Everything's Valid in Code & War: Attacks on the Software Supply Chain - Santiago Torres Arias - PSW #776 | Security Weekly Podcast Network (Video) Podcast

PSW #776 - Santiago Torres Arias: Software supply chain attacks, those in which hackers target the "water supply" of software are on the rise. This makes software developers everywhere valid targets. We will discuss the developer perspective on software supply chain attacks. Segment... by Security Weekly Podcast Network (Audio)

171 min listen

ASW #231 - Neatsun Ziv: In this episode, Neatsun Ziv, co-founder and CEO of Ox security takes a deep dive into supply chain security. He focuses on the new Open Software Supply Chain Attack Reference (OSC&R), a consortium of leading cybersecurity leaders. OSC&R the... by Security Weekly Podcast Network (Audio)

80 min listen

Time Traveling - ASW #162: This week, we welcome Mike Rothman, President & Co-founder at DisruptOps, to discuss DevSecOps - Making It Real! In the AppSec News, Bug bounty report that cleverly manipulates a hash for profit, Allstar GitHub app to enforce security policies,... by Security Weekly Podcast Network (Audio)

68 min listen

Things Every Developer Should Know About Security - Chris Romeo - ASW #124: Developers are at the center of properly securing applications. A large number of security issues bury developers. We must understand the things every developer must know about security in order to help them. We must practice developer empathy,... by Security Weekly Podcast Network (Video)

36 min listen

Things Every Developer Should Know About Security - Chris Romeo - ASW #124: Developers are at the center of properly securing applications. A large number of security issues bury developers. We must understand the things every developer must know about security in order to help them. We must practice developer empathy,... by Application Security Weekly (Video)

36 min listen

API Security from a Developer's Perspective - Sam Placette - ASW #212: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Security Weekly Podcast Network (Video)

40 min listen

API Security from a Developer's Perspective - Sam Placette - ASW #212: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Application Security Weekly (Video)

40 min listen

How to protect continuous software delivery against supply chain attacks with Michael Plank: Software security is about securing websites against malicious attacks or using firewalls to prevent hackers entering your enterprise network. While this is part of software security there is much more that needs to be done – especially as more... by PurePerformance

59 min listen

Securing The Enterprise Software Supply Chain - Harry Sverdlove - PSW #678: SolarWinds is just the latest example of how the enterprise software supply chain, when compromised, can be used successfully by attackers. These coordinated and well-managed attacks prey on trust, so how can we trust our enterprise software? ... by Security Weekly Podcast Network (Video)

58 min listen

ASW #240 - Kelly Shortridge, Eric Fourrier, Richard Yew: What does software resilience mean? Why is status quo application security unfit for the modern era of software? How can we move from security theater to security chaos engineering? This segment answers these questions and more. Segment Resources:... by Security Weekly Podcast Network (Audio)

71 min listen

Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Security Weekly Podcast Network (Video)

37 min listen

Integrating Appsec Tools for DevOps Teams - Steve Wilson - ASW #186: DevOps teams have often been underserved by security tools. Modern appsec solutions need to fit within the existing workflows related to how software is built and deployed. But just dropping a tool into that pipeline isn't sufficient -- there are apps... by Application Security Weekly (Video)

37 min listen

A Deep Dive Into Software Supply Chain Security - Neatsun Ziv - ASW #231: In this episode, Neatsun Ziv, co-founder and CEO of OX Security, takes a deep dive into software supply chain security. He focuses on the new Open Software Supply Chain Attack Reference (OSC&R), a first-of-its-kind framework for understanding... by Security Weekly Podcast Network (Video)

40 min listen

Contortions - ASW #146: This week, we welcome Leif Dreizler - Engineering Manager, Product Security - Segment, to talk about Shifting Right: What Security Engineers Can Learn From DevSecOps! In the AppSec News, PHP deals with two malicious commits, SSO and OAuth attack... by Security Weekly Podcast Network (Audio)

73 min listen

Always Interesting - ASW #143: This week, we welcome John Morello, VP of Product at Palo Alto Networks, joins us to talk about Cloud Native Security Platforms! Modern appsec demonstrates the importance of a cloud native strategy for enterprise security and how much that strategy... by Security Weekly Podcast Network (Audio)

62 min listen

Good People - ASW #186: This week, we welcome Steve Wilson, Chief Product Officer at Contrast Security, to discuss Integrating Appsec Tools for DevOps Teams! In the AppSec news: Salesforce reveals their bounty totals for 2021, GitHub opens its advisory database for... by Security Weekly Podcast Network (Audio)

78 min listen

Unauth'd RCE, "Regexploits", Post-Spectre Web, & SigStore Signing - ASW #143: Software safety to mitigate the impact of unauthenticated RCEs, exploding regex patterns, web and browser security in the face of Spectre side-channels, signing software artifacts, 8 roles for today's security teams. Visit for all the latest... by Security Weekly Podcast Network (Video)

29 min listen

Unauth'd RCE, "Regexploits", Post-Spectre Web, & SigStore Signing - ASW #143: Software safety to mitigate the impact of unauthenticated RCEs, exploding regex patterns, web and browser security in the face of Spectre side-channels, signing software artifacts, 8 roles for today's security teams. Visit for all the latest... by Application Security Weekly (Video)

29 min listen

Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW #240: What does software resilience mean? Why is status quo application security unfit for the modern era of software? How can we move from security theater to security chaos engineering? This segment answers these questions and more. Segment Resources:... by Application Security Weekly (Video)

40 min listen

Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW #240: What does software resilience mean? Why is status quo application security unfit for the modern era of software? How can we move from security theater to security chaos engineering? This segment answers these questions and more. Segment Resources:... by Security Weekly Podcast Network (Video)

40 min listen

Stopping Business Logic Attacks: Why a WAF is no Longer Enough - Karl Triebes - ASW #255: The majority of attacks are now automated, with a growing number of attacks targeting business logic via APIs, which is unique to every organization. This shift makes traditional signature-based defenses insufficient to stop targeted business logic... by Security Weekly Podcast Network (Audio)

76 min listen

Eyes Open - ASW #174: This week, we welcome Ryan Lloyd, Chief Product Officer at Guardsquare, to discuss Mobile Application Security! Mobile applications have a unique attack surface. The tools and techniques being used to compromise these environments are constantly... by Security Weekly Podcast Network (Audio)

71 min listen

Black Hat Interviews - WhiteSource and Venafi - ASW #74: We interview Azi Cohen the Co-founder of WhiteSource. He will be talking about Application security has undergone a transition in recent years, as information security teams testing products before release became irrelevant, developers started playing... by Application Security Weekly (Video)

30 min listen

Black Hat Interviews - WhiteSource and Venafi - ASW #74: We interview Azi Cohen the Co-founder of WhiteSource. He will be talking about Application security has undergone a transition in recent years, as information security teams testing products before release became irrelevant, developers started playing... by Security Weekly Podcast Network (Video)

30 min listen

BREAKING: “Department of No” Upgraded to “Department of Slow”: All links and images for this episode can be found on . This week’s episode is hosted by me, (), producer of CISO Series and , CISO, . Joining me is our sponsored guest, , product management team leader, . In this episode: How can security teams... by CISO Series Podcast

37 min listen

New Wave Post Punk Security Hour - ASW #141: This week, we welcome Ted Harrington, Executive Partner at Independent Security Evaluators, to discuss Hackable; How to do Application Security Right! In the Application Security News, Implementation pitfalls in parsing JSON, finding all forms of a... by Security Weekly Podcast Network (Audio)

68 min listen

ASW #212 - Sam Placette: Appsec places a lot of importance on secure SDLC practices, API security, integrating security tools, and collaborating with developers. What does this look like from a developer's perspective? We'll cover API security, effective ways to test code,... by Security Weekly Podcast Network (Audio)

82 min listen

ASW #215 - Akira Brand: We talk with Akira Brand about appsec educational resources and crafting better resources for developers to learn about secure coding. Segment Resources: - - - - Rust arrives in the Linux Kernel, verdict in the Uber security case,... by Security Weekly Podcast Network (Audio)

78 min listen

Maybe If You Worked Harder Your Burnout Wouldn’t Be Such a Liability: All links and images for this episode can be found on . This week’s episode is hosted by me, (), producer of CISO Series and , CISO, . Joining me is our guest, , CISO and head of IT, . In this episode: What is the impact of burnout to your... by CISO Series Podcast

34 min listen

Predicting Vulnerabilities In Compiled Code - Roi Cohen & Shani Dodge - PSW #664: The growth in software vulnerability exploitation creates a need for better prediction capabilities. Over time, there have been shifts in the ways of discovering vulnerabilities in binary code. Research and development of new tools enables security... by Security Weekly Podcast Network (Video)

52 min listen

Discover this podcast and so much more

Everything's Valid in Code & War: Attacks on the Software Supply Chain - Santiago Torres Arias - PSW #776

Everything's Valid in Code & War: Attacks on the Software Supply Chain - Santiago Torres Arias - PSW #776

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes