Castuner
Submit a podcast
Language English

Absolute AppSec

Ken Johnson and Seth Law

A weekly podcast of all things application security related. Hosted by Ken Johnson and Seth Law.

Podcast website

Listen in your app

Episodes

337 episodes

  1. Episode 337 - w/Coffee, Chaos, and ProdSec - AI Guardrails, Risk Prioritization Shift
  2. Episode 336 - Hardware Image Signing, Bot Reduction, AI Code Insecurities
  3. Episode 335 - w/ Ron Perris - Secure Coding with AI
  4. Episode 331 - Being "Mythos" Ready, CRLF-Powered De-sync Attacks
  5. Episode 330 - w/ Jeevan Singh - Vulnerability Jail
  6. Episode 329 - AI exploitability, IDOR prevention, Smart TV Proxies
  7. Episode 328 - Wordpress RCE, Vuln Prioritization, AI memory exfiltration
  8. Episode 327 - w/Coffee, Chaos, and ProdSec - ASPM Consolidation, Vuln Prioritization
  9. Episode 326 - AppSec Jobs, Benchmarking LLMs, Open Web Standards
  10. Episode 325 - Simplified Threat Modeling, Defining A Vulnerability
  11. Episode 324 - Three Week Trap, Malicious Extensions
  12. Episode 323 - Secrets Logs, Prompt Injection Risks
  13. Episode 322 - Megalodon, Staged Package Publishing, AI Powered Honeypots
  14. Episode 321 - The Future of AppSec
  15. Episode 320 - Return of @lojikil - LLM Bug Hunting, AI OffSec, Defender Burnout
  16. Episode 319 - Vercel Breach, Security vs. Compliance, Pull Request Flows w/ AI Agents
  17. Episode 318 - Slack Impersonation, Mythos, Vulnerability Research Future
  18. Episode 317 - (Post-RSAC/BSidesSF), Supply Chain Security, Future of SDLC
  19. Episode 316 - w/Coffee, Chaos, and ProdSec - Agentic Development Lifecycle
  20. Episode 315 - Risks of "AI-Native" Security Products, Rapid Software Development
  21. Episode 314 - LLM AppSec Disruption, Limitations of AI in Security, AppSec Oversight
  22. Episode 313 - AppSec Role Evolution, AI Skills & Risks, Phishing AI Agents
  23. Episode 312 - Vibe Coding Risks, Burnout, AppSec Scorecards
  24. Episode 311 - Transformation of AppSec, AI Skills, Development Velocity
  25. Episode 310 - w/ Mohan Kumar and Naveen K Mahavisnu - AI Agent Security
  26. Episode 309 - w/ Nathan Hunstad - Compliance, Security Governance
  27. Episode 308 - w/Avi Douglen - Privacy, AppSec Conferences, OWASP
  28. Episode 307 - 2025 Retrospective, Supply Chain, MCP and APIs
  29. Episode 306 - w/ Paul McCarty - Open Source Malware
  30. Episode 305 - Career Impact of GenAI, SEO/GEO, More Supply Chain Attacks
  31. Episode 304 - More OWASP Top 10, AI Dynamic Testing
  32. Episode 303 - w/Prof. Brian Glas - OWASP Top 10 2025
  33. Episode 302 - OWASP Global AppSec DC predictions, AI Browser Dangers, MCP Security
  34. Episode 301 - AI Browsers, New AI Agent Attacks, Framework Checklists
  35. Episode 300 - THIS! IS! APPSEC!
  36. Episode 299 - Startup Grind, Will Security Companies Disappear
  37. Episode 298 - Shai Hulud, Layered Security, New Commandments of Security Teams
  38. Episode 297 - True/False Positives, Phishing Package Maintainers
  39. Episode 296 - OWASP Top 10, NX Compromise, Security News Sources
  40. Episode 295 - DEF CON 33 Recap, Crocs and Socks (and Bots)
  41. Episode 294 - w/ Anshuman Bhartiya - AppSec in the Age of AI
  42. Episode 293 - AppSec's Reality Gap
  43. Episode 292 - Manual Source Code Review, AI Slop in Bug Bounties, AppSec Authorization
  44. Episode 291 - w/ Sean Varga - OWASP Top 10 of AppSec Sales
  45. Episode 290 - Authentication Fatigue, Browser AI Agents
  46. Episode 289 - Return of @lojikil - Context Matters
  47. Episode 288 - Security and AI
  48. Episode 287 - w/ Hayden Smith (Hunted Labs) - Open Source Dependency Threats
  49. Episode 286 - Kayra Otaner - Authenticating Open Source Developers
  50. Episode 285 - easyjson, Software Dependencies, Breaches