Absolute AppSec

Latest Episodes:

Episode 68: Jerry Gamblin, DEF CON 27 Recap Aug 19, 2019

Show notes

Jerry Gamblin (@jgamblin) joins Seth and Ken to talk about #hackersummercamp, DEF CON 27, and all things Vegas. Discussion includes NULL license plates, software bill of materials, and more.

Episode 67: Kubernetes Security with Stefan and Bobby Aug 12, 2019

Show notes

Seth and Ken are joined by Stefan (@lojikil) and Bobby (@b0bbytabl3s) to talk about Kubernetes Security based on the assessment they conducted at Trail of Bits.

Episode 66: Capital One Breach, NPM, and Secure Code Reviews Jul 30, 2019

Show notes

Seth and Ken discuss the latest news, including the Capital One Breach, Project Zero's recent iOS vusnerability disclosures, and further malicious NPM package takeovers. Further topics include learning who to trust and security code reviews.

Episode 65: Adam Baldwin, 3rd Party Dependencies, and Supply Chain Security Jul 16, 2019

Show notes

Seth and Ken are joined by Adam Baldwin (@adam_baldwin) to discuss a topic we've been talking a lot about - 3rd party dependency and supply chain security. Adam gave a talk at this year's LocoMoco Security conference where he discuss fascinating and VERY relevant topics such as "developer burnout as an attack vector" as well as providing stats such as 97% of modern node applications rely on the code of 3rd party libraries.

Episode 64: Hijacked Gems, Zoom RCE, and Marriott Fines Jul 09, 2019

Show notes

Seth and Ken discuss conference proposals submissions and how to stand out. Also discussions on the latest security news, including the Zoom vulnerability disclosure, European fines for Marriott, and the latest hijacked/backdoored third-party library.

Episode 63: Julian Berton, AppSec Day, Developer Training, and Security Standards Jul 02, 2019

Show notes

Julian Berton joins Seth and Ken to talk about Developer Training, Security Standards and AppSec Day, a global Application Security conference in Melbourne, Australia. They also discuss the latest lodash vulnerability and Boeing's outsourcing of developers.

Episode 62: Abdullah Munawar, Ben Pick, Global AppSec DC, and Running an OWASP Chapter Jun 18, 2019

Show notes

Seth and Ken welcome Abdullah Munawar and Ben Pick to the show. They discuss their path into application security, current roles, and OWASP involvement. Specifically, Abdullah and Ben talk about running the OWASP NoVA chapter and challenges in organizing the Global AppSec DC conference.

Episode 61: Tanya Janca, DevSlop, Diversity, and Inclusion Jun 11, 2019

Show notes

Based on demand, Seth and Ken are joined by Tanya Janca (@shehackspurple) to talk about all things OWASP, travel, and experinces. Topics include OWASP DevSlop, diversity, and inclusion

Episode 60: Stefan Edwards, Huawei, Android Security, and Programming Languages May 21, 2019

Show notes

Seth is joined once again by Stefan Edwards to talk about current events and ruin another portion of information security. Topics include Huawei, Android Security, and Programming Languages.

Episode 59: James Wickett on DevOps May 14, 2019

Show notes

Seth and Ken discuss Minecraft mod hacking and applying AppSec tools to the practice. Joined by James Wickett (@wickett) to talk about the history of DevOps, why software security people should learn to code, and current trends in the DevOps space.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected