<p><div align="center"><iframe src="https://www.youtube.com/embed/vcu9BtVx_So?rel=0" width="560" height="315" 
frameborder="0" allowfullscreen="allowfullscreen"></iframe></div></p>

<p><p>In the news, we discuss 5 tips on how testers can collaborate with software developers, Imperva discloses a data breach affecting some firewall users, VMware unveils security enhancements in Virtual Cloud Network Offering, and how Veristor and Synack partner to apply Ethical Hackers and AI Technology!

Full Show Notes: https://wiki.securityweekly.com/ES_Episode151
</p><p>Visit https://www.securityweekly.com/esw for all the latest episodes!
</p></p>
<p><a href="https://wiki.securityweekly.com/ES_Episode151
</p><p>Visit https://www.securityweekly.com/esw for all the latest episodes!
</p>">Full Show Notes</a></p>
<p>To learn more about our sponsors visit: <a href="https://securityweekly.com/sponsors">The Security Weekly Sponsor's Page</a><p>
<h1>Imperva, Cofense, & VMware </h1>
<p></p>
<h1>Hosts</h1>
<table>
<tr>

<td>[caption id="attachment_210" align="alignleft" width="120"]<img class="wp-image-210" src="http://securityweekly.com/wp-content/uploads/2019/08/MattAlderman-0-59.png" alt="Matt Alderman" width="120" height="96"> Matt Alderman  - CEO[/caption]</td>

<td>[caption id="attachment_210" align="alignleft" width="120"]<img class="wp-image-210" src="http://securityweekly.com/wp-content/uploads/2019/08/Paul_Asadoorian-0-52.jpg" alt="Paul Asadoorian" width="120" height="96"> Paul Asadoorian  - Founder & CTO[/caption]</td>

</tr>
</table>
<h1>Guests</h1>
<table>
<tr>

</tr>
</table>

<h1>Announcements</h1>
<ul style="margin-left: 50px;">

<li>We have exciting news about the Security Weekly webcast program: We are now partnered with (ISC)2 as an official CPE provider! If you attend any of our webcasts, you will be receiving 1 CPE credit per webcast! Register for one of our upcoming webcast with Zane Lackey of Signal Sciences, Ian McShane from Endgame, or Stephen Smith and Jeff Braucher of LogRhythm (or all 3!) by going to securityweekly.com/webcasts If you have missed any of our previously recorded webcasts, you can find our on-demand library at securityweekly.com/ondemand</li>

<li>Security Weekly will be at Hacker Halted in Atlanta, GA this October 10th-11th! EC-Council is offering our listeners a $100 discount to attend the two day conference. Use discount code HH19SW when you register or go to securityweekly.com/hackerhalted and register there! Make sure you checkout the keynote (Paul Asadoorian) and Mr. Jeff Man's talk as well!</li>


</ul>
<p>[audio src="http://traffic.libsyn.com/sw-all/ESW_151_-_Enterprise_News-0_converted.mp3"]</p>

<p><div align="center"><iframe src="https://www.youtube.com/embed/vcu9BtVx_So?rel=0" width="560" height="315" 
frameborder="0" allowfullscreen="allowfullscreen"></iframe></div>
</p>
<p><p>In the news, we discuss 5 tips on how testers can collaborate with software developers, Imperva discloses a data breach affecting some firewall users, VMware unveils security enhancements in Virtual Cloud Network Offering, and how Veristor and Synack partner to apply Ethical Hackers and AI Technology!</p>
<p>Full Show Notes: https://wiki.securityweekly.com/ES_Episode151
</p>
<p>Visit https://www.securityweekly.com/esw for all the latest episodes!
</p>
</p>
<p><a href="https://wiki.securityweekly.com/ES_Episode151
</p>
<p>Visit https://www.securityweekly.com/esw for all the latest episodes!
</p>
<p>&#8220;>Full Show Notes</a></p>
<p>To learn more about our sponsors visit: <a href="https://securityweekly.com/sponsors">The Security Weekly Sponsor&#8217;s Page</a></p>
<p><h1>Imperva, Cofense, &#038; VMware </h1>
</p>
<h1>Hosts</h1>
<table>
<tr>
<td><div id="attachment_210" style="width: 130px" class="wp-caption alignleft"><img aria-describedby="caption-attachment-210" class="wp-image-210" src="http://securityweekly.com/wp-content/uploads/2019/08/MattAlderman-0-59.png" alt="Matt Alderman" width="120" height="96"><p id="caption-attachment-210" class="wp-caption-text">Matt Alderman  &#8211; CEO</p></div></td>
<td><div id="attachment_210" style="width: 130px" class="wp-caption alignleft"><img aria-describedby="caption-attachment-210" class="wp-image-210" src="http://securityweekly.com/wp-content/uploads/2019/08/Paul_Asadoorian-0-52.jpg" alt="Paul Asadoorian" width="120" height="96"><p id="caption-attachment-210" class="wp-caption-text">Paul Asadoorian  &#8211; Founder &#038; CTO</p></div></td>
</tr>
</table>
<h1>Guests</h1>
<table>
<tr>
</tr>
</table>
<h1>Announcements</h1>
<ul style="margin-left: 50px;">
<li>We have exciting news about the Security Weekly webcast program: We are now partnered with (ISC)2 as an official CPE provider! If you attend any of our webcasts, you will be receiving 1 CPE credit per webcast! Register for one of our upcoming webcast with Zane Lackey of Signal Sciences, Ian McShane from Endgame, or Stephen Smith and Jeff Braucher of LogRhythm (or all 3!) by going to securityweekly.com/webcasts If you have missed any of our previously recorded webcasts, you can find our on-demand library at securityweekly.com/ondemand</li>
<li>Security Weekly will be at Hacker Halted in Atlanta, GA this October 10th-11th! EC-Council is offering our listeners a $100 discount to attend the two day conference. Use discount code HH19SW when you register or go to securityweekly.com/hackerhalted and register there! Make sure you checkout the keynote (Paul Asadoorian) and Mr. Jeff Man&#8217;s talk as well!</li>
</ul>

<audio class="wp-audio-shortcode" id="audio-170179-1" preload="none" style="width: 100%;" controls="controls"><source type="audio/mpeg" src="http://traffic.libsyn.com/sw-all/ESW_151_-_Enterprise_News-0_converted.mp3?_=1" /><a href="http://traffic.libsyn.com/sw-all/ESW_151_-_Enterprise_News-0_converted.mp3">http://traffic.libsyn.com/sw-all/ESW_151_-_Enterprise_News-0_converted.mp3</a></audio>

wordpress_151_Enterprise_News-0.jpg

Security Weekly

Application security

Imperva, Cofense, & VMware – ESW #151

North America

Podcast

Related Events


<p>APIs are the great connectors. API communications now make up more than 80% of Internet traffic and Gartner predicts that they will become the most frequent attack vector this year. Yet APIs are often overlooked in web application security programs. It’s not surprising that attackers are taking advantage of this gap and increasingly targeting web APIs to gain a foothold, deny access, install bots, escalate privilege, and find sensitive data.</p>



<p>In this webcast, ThreatX co-founder, and Chief Strategy Officer, Bret Settle, and CyberRisk Alliance VP of Custom Content Bill Brenner will discuss the types of attack methods used against APIs. They will then introduce an integrative approach to API and web application security that provides full visibility into API and web application traffic to identify bad behaviors and vulnerabilities being targeted.</p>



<p><strong>Speakers:</strong></p>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img src="https://files.scmagazine.com/wp-content/uploads/2022/01/BretSettleCropped.jpg" alt="Speaker"/></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Bret Settle</p><p class="speaker-job">Co-Founder &amp; Chief Strategy Officer</p><p class="speaker-company">ThreatX</p></div><div class="speaker-description"><p>Bret has served in multiple executive roles for Corporate Express/Staples and BMC Software. He has extensive knowledge of the software development and security products industries. Bret has been responsible for enterprise security in multiple roles and has been an innovator throughout his career. His proven track record of building and developing high-performing organizations and dynamic cyber security teams helps ThreatX deliver AppSec services that meet enterprise needs.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img src="https://files.scmagazine.com/wp-content/uploads/2021/09/Bill-Brenner.jpg" alt="Speaker"/></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Bill Brenner</p><p class="speaker-job">VP, Content</p><p class="speaker-company">Cyber Risk Alliance</p></div><div class="speaker-description"><p>Bill Brenner is VP of Content Strategy at CyberRisk Alliance &#8212; an InfoSec content strategist, researcher, director, tech writer, blogger and community builder. He was formerly director of research at IANS, senior writer/content strategist at Sophos, senior tech writer for Akamai Technology&#8217;s Security Intelligence Research Team (Akamai SIRT), managing editor for CSOonline.com and senior writer for SearchSecurity.com.</p></div></div></div></div>



