Castuner
Submit a podcast

Application Security Weekly (Audio)

Mike Shema

About all things AppSec, DevOps, and DevSecOps. Hosted by Mike Shema and John Kinsella, the podcast focuses on helping its audience find and fix software flaws effectively.

Podcast website

Listen in your app

Episodes

420 episodes

  1. Securing Modern Financial Systems in the Age of AI - Rashid Feroze - ASW #406 54:56
  2. Standardizing Mobile Defense: Inside the OWASP Mobile App Security Project v2 - Jan Seredynski, Ryan Lloyd - ASW #405 52:54
  3. What's Not Found in AppSec? - ASW #404 53:36
  4. Getting Granular with Access, Attributes, and Intent - Alex Olivier - ASW #403 1:10:35
  5. Going From Bug Bounty Bugs to More Secure Systems - Shlomie Liberow - ASW #402 1:02:16
  6. Understanding Prompt Injection In Order to Contain It - Julie Brunias - ASW #401 1:00:29
  7. The AI Threat Multiplier: Securing Mobile Apps in the Automated Era - Ryan Lloyd, Jason Cortlund - ASW #400 52:30
  8. Security Conversations on AI, Agents, and Emerging Threats from Black Hat 2026 - Michael Leland, Ido Geffen, Sean Murphy, Idan Plotnik - ASW #399 1:09:07
  9. Fixing Software Weaknesses Rather Than Just Finding More Flaws - Gil Geron, Nidhi Aggarwal, Braden Russell - ASW #398 1:08:01
  10. Applying Zero Trust Principles to Agents - Kieran Human - ASW #397 1:06:40
  11. Augmenting Threat Intel Analysis with Agents - Chris Wallis, Sai Kiran Uppu, Ramin Farassat - ASW #396 1:09:00
  12. Using LLMs for Vuln Discovery - Rishi Sharma - ASW #395 1:09:11
  13. Prompting for Patches That Fix Vulns Without Adding New Ones - Keith Hoodlet - ASW #394 1:03:35
  14. Inside the OWASP Agent Security Regression Harness Project - Mert Satilmaz - ASW #393 1:09:55
  15. MacOS Security Design Features, Flaws, And Futures - Patrick Wardle - ASW #392 1:12:06
  16. Discovering & Securing Your AI Agent Attack Surface - Jeremy Snyder - ASW #391 1:07:29
  17. Defense-in-depth strategies for securing mobile applications - Ryan Lloyd - ASW #390 47:53
  18. Reducing Attack Surface & Evaluating Efficiency in Agents - Itamar Apelblat, David Goldschlag - ASW #389 1:12:39
  19. How AI Is Reshaping Identity Security at the Infrastructure Layer - Amit Masand, Neha Duggal, Ev Kontsevoy - ASW #388 1:10:01
  20. Why Does It Matter Who or What Created the Code? - Matias Madou - ASW #387 1:06:40
  21. Scanner Results Are a Starting Point. Here's What Comes Next. - Federico Kirschbaum - ASW #386 1:16:23
  22. BadHost, Dead CTFs, Exploding NPMs, and the Verizon DBIR - ASW #385 45:22
  23. AppSec Conversations on Agents, LLMs, and OWASP from RSAC - Merritt Maxim, Scott Clinton, Janet Worthington - ASW #384 59:40
  24. The State of AI & AppSec - Keith Hoodlet - ASW #383 1:02:56
  25. Why Basic Security Practices Still Work - Rob Allen - ASW #382 1:11:53
  26. Keeping Up With the OWASP GenAI Project - Scott Clinton - ASW #381 1:09:11
  27. Top 10 Web Hacking Techniques of 2025 and a Hint for 2026 - James Kettle - ASW #380 44:55
  28. The Human Aspect of Red Teams - Brian Fox, Tom Tovar, T. Gwyddon 'Data' Owen - ASW #379 1:13:24
  29. Securing Software's Journey with the OWASP SPVS - Ido Geffen, Rohan Ravindranath, Cameron W., Farshad Abasi - ASW #378 1:09:50
  30. AppSec News Roundup on Claude Code Leak, Axios NPM Compromise, Secure Design - Idan Plotnik, Raj Mallempati - ASW #377 1:08:42
  31. Developing the Skills Needed for Modern Software Development - Keith Hoodlet, Shashwat Sehgal, Ron Rasin - ASW #376 1:15:40
  32. Why Proactive Security Is Far Better Than Patching - Erik Nost - ASW #375 38:04
  33. Creating Better Security Guidance and Code with LLMs - Mark Curphey - ASW #374 1:04:08
  34. Making Medical Devices Secure - Tamil Mathi - ASW #373 1:03:22
  35. Modern AppSec that keeps pace with AI development - James Wickett - ASW #372 47:45
  36. Helping Users with Practical Advice to Protect their Digital Devices - Runa Sandvik - ASW #371 1:00:17
  37. Conducting Secure Code Analysis with LLMs - ASW #370 46:26
  38. Bringing Strong Authentication and Granular Authorization for GenAI - Dan Moore - ASW #369 1:09:24
  39. Focusing on Proactive Controls in the Face of LLM-Assisted Malware - Rob Allen - ASW #368 1:07:11
  40. Building proactive defenses that reflect the true nature of modern software risk - Paul Davis - ASW #367 1:13:15
  41. Lessons from MongoBleed, CWE Top 25, and Secure Coding Benchmarks - ASW #366 44:05
  42. Secure By Design Is Better Than Secure By Myth - Bob Lord - ASW #365 53:33
  43. The Upsides and Downsides of LLM-Generated Code - Chris Wysopal - ASW #364 1:10:12
  44. AI-Era AppSec: Transparency, Trust, and Risk Beyond the Firewall - Felipe Zipitria, Steve Springett, Aruneesh Salhotra, Ken Huang - ASW #363 1:06:43
  45. Modern AppSec: OWASP SAMM, AI Secure Coding, Threat Modeling & Champions - Sebastian Deleersnyder, Dustin Lehr, James Manico, Adam Shostack - ASW #362 1:07:52
  46. Developing Open Source Skills for Maintaining Projects - Kat Cosgrove - ASW #361 1:03:55
  47. Making OAuth Scale Securely for MCPs - Aaron Parecki - ASW #360 1:07:43
  48. Making TN Critical Infrastructure the Most Secure in the Nation - T. Gwyddon 'Data' ("Gwee-thin") Owen, James Cotter - ASW #359 59:02
  49. Figuring Out Where to Start with Secure Code - ASW #358 46:23
  50. Secure Coding as Critical Thinking Instead of Vulnspotting - Matias Madou - ASW #357 1:03:41