Security Weekly
Application Security WeeklySubscribe

Application Security Weekly #1

View Show Index

Segments

1. NVIDIA, Oracle, Coinbase, and Bitcoin – Application Security Weekly #1

In the Application Security News, Paul and Keith discuss how malicious NPM packages could harvest credit card numbers and passwords from your site, NVIDIA updates video drivers to help address CPU memory security, multiple vulnerabilities in PHP could allow for arbitrary code execution, and Oracle WebLogic vulnerabilities being exploited by Bitcoin miners! All that and more, on this episode of Application Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ASW_Episode01 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

2. OWASP Top 10 (2017) Overview – Application Security Weekly #1

This week, Paul and Keith discuss the ten most critical web application security risks! They discuss broken authentication, sensible data exposure, XML external entities (XXE), broken access control, security configuration, and more on this episode of Application Security Weekly!  Full Show Notes: https://wiki.securityweekly.com/ASW_Episode01 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Related

Threat Modeling and Understanding Inherent Threats – Adam Shostack – ESW #359

This is a great interview with Adam Shostack on all things threat modeling. He's often the first name that pops into people's heads when threat modeling comes up, and has created or been involved with much of the foundational material around the subject. Adam recently released a whitepaper that focuses on and defines inherent threats. Resources: ...
How GenAI Can Improve SecOps – Ely Kahn – ESW #359

We've talked about generative AI in a general sense on our podcast for years, but we haven't done many deep dives into specific security use cases. That ends with this interview, as we discuss how generative AI can improve SecOps with Ely Kahn. Some of the use cases are obvious, while others were a complete surprise to me. Check out this episode if...