week, Nick Percoco, Chief Security Officer at Kraken, joins us for an interview to discuss The Intersection of Cybersecurity and Cryptocurrency. Robert Lemos, Cybersecurity and Data Journalist, joins us for a discussion on Cybersecurity and... by Security Weekly Podcast Network (Audio)

223 min listen

Memory Safety, Re-Writing Software, and OSS Supply Chains - Omkhar Arasaratnam - PSW #820: Omkhar Arasaratnam is the General Manager of the Open Source Software Foundation (OpenSSF) and appears on the show to discuss memory safety, why re-writing software isn't always the best option, open-source software supply chains, and more! Segment... by Security Weekly Podcast Network (Audio)

169 min listen

Voice Phishers, 'SpiKey' Lock Picking, & Coffee Cup Hackers - PSW #663: New Microsoft Defender ATP Capability Blocks Malicious Behaviors, Voice Phishers Targeting Corporate VPNs, IBM finds vulnerability in IoT chips present in billions of devices, The Sounds a Key Make Can Produce 3D-Printed Replica, US firm accused of... by Security Weekly Podcast Network (Video)

81 min listen

Strange New Clouds - ASW #163: This week, we welcome Shubhra Kar, Global CTO and GM of Products & IT at The Linux Foundation, to discuss Challenges in Open Source Application Security! In the AppSec News: BlackBerry addresses BadAlloc bugs, glibc fixes a fix, more snprintf... by Security Weekly Podcast Network (Audio)

71 min listen

Enterprise-ish Network Security: Pt. 1 - Paul's Security Weekly #594: There are quite a few choices for selecting open-source and inexpensive hardware to build your network and provide tools to monitor for security events. In this segment we'll discuss some of the options, the pros and cons of each, limitations, and... by Security Weekly Podcast Network (Video)

39 min listen

Security Grades, Mirai, Quantum Cryptography, & Hacking "Beer" - PSW #687: In the Security News, If software got a security grade, most would get an F, SolarWinds hackers got some source code, new old bugs in the Linux kernel, hack stuff and get blown up, stop hacking "beer", weekly Chrome zero day, Mirai lives, long live... by Security Weekly Podcast Network (Video)

110 min listen

Unauth'd RCE, "Regexploits", Post-Spectre Web, & SigStore Signing - ASW #143: Software safety to mitigate the impact of unauthenticated RCEs, exploding regex patterns, web and browser security in the face of Spectre side-channels, signing software artifacts, 8 roles for today's security teams. Visit for all the latest... by Security Weekly Podcast Network (Video)

29 min listen

Unauth'd RCE, "Regexploits", Post-Spectre Web, & SigStore Signing - ASW #143: Software safety to mitigate the impact of unauthenticated RCEs, exploding regex patterns, web and browser security in the face of Spectre side-channels, signing software artifacts, 8 roles for today's security teams. Visit for all the latest... by Application Security Weekly (Video)

29 min listen

Everything's All Blurry - PSW #711: This week, we kick off the show with an interview featuring Mike Cohen, from Rapid 7, and Wes Lambert from Security Onion Solutions, for a segment all about Velociraptor & Digging Deeper! Then, we attempt to confirm or deny that Nzyme performs... by Security Weekly Podcast Network (Audio)

200 min listen

Bypassing Chrome's XSS Auditor - Paul's Security Weekly #561: Sven Morgenroth is a security researcher at Netsparker. He found filter bypasses for Chrome's XSS auditor and several web application firewalls. He likes to exploit vulnerabilities in creative ways and has hacked his smart TV without even leaving his... by Security Weekly Podcast Network (Video)

23 min listen

Generative AI Security Implications - Liam Mayron - PSW #786: Liam Mayron from Fastly comes on the show to talk about his unique path into information security, the security implications of generative AI, advances in technologies to protect web applications, detecting bots, and enabling better MSP services! This... by Security Weekly Podcast Network (Audio)

188 min listen

DARPA's AI Challenge, CISA Wants Secure Open Source, 5 Years of Vuln Research - ASW #251: DARPA unleashes an AI Cyber Challenge to find flaws, CISA asks for input on securing open source software and memory safety, what five years of vuln research shows for vuln management programs, siphoning security tokens from VS Code, and more! ... by Application Security Weekly (Video)

34 min listen

DARPA's AI Challenge, CISA Wants Secure Open Source, 5 Years of Vuln Research - ASW #251: DARPA unleashes an AI Cyber Challenge to find flaws, CISA asks for input on securing open source software and memory safety, what five years of vuln research shows for vuln management programs, siphoning security tokens from VS Code, and more! ... by Security Weekly Podcast Network (Video)

34 min listen

Alibaba Cloud Security, Comcast, and Facebook - Application Security Weekly #28: Alibaba Cloud Security team discovers Apache spark rest API remote code execution exploit, Comcast security flaws exposed partial address, Hacker finds hidden 'God Mode' in old x86 CPUs, and more! Full Show Notes:... by Security Weekly Podcast Network (Video)

32 min listen

Alibaba Cloud Security, Comcast, and Facebook - Application Security Weekly #28: Alibaba Cloud Security team discovers Apache spark rest API remote code execution exploit, Comcast security flaws exposed partial address, Hacker finds hidden 'God Mode' in old x86 CPUs, and more! Full Show Notes: Follow us on Twitter: by Application Security Weekly (Video)

32 min listen

Junior High Geometry - PSW #674: This week, we welcome Joseph Salazar, Technical Deception Engineer at Attivo Networks, to discuss how to Disrupt Attacks at the Endpoint with Attivo Networks! Then, Badri Raghunathan, Director of Product Management, and Sumedh Thakar, President and... by Security Weekly Podcast Network (Audio)

192 min listen

Docker, 42 Vulnerabilities, Backdoors, Spying on 100+ Foreign Govs. - PSW #639: In the Security News, Misconfigured Docker Registries Expose Thousands of Repositories, a Forgotten motherboard driver turns out to be perfect for slipping Windows ransomware past antivirus checks, Jail Software Left Inmate Data Exposed Online, Adobe... by Security Weekly Podcast Network (Video)

77 min listen

PSW #762 - Ben Hibben: Blenster comes on to talk about the Maker Movement, Hackerspaces, community and inclusive cultures, intentionality and kindness as a social cheat code, the right to repair movement, and using tools like the arduino/raspberry Pi to bring your projects... by Security Weekly Podcast Network (Audio)

163 min listen

Discover this podcast and so much more

NSA Malware, AFL Fuzzer, & Firecracker - Application Security Weekly #42

NSA Malware, AFL Fuzzer, & Firecracker - Application Security Weekly #42

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes