XSS in Azure, Choosing Web Research Topics, Security Dev-in-Residence, More Myths - ASW #245 | Security Weekly Podcast Network (Video) Podcast

XSS in Azure, Choosing Web Research Topics, Security Dev-in-Residence, More Myths - ASW #245: Two XSS vulns via postMessage methods in Azure, how to choose (and move on from) a web research topic, OpenSSF finances a security developer-in-residence for Python, more infosec myths, free cybersecurity training resources Visit for all... by Application Security Weekly (Video)

38 min listen

ASW #231 - Neatsun Ziv: In this episode, Neatsun Ziv, co-founder and CEO of Ox security takes a deep dive into supply chain security. He focuses on the new Open Software Supply Chain Attack Reference (OSC&R), a consortium of leading cybersecurity leaders. OSC&R the... by Security Weekly Podcast Network (Audio)

80 min listen

Zoom, Kubernetes, and Hacking - PSW #646: A little about Zoom vulnerabilities and data leaks and Cisco Webex vulnerabilities. We talk about security Kubernetes and how the same security principals apply, vulnerabilities in ICS systems and how hackers can help improve society. Oh, and smart... by Security Weekly Podcast Network (Video)

68 min listen

Sqrrl, Microsoft, & BeyondTrust - Enterprise Security Weekly #78: In the news, AWS beefs up threat detection with Sqrrl acquisition, Microsoft partners Cisco, BeyondTrust now seamlessly integrated with McAfee ePO, and more enterprise security news! Full Show Notes: Visit for all the latest episodes! by Enterprise Security Weekly (Video)

20 min listen

Sqrrl, Microsoft, & BeyondTrust - Enterprise Security Weekly #78: In the news, AWS beefs up threat detection with Sqrrl acquisition, Microsoft partners Cisco, BeyondTrust now seamlessly integrated with McAfee ePO, and more enterprise security news! Full Show Notes: https://wiki.securityweekly.com/ES_Episode78 Visit... by Security Weekly Podcast Network (Video)

20 min listen

PAN-OS Vuln, ChaosDB, Fuzzing BusyBox, Refactoring in Rust, HTML Smuggling - ASW #174: In the AppSec news: Disclosure decisions and CVE-2021-3064, technical details behind ChaosDB in Azure, fuzzing BusyBox, Prossimo and Rust, vulns in Nucleus RTOS, & HTML smuggling! Visit for all the latest episodes! Show Notes: by Application Security Weekly (Video)

39 min listen

PAN-OS Vuln, ChaosDB, Fuzzing BusyBox, Refactoring in Rust, HTML Smuggling - ASW #174: In the AppSec news: Disclosure decisions and CVE-2021-3064, technical details behind ChaosDB in Azure, fuzzing BusyBox, Prossimo and Rust, vulns in Nucleus RTOS, & HTML smuggling! Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Video)

39 min listen

Malicious PHP Commits, OAuth Attacks & XML Injection, & Zines For DevSecOps - ASW #146: PHP deals with two malicious commits, SSO and OAuth attack vectors to remember for your threat models, zines for your DevSecOps education! Visit for all the latest episodes! Show Notes: by Application Security Weekly (Video)

33 min listen

Malicious PHP Commits, OAuth Attacks & XML Injection, & Zines For DevSecOps - ASW #146: PHP deals with two malicious commits, SSO and OAuth attack vectors to remember for your threat models, zines for your DevSecOps education! Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Video)

33 min listen

Offensive Operations With Mythic - Kyle Avery - PSW #706: Mythic is an open-source, multi-platform framework for conducting red team engagements. This talk will cover the automated deployment of a Mythic server, developing new "wrappers" to extend the framework, and modifying public payload types to evade... by Security Weekly Podcast Network (Video)

57 min listen

CosMiss, Pixel Lock Screen Bypass, IIoT Path Traversal, NSA on C & C++, Code Reviews - ASW #220: CosMiss in Azure, $70k bounty for a Pixel Lock Screen bypass, finding path traversal with Raspberry Pi-based emulators, NSA guidance on moving to memory safe languages, implementing phishing-resistant MFA, egress filtering, and how to approach code... by Security Weekly Podcast Network (Video)

45 min listen

CosMiss, Pixel Lock Screen Bypass, IIoT Path Traversal, NSA on C & C++, Code Reviews - ASW #220: CosMiss in Azure, $70k bounty for a Pixel Lock Screen bypass, finding path traversal with Raspberry Pi-based emulators, NSA guidance on moving to memory safe languages, implementing phishing-resistant MFA, egress filtering, and how to approach code... by Application Security Weekly (Video)

45 min listen

Top CyberSec Skills for 2021, Xbox Gamertag Bug, & MobileIron RCE Flaw - ASW #132: Xbox bug exposed email identities, focusing on prevention for your cloud security strategies, Amazon looking to hire more Rust developers, KubeCon continues push for security, and a DevOps reading list! Visit for all the latest episodes! Show... by Application Security Weekly (Video)

31 min listen

Top CyberSec Skills for 2021, Xbox Gamertag Bug, & MobileIron RCE Flaw - ASW #132: Xbox bug exposed email identities, focusing on prevention for your cloud security strategies, Amazon looking to hire more Rust developers, KubeCon continues push for security, and a DevOps reading list! Visit for all the latest episodes! Show... by Security Weekly Podcast Network (Video)

31 min listen

All the News -- Just Six Months Later - ASW #265: We cover appsec news on a weekly basis, but sometimes that news is merely about the start of a new project, sometimes it's yet another example of a vuln class, and sometimes it's a topic we hope doesn't become a trend. So, what themes have we seen and... by Application Security Weekly (Video)

36 min listen

All the News -- Just Six Months Later - ASW #265: We cover appsec news on a weekly basis, but sometimes that news is merely about the start of a new project, sometimes it's yet another example of a vuln class, and sometimes it's a topic we hope doesn't become a trend. So, what themes have we seen and... by Security Weekly Podcast Network (Video)

36 min listen

Python Pickling, Sophos 0-Day, & AWS RDS MySQL - PSW #649: In the Security News, Half a Million Zoom Accounts Compromised by Credential Stuffing, Sold on Dark Web, Scammers pounce as stimulus checks start flowing, NSA shares list of vulnerabilities commonly exploited to plant web shells, Using Pythons... by Security Weekly Podcast Network (Video)

59 min listen

Enterprise News - ESW #160: In the news, talking about how Trustwave offers threat detection and response for Microsoft Azure, LogRhythm offers migration service to Splunk customers to address security challenges, CrowdStrikes Falcon security platform lands on AWS, and how... by Security Weekly Podcast Network (Video)

32 min listen

Enterprise News - ESW #160: In the news, talking about how Trustwave offers threat detection and response for Microsoft Azure, LogRhythm offers migration service to Splunk customers to address security challenges, CrowdStrikes Falcon security platform lands on AWS, and how... by Enterprise Security Weekly (Video)

32 min listen

All the News - Just Six Months Later - Application Security Weekly #265: We cover appsec news on a weekly basis, but sometimes that news is merely about the start of a new project, sometimes it's yet another example of a vuln class, and sometimes it's a topic we hope doesn't become a trend. So, what themes have we seen and... by Security Weekly Podcast Network (Audio)

70 min listen

PSW #760 - Michael Meis, Christopher Crowley: This week in the Security News: A Security Maturity Model for Hardware Development, Palo Alto Networks fixed a high-severity auth bypass flaw in PAN-OS, New UEFI rootkit Black Lotus offered for sale at $5,000, What are SBOMS, & Critical Remote... by Security Weekly Podcast Network (Audio)

221 min listen

FortiOS Exploit, Linux Kernel Wi-Fi Vulns, Infosec Communities, Secure Coding - ASW #216: Exploiting FortiOS with HTTP client headers, mishandling memory in Linux kernel Wi-Fi stack, a field guide to security communities, secure coding resources from the OpenSSF, Linux kernel exploitation Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Video)

41 min listen

FortiOS Exploit, Linux Kernel Wi-Fi Vulns, Infosec Communities, Secure Coding - ASW #216: Exploiting FortiOS with HTTP client headers, mishandling memory in Linux kernel Wi-Fi stack, a field guide to security communities, secure coding resources from the OpenSSF, Linux kernel exploitation Visit for all the latest episodes! Show Notes: by Application Security Weekly (Video)

41 min listen

ISC StormCast for Friday, May 8th 2020: NMAP NSE Scripts; iOS Psychic Paper; #WorldPasswordDay; #Cisco Kerberos Bypass by SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

6 min listen

Application News - ASW #81: From Stackoverflow to CVE, with some laughs along the way, Four-Year-Old Critical Linux Wi-Fi Bug Allows System Compromise, Recent Site Isolation improvements in Chrome, policy_sentry is an IAM Least Privilege Policy Generator, auditor, and analysis... by Security Weekly Podcast Network (Video)

36 min listen

Application News - ASW #81: From Stackoverflow to CVE, with some laughs along the way, Four-Year-Old Critical Linux Wi-Fi Bug Allows System Compromise, Recent Site Isolation improvements in Chrome, policy_sentry is an IAM Least Privilege Policy Generator, auditor, and analysis... by Application Security Weekly (Video)

36 min listen

Adventures In AWS Computing - PSW #638: Paul shows you how to create secure Docker containers and begin to deploy them to Amazon ECS. This segment focuses on the security aspects of taking a legacy/non-contanerized application to the cloud. Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Video)

74 min listen

Exploiting Client-Side Node.js with Moses Hernandez - Paul's Security Weekly #516: I know what you're thinking, Node.js is server-side right? Not exactly. It turns out many client-side applications have embedded Node.js. And its not always updated to the latest version. And, its vulnerable to attacks! Moses Hernandez is a Consulting... by Security Weekly Podcast Network (Video)

22 min listen

DARPA's AI Challenge, CISA Wants Secure Open Source, 5 Years of Vuln Research - ASW #251: DARPA unleashes an AI Cyber Challenge to find flaws, CISA asks for input on securing open source software and memory safety, what five years of vuln research shows for vuln management programs, siphoning security tokens from VS Code, and more! ... by Security Weekly Podcast Network (Video)

34 min listen

DARPA's AI Challenge, CISA Wants Secure Open Source, 5 Years of Vuln Research - ASW #251: DARPA unleashes an AI Cyber Challenge to find flaws, CISA asks for input on securing open source software and memory safety, what five years of vuln research shows for vuln management programs, siphoning security tokens from VS Code, and more! ... by Application Security Weekly (Video)

34 min listen

Discover this podcast and so much more

XSS in Azure, Choosing Web Research Topics, Security Dev-in-Residence, More Myths - ASW #245

XSS in Azure, Choosing Web Research Topics, Security Dev-in-Residence, More Myths - ASW #245

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes