Log4Shell, Mozilla's BigFix & New Sandbox, Rust in Linux Kernel, Path Traversal in Go - ASW #177 | Security Weekly Podcast Network (Video) Podcast

Log4Shell, Mozilla's BigFix & New Sandbox, Rust in Linux Kernel, Path Traversal in Go - ASW #177: This week in the AppSec News, Mike & John talk: All about Log4Shell, Mozilla's BigFix bug and new sandbox, Rust in the Linux kernel, path traversals, reflections on the security profession, & more! Visit for all the latest episodes!... by Application Security Weekly (Video)

36 min listen

Rust in Android, Vuln Disclosure, Postmortems, & BootHole Follow-Up - ASW #147: This week in the AppSec News, Mike and John discuss Rust in Android and the Linux kernel, vuln disclosure policy changes from Project Zero, security and DevOps collaboration, XSS with NULL, & a BootHole follow-up! Visit for all the latest... by Security Weekly Podcast Network (Video)

35 min listen

Rust in Android, Vuln Disclosure, Postmortems, & BootHole Follow-Up - ASW #147 by Application Security Weekly (Video)

35 min listen

Linux Kernel TIPC RCE, NPM Malware, OTP 2FA Bots, & Security Labels - ASW #173: This week in the AppSec News, Mike and John talk: Excel gains support for JavaScript data types and functions, arbitrary code execution in Linux kernel TIPC, more malware in npm packages, threat models and OTP/2FA bots, NIST Security Labels! ... by Application Security Weekly (Video)

39 min listen

Linux Kernel TIPC RCE, NPM Malware, OTP 2FA Bots, & Security Labels - ASW #173: This week in the AppSec News, Mike and John talk: Excel gains support for JavaScript data types and functions, arbitrary code execution in Linux kernel TIPC, more malware in npm packages, threat models and OTP/2FA bots, NIST Security Labels! ... by Security Weekly Podcast Network (Video)

39 min listen

Discourse RCE, Trojan Source, WhatsApp Security, & Privacy Engineering - ASW #172: This week in the AppSec News, Mike & John talk: Discourse SNS webhook RCE, a checklist for a Minimum Viable Secure Product, WhatsApp security assessment, privacy engineering specialties, & DevOps presentations! Visit for all the latest... by Security Weekly Podcast Network (Video)

39 min listen

Discourse RCE, Trojan Source, WhatsApp Security, & Privacy Engineering - ASW #172: This week in the AppSec News, Mike & John talk: Discourse SNS webhook RCE, a checklist for a Minimum Viable Secure Product, WhatsApp security assessment, privacy engineering specialties, & DevOps presentations! Visit for all the latest... by Application Security Weekly (Video)

39 min listen

Vulnerability Phone - ASW #177: This week, we welcome Francesco Cipollone - CEO & Founder - AppSec Phoenix Ltd, to discuss DevSecOps, Compliance GRC, and the Future of Application Security! In the AppSec News, Mike & John talk: All about Log4Shell, Mozilla's BigFix bug and... by Security Weekly Podcast Network (Audio)

70 min listen

Smart Contract Security, Heroku Breach, & Real World Crypto Highlights - ASW #196: In the AppSec News Mike and John discuss: Secure coding practices and smart contracts, lessons from the Heroku breach, Real World Crypto conference highlights, and an entertaining bug in Google Docs, & more! Visit for all the latest... by Security Weekly Podcast Network (Video)

37 min listen

Smart Contract Security, Heroku Breach, & Real World Crypto Highlights - ASW #196: In the AppSec News Mike and John discuss: Secure coding practices and smart contracts, lessons from the Heroku breach, Real World Crypto conference highlights, and an entertaining bug in Google Docs, & more! Visit for all the latest... by Application Security Weekly (Video)

37 min listen

BlackBerry's BadAlloc, Glibc's NULL, Backtick Command Injection, & ProxyLogon Details - ASW #163: This week Mike & John discuss: BlackBerry addresses BadAlloc bugs, glibc fixes a fix, more snprintf misuse that leads to command injection, ProxyLogon technical details, & more in the AppSec News! Visit for all the latest episodes!... by Security Weekly Podcast Network (Video)

36 min listen

BlackBerry's BadAlloc, Glibc's NULL, Backtick Command Injection, & ProxyLogon Details - ASW #163: This week Mike & John discuss: BlackBerry addresses BadAlloc bugs, glibc fixes a fix, more snprintf misuse that leads to command injection, ProxyLogon technical details, & more in the AppSec News! Visit for all the latest episodes!... by Application Security Weekly (Video)

36 min listen

JSON, OpenSSL, Educational Resources, & Flaws in CodeQL - ASW #141: This week on the Application Security News, Implementation pitfalls in parsing JSON, finding all forms of a flaw with CodeQL, more educational resources for hacking apps, engineering and product management practices for DevOps, & more! ... by Security Weekly Podcast Network (Video)

33 min listen

JSON, OpenSSL, Educational Resources, & Flaws in CodeQL - ASW #141: This week on the Application Security News, Implementation pitfalls in parsing JSON, finding all forms of a flaw with CodeQL, more educational resources for hacking apps, engineering and product management practices for DevOps, & more! ... by Application Security Weekly (Video)

33 min listen

ChaosDB, OpenSSL String Bugs, Revealing Locations, & More Top 15 Vulns - ASW #164: This week in the Application Security News, Mike and John talk: Flaws in Azure's CosmosDB, OpenSSL vulns in string handling, dating app location security, cloud security orienteering, detailed S3 threat model, & more! Show Notes: Visit ... by Security Weekly Podcast Network (Video)

35 min listen

ChaosDB, OpenSSL String Bugs, Revealing Locations, & More Top 15 Vulns - ASW #164: This week in the Application Security News, Mike and John talk: Flaws in Azure's CosmosDB, OpenSSL vulns in string handling, dating app location security, cloud security orienteering, detailed S3 threat model, & more! Show Notes: Visit ... by Application Security Weekly (Video)

35 min listen

Open-Source & Free Collaboration Security Tools - Enterprise Security Weekly #123: Paul and Jeff Man talk about Open-Source and free collaboration security tools. 1. Project Planning - OrangeScrum 2. Ticketing - Mantis Bug Tracker 3. Documentation - MediaWiki 4. Zabbix - Remote System Monitoring 5. Feedly - Share stories and RSS... by Enterprise Security Weekly (Video)

37 min listen

Open-Source & Free Collaboration Security Tools - Enterprise Security Weekly #123: Paul and Jeff Man talk about Open-Source and free collaboration security tools. 1. Project Planning - OrangeScrum 2. Ticketing - Mantis Bug Tracker 3. Documentation - MediaWiki 4. Zabbix - Remote System Monitoring 5. Feedly - Share stories and RSS... by Security Weekly Podcast Network (Video)

37 min listen

Windows Vulns Galore, Homoglyph Domains, Pegasus, & "Trust No One"! - PSW #703: This week in the Security News: Trust no one, its all about the information, so many Windows vulnerabilities and exploits, so. many., Saudi Aramco data for sale, Sequoia, a perfectly named Linux vulnerability, is Microsoft a national security threat?,... by Security Weekly Podcast Network (Video)

93 min listen

Schools of Magic - ASW #173: This week, Mike, John and Dan McKinney from Cloudsmith will be discussing SBOM and what that looks like for your applications. Other topics include: cloud-native tooling for your software supply chain, the history of provenance, GPG Keys & signing... by Security Weekly Podcast Network (Audio)

74 min listen

IIS Bug, Browsers & Androids & Supply Chains Oh My! - ASW #152: This week in the AppSec News segment, Mike and John talk: HTTP bug bothers IIS, Android platform security, supply chain security (new and old), brief (very brief) history of browser security, & more! Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Video)

32 min listen

IIS Bug, Browsers & Androids & Supply Chains Oh My! - ASW #152: This week in the AppSec News segment, Mike and John talk: HTTP bug bothers IIS, Android platform security, supply chain security (new and old), brief (very brief) history of browser security, & more! Visit for all the latest episodes! Show... by Application Security Weekly (Video)

32 min listen

WhatsApp Flaw, Dropbox Bug Bounty Program, Investigating Web Shell Attacks - ASW #95: This week in the Application Security News, Mike and John cover the following news stories: Critical Security Flaw Found in WhatsApp Desktop Platform Allowing Cybercriminals Read From The File System Access, Dropbox bug bounty program has paid out... by Security Weekly Podcast Network (Video)

31 min listen

WhatsApp Flaw, Dropbox Bug Bounty Program, Investigating Web Shell Attacks - ASW #95: This week in the Application Security News, Mike and John cover the following news stories: Critical Security Flaw Found in WhatsApp Desktop Platform Allowing Cybercriminals Read From The File System Access, Dropbox bug bounty program has paid out... by Application Security Weekly (Video)

31 min listen

ExtraReplica, Document.domain Disfavored, & Highlights From Thinkst Quarterly - ASW #195: This week in the AppSec News: ExtraReplica in Azure, Chrome disfavors document.domain, appsec presentations highlighted in the latest Thinkst Quarterly, Nimbuspwn Vuln in Linux, & more! Visit for all the latest episodes! Show Notes: by Application Security Weekly (Video)

38 min listen

ExtraReplica, Document.domain Disfavored, & Highlights From Thinkst Quarterly - ASW #195: This week in the AppSec News: ExtraReplica in Azure, Chrome disfavors document.domain, appsec presentations highlighted in the latest Thinkst Quarterly, Nimbuspwn Vuln in Linux, & more! Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Video)

38 min listen

Opposite Direction - ASW #168: This week, we welcome Hillary Benson, Director, Product Management of Secure & Protect at Gitlab, to discuss The Power of Developer-First Security! In the AppSec News, John and Mike discuss Prototype pollution vulns, funding open source project... by Security Weekly Podcast Network (Audio)

70 min listen

ALPACA, EA Breach, sprintf Lives, Go Fuzzing, K8s Goat, & OT Basics - ASW #154: This week in the AppSec News, Mike and John talk: ALPACA surveys protocol confusion, lessons from the EA breach, forgotten lessons about sprintf, Go fuzzing goes beta, security lessons from Kubernetes Goat, basic lessons for OT from CISA, & more!... by Security Weekly Podcast Network (Video)

33 min listen

ALPACA, EA Breach, sprintf Lives, Go Fuzzing, K8s Goat, & OT Basics - ASW #154: This week in the AppSec News, Mike and John talk: ALPACA surveys protocol confusion, lessons from the EA breach, forgotten lessons about sprintf, Go fuzzing goes beta, security lessons from Kubernetes Goat, basic lessons for OT from CISA, & more!... by Application Security Weekly (Video)

33 min listen

iOS Lockdown Mode, 2FA in PyPI, CloudVulnDB, & Practical Attacks on ML - ASW #203 by Application Security Weekly (Video)

36 min listen

Discover this podcast and so much more

Log4Shell, Mozilla's BigFix & New Sandbox, Rust in Linux Kernel, Path Traversal in Go - ASW #177

Log4Shell, Mozilla's BigFix & New Sandbox, Rust in Linux Kernel, Path Traversal in Go - ASW #177

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes