بهترین پادکست های Application Security (2025)

1
Javan Rasokat and Andra Lezza -- When Chatbots Go Rogue - Lessons Learned from Building and Defending LLM Applications 47:31

6d ago47:31

47:31

Andra Lezza and Javan Rasokat discuss the complexities of securing AI and LLM applications. With years of experience in Application Security (AppSec), Andra and Javan share their journey and lessons from their DEF CON talk on building and defending LLMs. They explore critical vulnerabilities, prompt injection, hallucinations, and the importance of …

1
Redlining the Smart Contract Top 10 - Shashank . - ASW #322 53:01

6d ago53:01

53:01

The crypto world is rife with smart contracts that have been outsmarted by attackers, with consequences in the millions of dollars (and more!). Shashank shares his research into scanning contracts for flaws, how the classes of contract flaws have changed in the last few years, and how optimistic we can be about the future of this space. Segment Res…

1
Redlining the Smart Contract Top 10 - Shashank - ASW #322 53:01

6d ago53:01

53:01

The crypto world is rife with smart contracts that have been outsmarted by attackers, with consequences in the millions of dollars (and more!). Shashank shares his research into scanning contracts for flaws, how the classes of contract flaws have changed in the last few years, and how optimistic we can be about the future of this space. Segment Res…

1
Skype Hangs Up, Android Backdoors, Jailbreak Research, Pretend AirTags, Wallbleed - ASW #321 33:17

13d ago33:17

33:17

Skype hangs up for good, over a million cheap Android devices may be backdoored, parallels between jailbreak research and XSS, impersonating AirTags, network reconnaissance via a memory disclosure vuln in the GFW, and more! Show Notes: https://securityweekly.com/asw-321

1
Jim Routh -- The CISO Transition to the rest of life 49:36

13d ago49:36

49:36

Former CISO Jim Routh discusses his perspective on retirement and career fulfillment in cybersecurity. Rather than viewing retirement as simply stopping work, Routh describes his three-filter approach: working only with people he respects and admires, doing only work he finds fulfilling, and controlling when he works. He shares valuable lessons lea…

1
CISA's Secure by Design Principles, Pledge, and Progress - Jack Cable - ASW #321 40:34

13d ago40:34

40:34

Just three months into 2025 and we already have several hundred CVEs for XSS and SQL injection. Appsec has known about these vulns since the late 90s. Common defenses have been known since the early 2000s. Jack Cable talks about CISA's Secure by Design principles and how they're trying to refocus businesses on addressing vuln classes and prioritizi…

1
CISA's Secure by Design Principles, Pledge, and Progress - Jack Cable - ASW #321 1:13:50

13d ago1:13:50

1:13:50

Just three months into 2025 and we already have several hundred CVEs for XSS and SQL injection. Appsec has known about these vulns since the late 90s. Common defenses have been known since the early 2000s. Jack Cable talks about CISA's Secure by Design principles and how they're trying to refocus businesses on addressing vuln classes and prioritizi…

1
QR Codes Replacing SMS, MS Pulls VSCode Extension, Threat Modeling, Bybit Hack - ASW #320 33:55

20d ago33:55

33:55

Google replacing SMS with QR codes for authentication, MS pulls a VSCode extension due to red flags, threat modeling with TRAIL, threat modeling the Bybit hack, malicious models and malicious AMIs, and more! Show Notes: https://securityweekly.com/asw-320

1
Henrik Plate -- OWASP Top 10 Open Source Risks 38:26

20d ago38:26

38:26

Henrik Plate joins us to discuss the OWASP Top 10 Open Source Risks, a guide highlighting critical security and operational challenges in using open source dependencies. The list includes risks like known vulnerabilities, compromised legitimate packages, name confusion attacks, and unmaintained software, providing developers and organizations a fra…

1
Keeping Curl Successful and Secure Over the Decades - Daniel Stenberg - ASW #320 35:08

20d ago35:08

35:08

Curl and libcurl are everywhere. Not only has the project maintained success for almost three decades now, but it's done that while being written in C. Daniel Stenberg talks about the challenges in dealing with appsec, the design philosophies that keep it secure, and fostering a community to create one of the most recognizable open source projects …

1
Keeping Curl Successful and Secure Over the Decades - Daniel Stenberg - ASW #320 1:09:02

20d ago1:09:02

1:09:02

Curl and libcurl are everywhere. Not only has the project maintained success for almost three decades now, but it's done that while being written in C. Daniel Stenberg talks about the challenges in dealing with appsec, the design philosophies that keep it secure, and fostering a community to create one of the most recognizable open source projects …

1
Tanya Janca -- A Secure SDLC from a Developer's Perspective 48:54

26d ago48:54

48:54

Security expert Tanya Janca discusses her new book "Alice and Bob Learn Secure Coding" and shares insights on making security accessible to developers. In this engaging conversation, she explores how security professionals can better connect with developers through threat modeling, maintaining empathy, and creating inclusive learning environments. …

1
Regex DoS, LLM Backdoors, Secure AI Architectures, Rust Survey - ASW #319 36:26

27d ago36:26

36:26

Applying forgivable vs. unforgivable criteria to reDoS vulns, what backdoors in LLMs mean for trust in building software, considering some secure AI architectures to minimize prompt injection impact, developer reactions to Rust, and more! Show Notes: https://securityweekly.com/asw-319

1
Developer Environments, Developer Experience, and Security - Dan Moore - ASW #319 1:10:21

27d ago1:10:21

1:10:21

Minimizing latency, increasing performance, and reducing compile times are just a part of what makes a development environment better. Throw in useful tests and some useful security tools and you have an even better environment. Dan Moore talks about what motivates some developers to prefer a "local first" approach as we walk through what all of th…

1
Developer Environments, Developer Experience, and Security - Dan Moore - ASW #319 33:56

27d ago33:56

33:56

Minimizing latency, increasing performance, and reducing compile times are just a part of what makes a development environment better. Throw in useful tests and some useful security tools and you have an even better environment. Dan Moore talks about what motivates some developers to prefer a "local first" approach as we walk through what all of th…

1
Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318 44:57

1M ago44:57

44:57

We're getting close to two full decades of celebrating web hacking techniques. James Kettle shares which was his favorite, why the list is important to the web hacking community, and what inspires the kind of research that makes it onto the list. We discuss why we keep seeing eternal flaws like XSS and SQL injection making these lists year after ye…

1
Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318 44:57

1M ago44:57

44:57

We're getting close to two full decades of celebrating web hacking techniques. James Kettle shares which was his favorite, why the list is important to the web hacking community, and what inspires the kind of research that makes it onto the list. We discuss why we keep seeing eternal flaws like XSS and SQL injection making these lists year after ye…

1
Unforgivable Vulns, DeepSeek iOS App Security Flaws, Memory Safety Standards - ASW #317 35:52

1M ago35:52

35:52

Identifying and eradicating unforgivable vulns, an unforgivable flaw (and a few others) in DeepSeek's iOS app, academics and industry looking to standardize principles and practices for memory safety, and more! Show Notes: https://securityweekly.com/asw-317

1
Mehran Koushkebaghi -- Security as a Systemic Concern: How to develop Anti-Requirements 45:08

1M ago45:08

45:08

Mehran Koushkebaghi, a seasoned engineering expert, delves into the intricacies of systemic security. He draws parallels between civil engineering and IT systems, and explains the importance of holistic thinking in security design. Discover the difference between semantic and syntactic vulnerabilities and understand how anti-requirements play a cri…

1
Code Scanning That Works With Your Code - Scott Norberg - ASW #317 37:01

1M ago37:01

37:01

Code scanning is one of the oldest appsec practices. In many cases, simple grep patterns and some fancy regular expressions are enough to find many of the obvious software mistakes. Scott Norberg shares his experience with encountering code scanners that didn't find the .NET vuln classes he needed to find and why that led him to creating a scanner …

1
Code Scanning That Works With Your Code - Scott Norberg - ASW #317 1:12:52

1M ago1:12:52

1:12:52

Code scanning is one of the oldest appsec practices. In many cases, simple grep patterns and some fancy regular expressions are enough to find many of the obvious software mistakes. Scott Norberg shares his experience with encountering code scanners that didn't find the .NET vuln classes he needed to find and why that led him to creating a scanner …

1
New SLAP & FLOP Attacks, OCSP Fades Away, DeepSeek's ClickHouse, OAuth 2.0 Security - ASW #316 34:47

2M ago34:47

34:47

Speculative data flow attacks demonstrated against Apple chips with SLAP and FLOP, the design and implementation choices that led to OCSP's demise, an appsec angle on AI, updating the threat model and recommendations for implementing OAuth 2.0, and more! Show Notes: https://securityweekly.com/asw-316…

1
Kalyani Pawar -- Shaping AppSec at Startups 39:52

2M ago39:52

39:52

Kalyani Pawar shares critical strategies for integrating security early and effectively in AppSec for startups. She recommends that startups begin focusing on AppSec around the 30-employee mark, with an ideal ratio of one AppSec professional per 10 engineers as the company grows. Pawar emphasizes the importance of building a security culture throug…

پادکست هایی که ارزش شنیدن دارند

پادکست های Application Security

پادکست هایی که ارزش شنیدن دارند

1
Application Security Weekly (Audio)

Security Weekly Productions

1
Application Security Weekly (Video)

Security Weekly

1
The Application Security Podcast

Chris Romeo and Robert Hurlbut

1
Future of Application Security

Tromzo

1
Javan Rasokat and Andra Lezza -- When Chatbots Go Rogue - Lessons Learned from Building and Defending LLM Applications 47:31

1
Redlining the Smart Contract Top 10 - Shashank . - ASW #322 53:01

1
Redlining the Smart Contract Top 10 - Shashank - ASW #322 53:01

1
Skype Hangs Up, Android Backdoors, Jailbreak Research, Pretend AirTags, Wallbleed - ASW #321 33:17

1
Jim Routh -- The CISO Transition to the rest of life 49:36

1
CISA's Secure by Design Principles, Pledge, and Progress - Jack Cable - ASW #321 40:34

1
CISA's Secure by Design Principles, Pledge, and Progress - Jack Cable - ASW #321 1:13:50

1
QR Codes Replacing SMS, MS Pulls VSCode Extension, Threat Modeling, Bybit Hack - ASW #320 33:55

1
Henrik Plate -- OWASP Top 10 Open Source Risks 38:26

1
Keeping Curl Successful and Secure Over the Decades - Daniel Stenberg - ASW #320 35:08

1
Keeping Curl Successful and Secure Over the Decades - Daniel Stenberg - ASW #320 1:09:02

1
Tanya Janca -- A Secure SDLC from a Developer's Perspective 48:54

1
Regex DoS, LLM Backdoors, Secure AI Architectures, Rust Survey - ASW #319 36:26

1
Developer Environments, Developer Experience, and Security - Dan Moore - ASW #319 1:10:21

1
Developer Environments, Developer Experience, and Security - Dan Moore - ASW #319 33:56

1
Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318 44:57

1
Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318 44:57

1
Unforgivable Vulns, DeepSeek iOS App Security Flaws, Memory Safety Standards - ASW #317 35:52

1
Mehran Koushkebaghi -- Security as a Systemic Concern: How to develop Anti-Requirements 45:08

1
Code Scanning That Works With Your Code - Scott Norberg - ASW #317 37:01

1
Code Scanning That Works With Your Code - Scott Norberg - ASW #317 1:12:52

1
New SLAP & FLOP Attacks, OCSP Fades Away, DeepSeek's ClickHouse, OAuth 2.0 Security - ASW #316 34:47

1
Kalyani Pawar -- Shaping AppSec at Startups 39:52

راهنمای مرجع سریع