DARPA's AI Challenge, CISA Wants Secure Open Source, 5 Years of Vuln Research - ASW #251 | Security Weekly Podcast Network (Video) Podcast

DARPA's AI Challenge, CISA Wants Secure Open Source, 5 Years of Vuln Research - ASW #251: DARPA unleashes an AI Cyber Challenge to find flaws, CISA asks for input on securing open source software and memory safety, what five years of vuln research shows for vuln management programs, siphoning security tokens from VS Code, and more! ... by Application Security Weekly (Video)

34 min listen

Bug Bounty Costs, GitHub's Advisory Database, ICS Vulns of 2021, CNCF Secure Software - ASW #186: Salesforce reveals their bounty totals for 2021, GitHub opens its advisory database for collaboration, a year in review of ICS vulns, automating WordPress plugin security analysis, the Secure Software Factory from CNCF, Samsung's encryption mistakes,... by Application Security Weekly (Video)

42 min listen

Bug Bounty Costs, GitHub's Advisory Database, ICS Vulns of 2021, CNCF Secure Software - ASW #186: Salesforce reveals their bounty totals for 2021, GitHub opens its advisory database for collaboration, a year in review of ICS vulns, automating WordPress plugin security analysis, the Secure Software Factory from CNCF, Samsung's encryption mistakes,... by Security Weekly Podcast Network (Video)

42 min listen

What's the Deal with API Security? - Sandy Carielli - ASW #243: Walking the show floor at RSA Conference, you couldn't trip without falling into an application security vendor booth ... and API security specialists were especially plentiful. Join Forrester Principal Analyst Sandy Carielli for her thoughts on RSA... by Security Weekly Podcast Network (Audio)

77 min listen

Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Security Weekly Podcast Network (Audio)

74 min listen

DCNextGen, Memory Safety And More! - PSW #819: BiaSciLab from DEF CON joins us to discuss DCNextGen! In the security News: MouseJacking still works, CISA recommends a complete rebuild, memory safety and re-writing code, not all doorbells are created equal, putting a firewall in front of your LLM,... by Security Weekly Podcast Network (Video)

121 min listen

Application News - ASW #81: From Stackoverflow to CVE, with some laughs along the way, Four-Year-Old Critical Linux Wi-Fi Bug Allows System Compromise, Recent Site Isolation improvements in Chrome, policy_sentry is an IAM Least Privilege Policy Generator, auditor, and analysis... by Security Weekly Podcast Network (Video)

36 min listen

Application News - ASW #81: From Stackoverflow to CVE, with some laughs along the way, Four-Year-Old Critical Linux Wi-Fi Bug Allows System Compromise, Recent Site Isolation improvements in Chrome, policy_sentry is an IAM Least Privilege Policy Generator, auditor, and analysis... by Application Security Weekly (Video)

36 min listen

ISC StormCast for Thursday, September 29th 2016: Rig Exploit Kit; osquery for Windows; Update Cowrie; BIND&Cisco DoS by SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

5 min listen

ASW #220 - Daniel Krivelevich: CosMiss in Azure, $70k bounty for a Pixel Lock Screen bypass, finding path traversal with Raspberry Pi-based emulators, NSA guidance on moving to memory safe languages, implementing phishing-resistant MFA, egress filtering, and how to approach code... by Security Weekly Podcast Network (Audio)

88 min listen

Strange New Clouds - ASW #163: This week, we welcome Shubhra Kar, Global CTO and GM of Products & IT at The Linux Foundation, to discuss Challenges in Open Source Application Security! In the AppSec News: BlackBerry addresses BadAlloc bugs, glibc fixes a fix, more snprintf... by Security Weekly Podcast Network (Audio)

71 min listen

PSW #749 - Larry Pesce: We’ve heard about the recent abuses for Apple’s AirTags used in tracking and stalking issues in recent months. While tools exist for detection under the Apple ecosystem, limited options exist for Android and none under Linux. We’ll explore the... by Security Weekly Podcast Network (Audio)

184 min listen

ASW #222 - Aviv Grafi: Android platform certs leaked, SQL injection to leaked credentials to cross-tenant access in IBM's Cloud Database, hacking cars through web-based APIs, technical and social considerations when getting into bug bounties, a brief note on memory safety... by Security Weekly Podcast Network (Audio)

81 min listen

China's Top Hacking Contest, GitHub Actions, & Vulnonym - ASW #129: China's top hacking contest turns months of effort into 15 minutes of exploits, an injection flaw in GitHub Actions, understanding post-compromise activity in exploits targeting Solaris and VoIP, security and quality challenges in integrating software... by Security Weekly Podcast Network (Video)

34 min listen

China's Top Hacking Contest, GitHub Actions, & Vulnonym - ASW #129: China's top hacking contest turns months of effort into 15 minutes of exploits, an injection flaw in GitHub Actions, understanding post-compromise activity in exploits targeting Solaris and VoIP, security and quality challenges in integrating software... by Application Security Weekly (Video)

34 min listen

US most breached, ChatGPT gets DDoS, Clop exploits SysAid: US most breached country last quarter OpenAI blames DDoS attacks for ongoing ChatGPT outages Clop exploits SysAid vulnerability Thanks to today's episode sponsor, OffSec And now a word from our sponsor. (formerly Offensive Security), the cyber... by Cyber Security Headlines

8 min listen

The Benefits of SAST and SCA in Your IDE - Utsav Sanghani - ASW #101: Static application security testing (SAST) is critical for uncovering and eliminating issues in proprietary code. However, over 60% of the code in an average application today is composed of open source components. SAST isn't designed to find open... by Security Weekly Podcast Network (Video)

38 min listen

The Benefits of SAST and SCA in Your IDE - Utsav Sanghani - ASW #101: Static application security testing (SAST) is critical for uncovering and eliminating issues in proprietary code. However, over 60% of the code in an average application today is composed of open source components. SAST isn't designed to find open... by Application Security Weekly (Video)

38 min listen

CWE Top 25, Bugs in Inconstancies, Sequoia Vuln, Twitter Transparency, & Cloud Risks - ASW #159: This week in the AppSec News: CWE releases the top 25 vulns for 2021, findings bugs in similar code, Sequoia vuln in the Linux kernel, Twitter transparency for account security, a future for cloud security, & more! Visit for all the latest... by Application Security Weekly (Video)

41 min listen

CWE Top 25, Bugs in Inconstancies, Sequoia Vuln, Twitter Transparency, & Cloud Risks - ASW #159: This week in the AppSec News: CWE releases the top 25 vulns for 2021, findings bugs in similar code, Sequoia vuln in the Linux kernel, Twitter transparency for account security, a future for cloud security, & more! Visit for all the latest... by Security Weekly Podcast Network (Video)

41 min listen

Unauth'd RCE, "Regexploits", Post-Spectre Web, & SigStore Signing - ASW #143: Software safety to mitigate the impact of unauthenticated RCEs, exploding regex patterns, web and browser security in the face of Spectre side-channels, signing software artifacts, 8 roles for today's security teams. Visit for all the latest... by Application Security Weekly (Video)

29 min listen

Unauth'd RCE, "Regexploits", Post-Spectre Web, & SigStore Signing - ASW #143: Software safety to mitigate the impact of unauthenticated RCEs, exploding regex patterns, web and browser security in the face of Spectre side-channels, signing software artifacts, 8 roles for today's security teams. Visit for all the latest... by Security Weekly Podcast Network (Video)

29 min listen

Creating Code Security Through Better Visibility - Christien Rioux - ASW #273: We've been scanning code for decades. Sometimes scanning works well -- it finds meaningful flaws to fix. Sometimes it distracts us with false positives. Sometimes it burdens us with too many issues. We talk about finding a scanning strategy that works... by Security Weekly Podcast Network (Audio)

84 min listen

Android Platform Certs Leaked, Hell's Keychain, Web Hacking Cars, Bug Bounty Tips - ASW #222: Android platform certs leaked, SQL injection to leaked credentials to cross-tenant access in IBM's Cloud Database, hacking cars through web-based APIs, technical and social considerations when getting into bug bounties, a brief note on memory safety... by Security Weekly Podcast Network (Video)

43 min listen

Android Platform Certs Leaked, Hell's Keychain, Web Hacking Cars, Bug Bounty Tips - ASW #222: Android platform certs leaked, SQL injection to leaked credentials to cross-tenant access in IBM's Cloud Database, hacking cars through web-based APIs, technical and social considerations when getting into bug bounties, a brief note on memory safety... by Application Security Weekly (Video)

43 min listen

Alert Your Star Destroyers - ASW #149: Rey Bango will be digging into the developer security training conundrum based on his own experiences with secure coding and security training. He'll cover: • The types of security training that work • The role of security champions • How the... by Security Weekly Podcast Network (Audio)

71 min listen

The Psychology of Training - Matias Madou - ASW Vault: Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on May 23, 2022. Developers want bug-free code -- it frees up their time and is easier to maintain. They want secure code for the... by Security Weekly Podcast Network (Audio)

35 min listen

The Psychology of Training - Matias Madou - ASW Vault: Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on May 23, 2022. Developers want bug-free code -- it frees up their time and is easier to maintain. They want secure code for the... by Security Weekly Podcast Network (Video)

35 min listen

The Psychology of Training - Matias Madou - ASW Vault: Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on May 23, 2022. Developers want bug-free code -- it frees up their time and is easier to maintain. They want secure code for the... by Application Security Weekly (Video)

35 min listen

Starting with Appsec -- Is It More of a Position or a Process? - ASW #264: This year we've talked about vulns, clouds, breaches, presentations, and all the variations of Dev, Sec, and Ops. As we end the year, let's talk about starting things -- like starting an appsec program or an appsec career. But is there still a need... by Security Weekly Podcast Network (Video)

40 min listen

Discover this podcast and so much more

DARPA's AI Challenge, CISA Wants Secure Open Source, 5 Years of Vuln Research - ASW #251

DARPA's AI Challenge, CISA Wants Secure Open Source, 5 Years of Vuln Research - ASW #251

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes