Security Best Practices for Developers

FromSecurity This Week

Start listening View podcast show

Security Best Practices for Developers

FromSecurity This Week

ratings:

Length:

56 minutes

Released:

Jun 18, 2023

Format:

Podcast episode

Description

Carl, Patrick, and Duane welcome Jeremy Likness (Microsoft) to talk about the short list of security measures every software developer needs to know.This show is part of the Spreaker Prime Network, if you are interested in advertising on this podcast, contact us at https://www.spreaker.com/show/5634794/advertisement

Released:

Jun 18, 2023

Format:

Podcast episode

Titles in the series (100)

Enterprise security topics are discussed through the lens of current events, which catapult us into a discussion about hacking methods, security measures, and outcomes. Your hosts are Carl Franklin, Patrick Hynds, and Duane LaFlotte

Skip carousel

Springtime brings a Spring Vulnerability: A new vulnerability in the Spring framework, a tool for programmers, may become the new Log4J by Security This Week
38 min listen
Introducing Security This Week: Our pilot episode, in which we lay the groundwork for what to expect from this podcast. by Security This Week
42 min listen
This Week in Ransomware: Phishing is when a bad actor sends you an email that looks like it came from Microsoft, Amazon, Google, or some other legit company that you probably use. They give you a link to click on for some reason, and with a single click, your entire hard... by Security This Week
47 min listen
The Internet is Burning!: No, really. You NEED to listen to this episode before you do anything else. by Security This Week
39 min listen
It's the Little Things: Our pilot episode, in which we lay the groundwork for what to expect from this podcast. by Security This Week
42 min listen
VPNs and Cruise Missiles: Carl and Patrick (no Duane this week) talk about the Colonial Pipeline ransomware hack, and Pat's thoughts on how to shut down ransomware. by Security This Week
42 min listen
Living in a Zero-Trust World: A US government mandate requires authentication systems to start adopting zero-trust policies. Are you ready? by Security This Week
35 min listen
UK Government Porn Site: The Dirty Dangers of DNS! by Security This Week
41 min listen
Hackers Get Involved!: As Russia wages war on Ukraine, we see stories emerging of hacking groups on both sides joining the cyberwar. by Security This Week
43 min listen
Hoisted by their own Petard: Last week cyberspies infected themselves with their own malware by Security This Week
31 min listen
Cash for Hacks: Disgruntled employee participates in a ransomware attack against their own company! Also, what's a public/private key pair? by Security This Week
48 min listen
The Pyramid of Threats: Patrick talks about the Pyramid of Threats, a mental model to categorize threats according to their popularity (biggest at the base). The higher you go up the pyramid, the harder it is to defend yourself against the threats. by Security This Week
44 min listen
Trick or Treat!: This week there have been some tricks, but you'll get a treat at the end! by Security This Week
52 min listen
World War Hack!: Nation-states are ramping up the cyberwar by Security This Week
49 min listen
Happy Christmahaunukwanzadan!: More Log4j developments, more career advice for criminals, and more reasons to not click on email links. by Security This Week
34 min listen
We were just trying to help by Security This Week
38 min listen
Not a good week for Microsoft: Several attacks against Microsoft properties this week. They can't catch a break! by Security This Week
48 min listen
Don't look a grift horse in the mouth!: If you have an Android phone and get apps from the Google Play store, you might have been robbed. by Security This Week
38 min listen
Rowhammer Time!: What happens when the digital world collides with the physical world? by Security This Week
45 min listen
More Log4j Stuff: We think we'll be talking about Log4j for a long time. by Security This Week
45 min listen
From Russia, with Love: Looks like Russia is hacking Ukraine. Who knew? by Security This Week
38 min listen
The Neverending Side Story: The three amigos can't seem to stop going on tangents when discussing ransomware and other hacks. by Security This Week
39 min listen
OK, Facebook!: One good thing about last week's Facebook outage is that our kids now know what DNS is. by Security This Week
29 min listen
Pull up your Breaches!: You will be a breach victim sooner or later. If you don't take measures to mitigate risk, and you get breached, you could be sued. by Security This Week
38 min listen
Not Really the Last Pass: Enable 2 Factor Authentication on your LastPass account! by Security This Week
30 min listen
Redemption: Microsoft and Apple go on a Patch Rampage! by Security This Week
45 min listen
Beware Sharp Edges!: Ransomware is the overwhelming theme for this show. As for the sharp edges, you'll have to listen to get that reference. by Security This Week
40 min listen
Skim This!: Nefarious individuals can steal your credit card right underneath your nose! by Security This Week
49 min listen
Verify! Verify! Verify!: Many scammers can be foiled by asking a simple question. by Security This Week
39 min listen
Space Pirates Attack!: Chinese Space Pirates are hacking Russian aerospace firms. Film at 11. by Security This Week
45 min listen

More Episodes from Security This Week

Skip carousel

WiFi Hacked Again!: New WiFi Flaw Leaves All Devices Vulnerable to ‘SSID Confusion’ Attacks by Security This Week
33 min listen
Is Your Software USDA Approved?: The US Government Is Asking Big Tech to Promise Better Cybersecurity by Security This Week
44 min listen
Is DropBox Done?: An SEC security breach filing has us wondering! by Security This Week
37 min listen
AI Attacks!: GPT-4 Can Exploit Most Vulns Just by Reading Threat Advisories by Security This Week
43 min listen
The Last Pass for LastPass?: Hackers targeted LastPass employee in failed deep fake CEO call. by Security This Week
51 min listen
Hey Microsoft, is your House Clean?: Microsoft employees exposed internal passwords in security lapse by Security This Week
27 min listen
State Hackers Blow up Red Hat Linux from the Inside!: Red Hat warns of backdoor in XZ tools used by most Linux distros by Security This Week
34 min listen
Dyslexic Vampire Sends Rouge iMessages!: New Darcula phishing service targets iPhone users via iMessage by Security This Week
28 min listen
They can hear what you're typing!: New acoustic attack determines keystrokes from typing patterns by Security This Week
36 min listen
TikTok. Time's a Wastin!: House passes bill that would ban TikTok if its Chinese owners don't sell the popular app. by Security This Week
38 min listen
Repo Man Confused. Film at 11.: Over 100,000 Infected Repos Found on GitHub! by Security This Week
31 min listen
Is C# Dead?: White House urges devs to switch to memory-safe programming languages by Security This Week
42 min listen
Is Your AI Writing Rubber Checks?: Air Canada must honor refund policy invented by airline’s chatbot by Security This Week
30 min listen
Hey Canada, Where's My Car?: Canada to ban the Flipper Zero to stop surge in car thefts by Security This Week
36 min listen
Spoutible Exposes Sensitive User Data!: At least the API was thorough! by Security This Week
38 min listen
The Mother of All Breaches!: Mother of all breaches reveals 26 billion records! by Security This Week
46 min listen
Is Bitcoin no longer anonymous?: How a 27-year-old busted the myth of Bitcoin’s anonymity by Security This Week
39 min listen
Kerberos Bug Fixed! Film at 11!: Microsoft fixes critical flaws in Windows Kerberos, Hyper-V by Security This Week
35 min listen
PornHub Complaining Again: PornHub blocks North Carolina, Montana over new age verification laws by Security This Week
33 min listen
Ultimate Job Interview Fail!: Blockchain dev's wallet emptied in "job interview" using npm package by Security This Week
41 min listen
Yes, Virginia, They ARE Listening to You: Marketing Company Claims That It Actually Is Listening to Your Phone and Smart Speakers to Target Ads by Security This Week
36 min listen
WordPress... WTF!: 50K WordPress sites exposed to RCE attacks by critical bug in backup plugin by Security This Week
34 min listen
Got LogoFAIL? You're Screwed!: LogoFAIL exploit bypasses hardware and software security measures and is nearly impossible to detect or remove by Security This Week
39 min listen
Is Your iPhone Exploiting You?: Last week there was a scare about the NameDrop feature in iOS 17. What's the real story? by Security This Week
29 min listen
What's wrong with Password123?: The guys check out a list of the top 200 most common passwords used all over the world. by Security This Week
38 min listen
Apparently Crime Pays!: Fraudsters make $50,000 a day by spoofing crypto researchers by Security This Week
50 min listen
OpenAI Goes Down. Film at 11: OpenAI confirms DDoS attacks behind ongoing ChatGPT outages by Security This Week
37 min listen
Who's That Knocking at Your Windows?: Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover by Security This Week
32 min listen
Revenge of the Windows Phone!: Windows Phone gets revenge on YouTube from the grave by helping users bypass its ad-blocker-blocker by Security This Week
34 min listen
Elmer Fudd Shoots Linux!: 'Looney Tunables' Bug Opens Millions of Linux Systems to Root Takeover by Security This Week
40 min listen

Related podcast episodes

Skip carousel

How Working From Home Changed ERP Security Forever — The ERP Advisor Podcast Episode 60 by The ERP Advisor
55 min listen
The Digital Defenders: Navigating Cybersecurity Careers and Trends by Privacy Pros Podcast
44 min listen
Developing an Effective Cybersecurity Program by The Employee Safety Podcast
30 min listen
Skyrocket Your Privacy Career - How To Be The Go To Choice For Hiring Managers by Privacy Pros Podcast
37 min listen
BDTP. Email Deliverability with Lauren Meyer: Can we, mere mortals of email marketing, influence email deliverability? In this episode, we talk to Lauren Meyer, chief marketing officer at SocketLabs. You'll learn about the mechanism of how an email is delivered, the factors that affect deliverability, why you should use engagement metrics as proxies for deliverability, and more. by UI Breakfast: UI/UX Design and Product Strategy
39 min listen
Don't Waste Bourbon - PSW #687: This week, we welcome Dan Decloss, Founder and CEO at Plextrac joins us to talk about getting the real work done: The case studies. In the Security News, If software got a security grade, most would get an F, SolarWinds hackers got some source code,... by Security Weekly Podcast Network (Audio)
200 min listen
Pragma | Game Changer: Greylock general partner David Thacker talks with… by Greymatter
33 min listen
ATT&CK Matrix: All images and links for this episode can be found on CISO Series () Is the ATT&CK Matrix the best model to build resiliency in your security team? What is the best way to take advantage of the ATT&CK framework and how do you square away... by Defense in Depth
25 min listen
Leading beyond domain expertise & laying early-stage security program foundations w/ Matt Spitz #134: Matt Spitz joins our latest podcast to discuss leading beyond domain expertise! As Head of Engineering @ Vanta, Matt shares his experience managing & developing a security program in the early days of Vanta before hiring for a specialized skillset. We also cover strategies on maximizing security at your organization as it grows, developing a company culture that invests in security, identifying when your org is ready to hire a domain expert, and how to effectively communicate with & lead domain experts within your org. In addition, Matt reveals what qualities he believes a security culture expert should possess & how eng leaders (who aren’t domain experts in security) can help set the org’s right technical direction. by The Engineering Leadership Podcast
40 min listen
Developer Experience and Data Protection with Skyflow’s Ram Muthukrishnan: In this episode, we delve into developer experience (DX) and its pivotal role in data protection, security, and privacy. Ram Muthukrishnan, a product manager at Skyflow, joins the show again to share insights into DX's definition, the key elements of... by Partially Redacted: Data, AI, Security, and Privacy
39 min listen
The Big Ol' Nothing Burger - ESW #249: This week, we welcome Chad Skipper, Director Product Marketing at VMware, to talk about Detecting the Next Breach: How to Win the War With NSX NDR! In the second segment, we welcome Frank McGovern, Cybersecurity Architect at StoneX Group Inc., to... by Security Weekly Podcast Network (Audio)
103 min listen
1279: Can Secure Access Service Edge (SASE) Co-Exist With Zero Trust.: John Peters, Chief Product Officer of Ericom Software by The Tech Talks Daily Podcast
23 min listen
ESW #269 - Bob Erdman & Justin Tolman: In our first segment, we welcome Bob Erdman, Director of Development at HelpSystems to discuss The Role of Automation in Pen Testing! Then, Justin Tolman, Forensic Evangelist at Exterro joins us to discuss Forensic Challenges for Security... by Security Weekly Podcast Network (Audio)
118 min listen
August 6, 2021: US partners with Amazon, Google, and Microsoft to help fight cyber threats Conti ransomware gang falls victim to insider data leak Microsoft announces new ‘Super Duper’ browser security feature Thanks to our episode sponsor, PlexTrac is the... by Cyber Security Headlines
8 min listen
The Enchanted Notebook by "Age of Miracles"
14 min listen
Episode 108: Next-Gen Guest Wi-Fi With Cisco Meraki & Splash Access by Meraki Unboxed
44 min listen
Derek Manky: Putting the rubber to the road. [Threat Intelligence] [Career Notes]: Chief Security Strategist and VP of Global Threat Intelligence at FortiGuard Labs, Derek Manky, shares his story from programmer to cybersecurity and how it all came together. by CyberWire Daily
10 min listen
67. Cybersecurity in Project Management: Every day we hear about another cyber attack. Another virus that we have to guard against. Defending our digital infrastructure is an ongoing and top priority for every organization. It must also be incorporated into every project, from inception to... by PM Point of View
60 min listen
136: Team Xecutor: Team Xecutor by Darknet Diaries
87 min listen
Cybersecurity Skills Gap: How To Bridge It And Secure Your Career by Privacy Pros Podcast
46 min listen
Next-Level Web Performance with Patrick Meenan - JSJ 608 by JavaScript Jabber
74 min listen
The Power Hour 2/3/21: April and Gary talk cybersecurity on this week's Power Hour, and Mark from CrystalPM joins the conversation. How can ODs prevent hackers in their practice systems and keep data secure? April, Gary, and Mark will discuss how often it happens in... by Power Hour Optometry
34 min listen
February 18, 2022: DOJ beefs up efforts to combat criminal use of cryptocurrencies Canada's major banks go offline in mysterious hours-long outage Hackers slip into Microsoft Teams chats to distribute malware Thanks to our episode sponsor, PlexTrac is the Purple... by Cyber Security Headlines
8 min listen
2024 Security Planning, Better Tabletop Exercises - Merritt Maxim, Ryan Fried - ESW #332: Forrester Research releases a few annual reoccurring cybersecurity reports, but one of the biggest that covers the most ground is the Security Risk Planning Guide, which was recently released for 2024. One of the report's 17 authors, and research... by Security Weekly Podcast Network (Audio)
139 min listen
1859: Dynatrace - Long Term Events of Log4Shell: In light of the recent Log4Shell vulnerability that has been dominating the headlines, I invited Asad Ali, Senior Director, Global Centre of Excellence at Dynatrace to join me on Tech Talks Daily. We talk about the longer-term impact this... by The Tech Talks Daily Podcast
27 min listen
Episode 156 - Detection as Code with Nick Hakmiller: In this episode, we speak to a Detection and Response expert! Our guest is Nick Hakmiller, Senior Engineering Manager at Panther Labs. Nick was first exposed to technology in High School where he took an introduction to Visual Basic programming cours... by Hacker Valley Studio
38 min listen
Harmonizing User Privacy with Web Functionality and Ad-Blocking Technology: Ryan Brown (Filterset Engineer at Brave) and Peter Snyder (Senior Privacy Researcher at Brave) discuss the latest advancements in ad-blocking technology, and how Brave's control over its browser stack plays a crucial role in maintaining a private yet... by The Brave Technologist
39 min listen
Corporate Ransomware Deep Dive - Jeremiah Grossman, Mikko Hypponen - PSW #828: In this RSAC 2024 South Stage Keynote, Mikko Hyppönen will look back at the past decade of ransomware evolution and explore how newer innovations, like AI, are shaping its future. Illuminating the Cybersecurity Path: A Conversation with... by Security Weekly Podcast Network (Audio)
116 min listen
1462: How Industrial Remote Workers Are Leveraging Mixed Reality: How Kognitiv Spark is empowering field workers with Microsoft HoloLens by The Tech Talks Daily Podcast
21 min listen
Episode 112 - Cybersecurity and Ambient Computing with Dr. James Stanger: In this episode of the Hacker Valley Studio podcast, hosts Ron and Chris interview the brilliant Dr. James Stanger, Chief Technology Evangelist at CompTIA and scuba diving aficionado. The episode is a kind of journey through time - touching on the p... by Hacker Valley Studio
25 min listen

Discover this podcast and so much more

Security Best Practices for Developers

Security Best Practices for Developers

Description

Titles in the series (100)

More Episodes from Security This Week

Related podcast episodes