Application Security Weekly (Video)
News:Tech News
An old security bug in the Play library still affects 8% of apps in Google Play, Project Zero researcher spends six months to reboot an iPhone (in an epic manner), GitHub looks at the security of repos within its Octoverse, the OWASP Web Security Testing Guide gets a minor bump, and XS-Leaks get more attention.
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw133
Hacking AI Bias with Human Techniques - Keith Hoodlet - ASW #284
AI & Hype & Security (Oh My!) - Caleb Sima - ASW #284
Random Problems, Protecting Packages, and Vulns in Designs, Defaults & Data Leaks - ASW #283
Why Companies Continue to Struggle with Supply Chain Security - Melinda Marks - ASW #283
XZ & Open Source, PuTTY's Private Keys, LeakyCLI, LLMs Writing Exploits - ASW #282
Sustainable Funding of Open Source Tools - Simon Bennetts, Mark Curphey - ASW #282
Arg Parsing in Rust, End of Life Hardware, CSRB & MS, Chrome’s V8 Sandbox - ASW #281
Demystifying Security Engineering Career Tracks - Karan Dwivedi - ASW #281
OWASP Breach, Types of Prompt Injection, Device-Bound Sessions, ASVS & APIs - ASW #280
Lessons That The XZ Utils Backdoor Spells Out - Farshad Abasi - ASW #280
Top 10's First Update, Metasploit's Second Update, PHP Prepares Statements, RSA & MS - ASW #279
Infosec Myths, Mistakes, and Misconceptions - Adrian Sanabria - ASW #279
Successful Security Needs a Streamlined UX - Benedek Gagyi - ASW #278
GoFetch Side Channel, OpenSSF & Security Education, Fuzzing vs. Formal Verification - ASW #278
Vulns in Smart Locks, FCC labels for IoT, ZAP's New Home - ASW #277
Figuring Out Where Appsec Fits When Starting a Cybersecurity Program - Tyler VonMoll - ASW #277
TeamCity Authn Bypass, ArtPrompt Attacks, Low Quality Vuln Reports, Secure by Design - ASW #276
More API Calls, More Problems: The State of API Security in 2024 - Lebin Cheng - ASW #276
SAML & Secrets, Serializing AI Models, OWASP ISTG, More Memory Safety - ASW #275
The Simple Mistakes and Complex Seeds of a Vulnerability Management Program - Emily Fox - ASW #275
Create your
podcast in
minutes
It is Free
WSJ Tech News Briefing
gm! crypto
CyberWire Daily
Cyber Security Headlines
The WAN Show