<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-large"><img width="1024" height="210" src="https://files.scmagazine.com/wp-content/uploads/2022/01/threatx_owler_20210615_235604_original-1024x210.png" alt="" class="wp-image-208393" srcset="https://files.scmagazine.com/wp-content/uploads/2022/01/threatx_owler_20210615_235604_original-1024x210.png 1024w, https://files.scmagazine.com/wp-content/uploads/2022/01/threatx_owler_20210615_235604_original-300x61.png 300w, https://files.scmagazine.com/wp-content/uploads/2022/01/threatx_owler_20210615_235604_original-768x157.png 768w, https://files.scmagazine.com/wp-content/uploads/2022/01/threatx_owler_20210615_235604_original.png 1366w" sizes="(max-width: 1024px) 100vw, 1024px" /></figure>



<p></p>


Cybercast

API Protection: Minding the Gap that (Probably) Exists in Your Web Application Security Program


<p>Today&#8217;s approach to defense in depth for application security are siloed, lack context, and results have fallen short. But a layered approach is the key to building a world-class AppSec program that spans the entire Software Development Lifecycle (SDLC). So, how does our approach need to change?</p>



<p>In this webinar, you’ll hear from three experts at each of the core security touchpoints within the Software Development Life Cycle (SDLC): at the code level, pre-deployment, and post-deployment. They will share advice on:</p>



<ul><li>Key timeframes to implement security testing – and why</li><li>How to incorporate risk context across the SDLC</li><li>Best practices for application penetration testing and secure code review</li><li>Proper implementation of application security tools for continuous monitoring</li><li>Plus, more tips to achieve a layered application security strategy</li></ul>



<p><strong>Speakers:</strong></p>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img src="https://files.scmagazine.com/wp-content/uploads/2021/12/Nabil-Hannan_Headshot.jpg" alt="Speaker"/></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Nabil Hannan</p><p class="speaker-job">Managing Director</p><p class="speaker-company">NetSPI</p></div><div class="speaker-description"><p>Nabil Hannan is a Managing Director at NetSPI. He leads the company&#8217;s advisory consulting practice, focusing on helping clients solve their cyber security assessment, and threat &amp; vulnerability management needs. His background is around building and improving effective software security initiatives, with deep expertise in the financial services sector. He has over 13 years of experience in cyber security consulting from his tenure at Cigital/Synopsys Software Integrity Group, where he has identified, scoped, and delivered on software security projects (architectural risk analysis, penetration testing, secure code review, malicious code detection, vulnerability remediation, mobile security assessments, etc.). Nabil has also worked as a Product Manager at Research In Motion/BlackBerry and has managed several flagship initiatives and projects through the full software development life cycle.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img src="https://files.scmagazine.com/wp-content/uploads/2021/12/Samir-Imperva-Headshot.png" alt="Speaker"/></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Samir Sherif</p><p class="speaker-job">CISO</p><p class="speaker-company">Imperva</p></div><div class="speaker-description"><p>Samir is a transformational leader with over 20 years of development, risk, and IT security program leadership. Prior to joining Imperva, Samir led multiple information security programs at Citi, including fraud, IT risk, and security architecture solutions, impacting over 50,000 technology staff globally.</p><p>Samir holds an Executive MBA from Williams College of Business and a BA in Liberal Arts from Xavier University.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img src="https://files.scmagazine.com/wp-content/uploads/2021/12/Moshe-Apiiro.jpg" alt="Speaker"/></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Moshe Zioni</p><p class="speaker-job">VP of Security Research</p><p class="speaker-company">Apiiro</p></div><div class="speaker-description"><p>Moshe Zioni, VP of Security Research at Apiiro, responsible for producing high-value research in the domains of application security, user behavior and vulnerability research, detection and prevention. He is listed as 27 influential penetration testers in 2020 by Peerlyst and have been researching cybersecurity for over 20 years in multiple industries, specializing in penetration testing, detection algorithms and incident response; a constant contributor to the hacker community and have been co-founder of the Defcon-adjacent Shabbatcon security conference for the past 6 years.</p></div></div></div></div>



<p><strong>Sponsored by:</strong></p>



<figure class="wp-block-image size-large"><img width="1024" height="271" src="https://files.scmagazine.com/wp-content/uploads/2021/12/netspi_owler_20171208_205822_original-1024x271.png" alt="" class="wp-image-204144" srcset="https://files.scmagazine.com/wp-content/uploads/2021/12/netspi_owler_20171208_205822_original-1024x271.png 1024w, https://files.scmagazine.com/wp-content/uploads/2021/12/netspi_owler_20171208_205822_original-300x79.png 300w, https://files.scmagazine.com/wp-content/uploads/2021/12/netspi_owler_20171208_205822_original-768x203.png 768w, https://files.scmagazine.com/wp-content/uploads/2021/12/netspi_owler_20171208_205822_original-1536x406.png 1536w, https://files.scmagazine.com/wp-content/uploads/2021/12/netspi_owler_20171208_205822_original-2048x542.png 2048w" sizes="(max-width: 1024px) 100vw, 1024px" /></figure>



<figure class="wp-block-image size-full"><img width="600" height="168" src="https://files.scmagazine.com/wp-content/uploads/2021/12/apiiro-1.jpg" alt="" class="wp-image-204178" srcset="https://files.scmagazine.com/wp-content/uploads/2021/12/apiiro-1.jpg 600w, https://files.scmagazine.com/wp-content/uploads/2021/12/apiiro-1-300x84.jpg 300w" sizes="(max-width: 600px) 100vw, 600px" /></figure>



<p><strong>*All times listed in Eastern Time</strong> <strong>(ET)</strong></p>


Application Security in Depth: Understanding the Three Layers of AppSec Testing


<p>You’ve developed an app, applied in-app protection, pen-tested it, then published it. But the need for mobile app security doesn’t stop once it’s released into the wild. This webinar will explore the role real-time threat monitoring plays in the constantly evolving app security landscape and how it can help you strengthen your mobile app security.</p>



<p> <strong>Speakers:</strong> </p>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img src="https://files.scmagazine.com/wp-content/uploads/2021/10/Philippe-Guislain.jpg" alt="Speaker"/></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Philippe Guislain</p><p class="speaker-job">Product Manager</p><p class="speaker-company">Guardsquare</p></div><div class="speaker-description"><p>Philippe is an experienced software development manager, program manager, and product manager. He is passionate in acting as the crossroads between engineering departments with the outside world. Philippe&#8217;s broader interests include technical challenges, real-time systems, high-tech environments and strategic roadmap planning. He is currently working as a product manager for Guardsquare, where he is responsible for defining the organizations long-term strategic vision based on market insights and both customer and competitive info, including the assessments of market opportunities with respect to the introduction of new products.</p></div></div></div></div>



<div class="wp-block-cra-webcast-speaker"><div class="speaker-wrap overflow -grid"><figure class="speaker-image"><img src="https://files.scmagazine.com/wp-content/uploads/2021/09/Bill-Brenner.jpg" alt="Speaker"/></figure><div class="speaker-info"><div class="speaker-about"><p class="speaker-name">Bill Brenner</p><p class="speaker-job">VP, Content</p><p class="speaker-company">CyberRisk Alliance</p></div><div class="speaker-description"></div></div></div></div>



<p><strong>Sponsored By:</strong></p>



<figure class="wp-block-image size-full"><img width="1000" height="154" src="https://files.scmagazine.com/wp-content/uploads/2021/10/large-guardsquare_owler_20190130_181031_original.png" alt="" class="wp-image-201486" srcset="https://files.scmagazine.com/wp-content/uploads/2021/10/large-guardsquare_owler_20190130_181031_original.png 1000w, https://files.scmagazine.com/wp-content/uploads/2021/10/large-guardsquare_owler_20190130_181031_original-300x46.png 300w, https://files.scmagazine.com/wp-content/uploads/2021/10/large-guardsquare_owler_20190130_181031_original-768x118.png 768w" sizes="(max-width: 1000px) 100vw, 1000px" /></figure>


How to Gain Visibility into the World of Mobile App Security Threats

GettyImages-1352557077

Cryptocurrency

Analysis

Centralization, ironically, most common cause of decentralized finance hacks

Young caucasian female programmer in glasses writes program code on a laptop

Policy

Cybersecurity Asset Management

Incident response

Critical infrastructure

CISA sees low levels of Log4j exploitation against agencies and critical infrastructure

20447259789_e823ae6656_k

Researchers discover new JNDI-based vulnerability similar to Log4j

Enterprise Security Weekly