How to Build a Successful Continuous Application Security Program - Ferruh Mavituna - ASW #205 | Security Weekly Podcast Network (Video) Podcast

How to Build a Successful Continuous Application Security Program - Ferruh Mavituna - ASW #205: Pressured by the speed of innovation, organizations are struggling to achieve the continuous web application security they need in the face of mounting threats and compliance requirements. What does it take in order for your AppSec program to be both... by Application Security Weekly (Video)

37 min listen

ASW #205 - Ferruh Mavituna: Vuln in an Atlassian Confluence app, "Dirty Dancing" in OAuth flows, security audits of sigstore and slf4j, flaws in fleet management app, conducting tabletop exercises. Pressured by the speed of innovation, organizations are struggling to... by Security Weekly Podcast Network (Audio)

77 min listen

Shifting Left Probably Left You Vulnerable. Here’s How You Can Make it Right. - Sonali Shah - ASW #211: Shifting left has been a buzzword in the application security space for several years now, and with good reason – making security an integral part of development is the only practical approach for modern agile workflows. But in their drive to build... by Security Weekly Podcast Network (Video)

37 min listen

Shifting Left Probably Left You Vulnerable. Here’s How You Can Make it Right. - Sonali Shah - ASW #211: Shifting left has been a buzzword in the application security space for several years now, and with good reason – making security an integral part of development is the only practical approach for modern agile workflows. But in their drive to build... by Application Security Weekly (Video)

37 min listen

Shifting Left Probably Left You Vulnerable, Here’s How To Make it Right - Sonali Shah - PSW #707: Shifting security left is good - but it’s an incomplete strategy that often leads to a false sense of security. In this segment, Sonali will discuss how organizations can reduce their risk of breach by embracing the modern AppSec techniques, that... by Security Weekly Podcast Network (Video)

32 min listen

Current Security Needs Of Modern Enterprise Companies - Ferruh Mavituna - ESW #199 by Enterprise Security Weekly (Video)

38 min listen

Current Security Needs Of Modern Enterprise Companies - Ferruh Mavituna - ESW #199: As organizations grow and get more mature, they are looking for ways to achieve more with less. Join this ESW segment to learn how mature organizations approach web application security at scale, how they achieve greater visibility, shift security... by Security Weekly Podcast Network (Video)

38 min listen

ASW #240 - Kelly Shortridge, Eric Fourrier, Richard Yew: What does software resilience mean? Why is status quo application security unfit for the modern era of software? How can we move from security theater to security chaos engineering? This segment answers these questions and more. Segment Resources:... by Security Weekly Podcast Network (Audio)

71 min listen

Invicti AppSec Indicator: Latest Web Vulnerability Trends & Best Practices - Patrick Vandenberg - ASW #245: Without visibility and continuous monitoring, dangerous threats expose our blind spots and create risk. Invicti, who brought together Acunetix and Netsparker, analyzes common web application vulns across thousands of assets yearly and releases the... by Application Security Weekly (Video)

37 min listen

Invicti AppSec Indicator: Latest Web Vulnerability Trends & Best Practices - Patrick Vandenberg - ASW #245: Without visibility and continuous monitoring, dangerous threats expose our blind spots and create risk. Invicti, who brought together Acunetix and Netsparker, analyzes common web application vulns across thousands of assets yearly and releases the... by Security Weekly Podcast Network (Video)

37 min listen

Latest Web Vulnerability Trends & Best Practices - Patrick Vandenberg - ASW #245: Without visibility and continuous monitoring, dangerous threats expose our blind spots and create risk. Invicti, who brought together Acunetix and Netsparker, analyzes common web application vulns across thousands of assets yearly and releases the... by Security Weekly Podcast Network (Audio)

75 min listen

Mitigating AppSec Risk with Systematic Testing and Effective Attack Mitigation - Karl Triebes, Patrick Vandenberg - ASW #239: Without visibility into your entire web application attack surface and a continuous find and fix strategy, dangerous threats can expose your organization's blind spots and create risk. Invicti analyzes common web application vulnerabilities across... by Security Weekly Podcast Network (Video)

29 min listen

Mitigating AppSec Risk with Systematic Testing and Effective Attack Mitigation - Karl Triebes, Patrick Vandenberg - ASW #239: Without visibility into your entire web application attack surface and a continuous find and fix strategy, dangerous threats can expose your organization's blind spots and create risk. Invicti analyzes common web application vulnerabilities across... by Application Security Weekly (Video)

29 min listen

Doing Application Security Right – Farshad Abasi - ASW Vault: Check out this interview from the ASW VAULT, hand picked by main host Mike Shema! This segment was originally published on March 14, 2022. Cybersecurity is a large and often complex domain, traditionally focused on the infrastructure and... by Security Weekly Podcast Network (Video)

36 min listen

Doing Application Security Right - Farshad Abasi - ASW Vault: Check out this interview from the ASW VAULT, hand picked by main host Mike Shema! This segment was originally published on March 14, 2022. Cybersecurity is a large and often complex domain, traditionally focused on the infrastructure and... by Application Security Weekly (Video)

36 min listen

Web Asset Discovery in Application Security - Tolga Kayas - ESW #242: Large organizations develop hundreds of new web applications every year. Some of those deployments are lost in time, and others go wild with high severity vulnerabilities. Forgotten and outdated web applications are a common culprit of successful hack... by Security Weekly Podcast Network (Video)

30 min listen

Web Asset Discovery in Application Security - Tolga Kayas - ESW #242: Large organizations develop hundreds of new web applications every year. Some of those deployments are lost in time, and others go wild with high severity vulnerabilities. Forgotten and outdated web applications are a common culprit of successful hack... by Enterprise Security Weekly (Video)

30 min listen

ASW #211 - Sonali Shah: Go releases their own curated vuln management resources, OSS-Fuzz finds command injection, Microsoft gets rid of Basic Auth in Exchange, NSA provides guidance on securing SDLC practices, reflections on pentesting, comments on e2e Shifting left... by Security Weekly Podcast Network (Audio)

78 min listen

Managing Threats, Reduce your Attack Surface, MDR Evolved - Antonio Sanchez, Randy Watkins, Richard Yew - ESW #328: The rapid growth of APIs used to build microservices in cloud-native architecture has left many enterprises in the dark when it comes to knowing where, how many, and what types of APIs they have. With multiple teams creating their own API endpoints... by Enterprise Security Weekly (Video)

36 min listen

Managing Threats, Reduce your Attack Surface, MDR Evolved - Antonio Sanchez, Randy Watkins, Richard Yew - ESW #328: The rapid growth of APIs used to build microservices in cloud-native architecture has left many enterprises in the dark when it comes to knowing where, how many, and what types of APIs they have. With multiple teams creating their own API endpoints... by Security Weekly Podcast Network (Video)

36 min listen

Doing Application Security Right - Farshad Abasi - ASW VAULT: Check out this interview from the ASW VAULT, hand picked by main host Mike Shema! This segment was originally published on March 14, 2022. Cybersecurity is a large and often complex domain, traditionally focused on the infrastructure and general... by Security Weekly Podcast Network (Audio)

36 min listen

BTS of the Cyber Fight and Building a Resilient Web App Security Program - ESW #230: “Behind the scenes of the cyber fight” – talking about the good on the defender side, taking down cyber criminal supply chains, partnerships, taking down ransomware gangs. This segment is sponsored by Fortinet. Visit to learn more about them!... by Enterprise Security Weekly (Video)

40 min listen

BTS of the Cyber Fight and Building a Resilient Web App Security Program - ESW #230: “Behind the scenes of the cyber fight” – talking about the good on the defender side, taking down cyber criminal supply chains, partnerships, taking down ransomware gangs. This segment is sponsored by Fortinet. Visit to learn more about them!... by Security Weekly Podcast Network (Video)

40 min listen

Peter Grant - CEO & Founder At Safesite Solutions - Safesite: Safesite is transforming the way companies in high-risk industries manage their everyday safety and compliance needs. By combining innovative mobile and field-based technologies with ongoing virtual safety coaching, Safesite has proven to help... by Finding Genius Podcast

18 min listen

Work from Home - Business Impacts & Security Risks - Mark Orsi - ESW #180: As we quickly pivot to remote work, what are the business impacts and security risks? What have we learned and how quickly can organizations adapt to this new paradigm? What activities should we take to make our organizations more resilient as we... by Security Weekly Podcast Network (Video)

26 min listen

Work from Home - Business Impacts & Security Risks - Mark Orsi - ESW #180: As we quickly pivot to remote work, what are the business impacts and security risks? What have we learned and how quickly can organizations adapt to this new paradigm? What activities should we take to make our organizations more resilient as we... by Enterprise Security Weekly (Video)

26 min listen

Everybody's Looking For Something - ASW #152: This week, we welcome Manish Gupta, CEO and Co-Founder at ShiftLeft, to discuss Bringing Appsec to a Modern CI Pipeline! Appsec in a modern CI pipeline needs a combination of tools, collaboration, and processes to be successful. Importantly, it also... by Security Weekly Podcast Network (Audio)

71 min listen

ASW #239 - Patrick Vandenberg, Karl Triebes, Francesco Cipollone: Application security is messy and is getting messier. Modern application security teams are struggling to identify what's more important to fix. Cloud security and application security is getting squeezed all together. Modern vulnerability maturity... by Security Weekly Podcast Network (Audio)

81 min listen

Doing Application Security Right - Farshad Abasi - ASW #188: Cybersecurity is a large and often complex domain, traditionally focused on the infrastructure and general information security, with little or no attention to Application Security. Security providers usually tack-on AppSec services to their existing... by Application Security Weekly (Video)

38 min listen

Doing Application Security Right - Farshad Abasi - ASW #188: Cybersecurity is a large and often complex domain, traditionally focused on the infrastructure and general information security, with little or no attention to Application Security. Security providers usually tack-on AppSec services to their existing... by Security Weekly Podcast Network (Video)

38 min listen

Discover this podcast and so much more

How to Build a Successful Continuous Application Security Program - Ferruh Mavituna - ASW #205

How to Build a Successful Continuous Application Security Program - Ferruh Mavituna - ASW #205

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes