A podcast about security for developers, covering tools and best practices.
A podcast all about the world of Cybersecurity, Privacy, Compliance, and Regulatory issues that arise in today's workplace. Co-hosts Bryan Brake, Brian Boettcher, and Amanda Berlin teach concepts that aspiring Information Security Professionals need to know, or refresh the memories of the seasoned veterans.
The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations are able to make informed decisions. OWASP is in a unique position to provide impartial, practical information about AppSec to individuals, corporations, universities, government agencies, and other organizations worldwide. Operating as a communit ...
A weekly podcast of all things application security related. Hosted by Ken Johnson and Seth Law.
A podcast about Application Security DevSecOps and AppScan. Twice a month, we aim to bring you some technical insights, assorted facts and the latest news from the world of HCL AppScan. Our underlying mission is to deliver continuous application security to the masses.
The "People | Process | Technology" podcast is a recorded series of discussions with thought leaders and practitioners who are working on integrating the three areas of business that are most likely to have a massive impact on your business.
This podcast contains security topics discussed by the Secure Ideas LLC. team.
Welcome to the Cyber Security & Cloud Podcast #CSCP where we will explore the dark secret of cloud and cyber. The podcast focuses on people and their stories and explores the human element that brings so many people together Some episode will be for the well-seasoned cybersecurity veteran but most are about stories of infosec people and how they reach where they are now. The focus and various stream of the podcast is Cybersecurity, Cloud Security, Application Security Social Engineering, and ...
Tech talks by Vishnu VG, Programmer and Software Architect. The opinions expressed herein are my own personal opinions and do not represent my employer’s view in any way Email : vishnu.vg19841@gmail.com LinkedIn: https://www.linkedin.com/in/vishnuvasanthakumari
B
Bill Murphy's RedZone Podcast | Innovation, Strategy, Leadership, 10X Thinking, Mindset and More.....


1
Bill Murphy's RedZone Podcast | Innovation, Strategy, Leadership, 10X Thinking, Mindset and More.....
CIO and Business IT Leader Innovation, Leadership, Strategy, 10X Thinking, Mindset and more..
Past speeches and talks from the Black Hat Briefings computer security conferences. The Black Hat Briefings USA 2005 was held July 27-28 in Las Vegas at Caesars Palace. A post convention wrap up can be found at http://www.blackhat.com/html/bh-usa-05/bh-usa-05-index.html Black Hat Briefings bring together a unique mix in security: the best minds from government agencies and global corporations with the underground's most respected hackers. These forums take place regularly in Las Vegas, Washi ...
B
Bill Murphy's RedZone Podcast | Innovation, Strategy, Leadership, 10X Thinking, Mindset and More.....


1
The OWASP “Tasmanian Devil” Threat and Safeguard Matrix [TaSM] With Ross Young
22:32
22:32
Play later
Play later
Lists
Like
Liked
22:32
On this episode, we dive headfirst into the Open Web Application Security Project (OWASP) Threat and Safeguard Matrix [TaSM]. I’m speaking with the current CISO at Caterpillar Financial, Ross Young, about the OWASP “Tasmanian Devil” Threat and Safeguard Matrix [TaSM] that he created. Ross has worn many hats during his career, spending 10+ years in …
A
Application Paranoia


1
Episode 4 - Mars, Snow, OWASP, InfosecGirls & Cyber Hot Topics with Vandana Verma
42:07
42:07
Play later
Play later
Lists
Like
Liked
42:07
Colin Bell, Rob Cuddy and Kris Duer from HCL Software bring you another application security interview special. In this episode the team talk to Vandana Verma who is the Vice-Chairman of the OWASP Global Board of Directors. Vandana discusses how OWASP continued to interact during the pandemic, her InfosecGirls and InfosecKids intiatives, the OWASP …
O
Open Web Application Security Project (OWASP) - Portland, Oregon Chapter


1
John Strand - Running a Security Company Is to Do Illegal Things With Permissions
39:41
39:41
Play later
Play later
Lists
Like
Liked
39:41
John Strand is our special guest today. He is the owner of Black Hills Information Security - a company that specializes in penetration testing and security architecture services. He is also cofounder of Active Countermeasures. He created the popular Backdoors and Breaches incident response card game. He wrote a book called Offensive Countermeasure…
Seth and Ken welcome back Professor Brian Glas (@infosecdad) to dispel the recent OWASP Top 10 2021 speculation and rumor. We talk through the origins and purpose of the OWASP Top 10 as well as the 2021 call for data and upcoming release.
Seth and Ken discuss Portswigger's Top 10 Web Hacking Techniques of 2020, specifically injection attacks through images in PDFs and reverse proxies. Further discussion on creativity in development and how that affects and limits security.
B
Brakeing Down Security Podcast


1
2021-008-Jasmine jackson - TheFluffy007, Bio and background, Android App analysis - part 1
52:33
52:33
Play later
Play later
Lists
Like
Liked
52:33
@thefluffy007 A Bay Area Native (Berkeley) I always tell people my computer journey started at 14, but it really started at 5th grade (have a good story to tell about this) Was a bad student in my ninth grade year - almost kicked out of high school due to cutting. Had a 1.7 GPA. After my summer internship turned it around to a 4.0. Once I graduated…
T
The Secure Developer


1
Ep. #86, Implementing DevSecOps Transformation with Nicolas Chaillan
42:37
42:37
Play later
Play later
Lists
Like
Liked
42:37
Welcome back to The Secure Developer. On today’s episode, Guy Podjarny is joined by Nicolas Chaillan. Nicolas is the United States Air Force's first Chief Software Officer, responsible for enabling Air Force programs in the transition from Agile to DevSecOps to establish Force-wide DevSecOps capabilities and best practices, including continuous aut…
C
Cyber Security & Cloud Podcast

1
CSCP S02E35 - Caleb Sima - tell me more about your pentest patent
43:36
43:36
Play later
Play later
Lists
Like
Liked
43:36
Caleb Sima started his first tech company at only nineteen years old and is currently the VP of Security at Databricks. Caleb is a technologist at heart but had to learn how to manage people as his career progressed. Caleb shares his insights on the industry, no-code tools, and venture capitalism. The episode is brought you by Security Phoenix Ltd …
C
Coding talks with Vishnu VG


1
React.js Series 03 - Composing Components
1:10:11
1:10:11
Play later
Play later
Lists
Like
Liked
1:10:11
Explains overview on typescript, composing components, different strategies, react hooks Upcoming Episodes State Management in React Context Api React Queries. --- Send in a voice message: https://anchor.fm/vishnu-vg/message
What is your company’s vision? It’s a simple question, yet still, one that many entrepreneurs are unable to effectively answer this question in a cohesive manner when asked. Although the answer to this question will be unique to every leader, the premise behind the answer is that it must be written in ink. Oleg was given the nickname of “the da Vin…
Seth and Ken discuss client-side controls and 3rd-party JavaScript security features. Confused deputy vulnerabilities (dependency confusion) in the news.
B
Brakeing Down Security Podcast


1
2021-007-News-Google asking for OSS to embrace standards, insider threat at Yandex, Vectr Discussion
57:01
57:01
Play later
Play later
Lists
Like
Liked
57:01
Links to discussed items: Yandex Employee Caught Selling Access to Users' Email Inboxes (thehackernews.com) Supply-Chain Hack Breaches 35 Companies, Including PayPal, Microsoft, Apple | Threatpost Google pitches security standards for 'critical' open-source projects | SC Media (scmagazine.com) Google’s approach to secure software development and su…
C
Cyber Security & Cloud Podcast

1
CSCP S2E34 - Ian_Murphy - That line is too light let me make it blunt.mp3
40:15
40:15
Play later
Play later
Lists
Like
Liked
40:15
Ian Murphy is the Vice President of LMNTRIX and CEO CyberOff. Ian has been working in the industry for over 30 years and his goal is to make Cyber Security a little less dull. Ian shares his early interest in computers and how he’s seen the industry grow and change. The episode is brought you by Security Phoenix Ltd with the AppSec Phoenix platform…
Explains architecture of React Application, a basic overview. Upcoming episodes are (1) Effectively Composing Components (2) State Management in React --- Send in a voice message: https://anchor.fm/vishnu-vg/message
C
Coding talks with Vishnu VG


1
React.js Series 01 - Getting Started
1:03:25
1:03:25
Play later
Play later
Lists
Like
Liked
1:03:25
This episode will guide you to get quick start with React JS and also help you to get a good overview on what this library is all about so you can confidently start development. Learn what issues library like react.js solves, thinking in terms of components, jsx, quick start usign Visual Studio. --- Send in a voice message: https://anchor.fm/vishnu…
A
Application Paranoia


1
S2EP3- ASoC exciting new features, Florida Water and Mullets
28:21
28:21
Play later
Play later
Lists
Like
Liked
28:21
Colin Bell, Rob Cuddy and Kris Duer bring you another Application Paranoia episode. This episode has guest Panellist Kathleen Brady helping to navigate through discussions about a bunch of exciting new AppScan on Cloud features, the recent Florida Water hack and the reemergence of "the Mullet". Join us for another informative episode.…
B
Brakeing Down Security Podcast


1
2021-006-Ronnie Watson (@secopsgeek), building a security monitoring system with ELK, and Wazuh - part2
39:21
39:21
Play later
Play later
Lists
Like
Liked
39:21
Ronnie Watson (@secopsgeek) Youtube: watson infosec - YouTube watsoninfosec (Watsoninfosec) · GitHub Feel free to add anything you like Wazuh - fork of OSSEC (Migrating from OSSEC · Wazuh · The Open Source Security Platform) GitHub - ossec/ossec-hids: OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file int…
C
Cyber Security & Cloud Podcast

1
CSCP S2E33 - Jake Moore - Google how do i Hide a body?
40:20
40:20
Play later
Play later
Lists
Like
Liked
40:20
Jake Moore formerly worked for the Dorset Police in the Cyber Crime & Digital Forensics Department. He is now the spokesperson for ESET and a Cyber Security Specialist. In this episode, Francesco and Jake discuss paying ransoms, the security threats raised by the pandemic, and investigating murderer’s laptops. The episode is brought you by Security…
O
Open Web Application Security Project (OWASP) - Portland, Oregon Chapter


1
Lewis Ardern and PwnFunction - Discovering Clever Ways to Exploit the Vue.js JavaScript Framework
47:42
47:42
Play later
Play later
Lists
Like
Liked
47:42
Our special guests today are Lewis Ardern and PwnFunction. Lewis is an Associate Principal Consultant at Synopsys where he focuses on web application security. He is also an organizer for the OWASP Bay Area Chapter. Check out his new SecuriTEA and Crumpets videos on YouTube. PwnFunction is an independent security consultant. He makes popular hackin…
Tips and informations on improving code coverage for unit tests. Only for .net, but may be informative for other platform users as well --- Send in a voice message: https://anchor.fm/vishnu-vg/message
B
Brakeing Down Security Podcast


1
2021-005-Ronnie Watson (@secopsgeek), building a security monitoring system with ELK, and Wazuh
35:43
35:43
Play later
Play later
Lists
Like
Liked
35:43
Ronnie Watson (@secopsgeek) Youtube: watson infosec - YouTube watsoninfosec (Watsoninfosec) · GitHub Wazuh - fork of OSSEC (Migrating from OSSEC · Wazuh · The Open Source Security Platform) GitHub - ossec/ossec-hids: OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring,…
C
Cyber Security & Cloud Podcast

1
CSCP S02E32 - Shasha Rosenbaum - Github does it again with CodeQL- find out cyber and dev
37:44
37:44
Play later
Play later
Lists
Like
Liked
37:44
Sasha Rosenbaum is a Sr. Product Manager at GitHub, former developer, and the organizer of the DevOps Days conference. Francesco and Sasha vent some the frustrations of explaining security threats to developers and engineers who are more focused on creating and coding. Sasha also explains about GitHub’s CodeQL, a semantic code analysis engine. Note…
B
Bill Murphy's RedZone Podcast | Innovation, Strategy, Leadership, 10X Thinking, Mindset and More.....


1
#209 The Original Internet Godfather and Inventor of Modern Cybercrime | Cyber Crime Expert & Security Savant, Brett Johnson
1:10:40
1:10:40
Play later
Play later
Lists
Like
Liked
1:10:40
I just had this excellent interview with Brett Johnson, a keynote speaker, and consultant on cybersecurity, Cybercrime, and identity theft. His knowledge of these topics is unique because it didn't come from any book or in any classroom. Brett's experience is from the criminal side of things. At one point, the United States' Most Wanted criminal, h…
B
Brakeing Down Security Podcast


1
2021-004-Danny Akacki talks about Mergers and Acquisitions - Part 2
47:45
47:45
Play later
Play later
Lists
Like
Liked
47:45
Discussion on Mergers and acquisitions processes On being acquired, but also if you’re acquiring a company Best Practices Best Practices of Mergers and Acquisitions (workforce.com) Best Practices In Merger Integration - Institute for Mergers, Acquisitions and Alliances (IMAA) (imaa-institute.org) The Role of Information Security in a Merger/Acquisi…
Stefan Edwards (@lojikil) once again joins Seth and Ken to talk all things LangSec (language security). Discussion ranges from manual vs. automated testing to fuzzing to semantic analysis to formal specification.
T
The Secure Developer


1
Ep. #85, DevOps versus Security with James Turnbull
37:59
37:59
Play later
Play later
Lists
Like
Liked
37:59
Welcome back to The Secure Developer. On today's episode, Guy Podjarny, President and Founder of Snyk, is joined by James Turnbull. James is an engineering leader, author of 11 books, and open source developer, and is currently the VP of Engineering at Timber, working on the open source observability platform, Vector. He was formerly the CTO-in-res…
A
Application Paranoia


1
S2EP2 - XR Safety and Security with Kavya Pearlman and Tamas Henning from the XR Safety Initiative
52:05
52:05
Play later
Play later
Lists
Like
Liked
52:05
Colin Bell, Rob Cuddy and Kris Duer from HCL Software bring you another application security interview special. In this episode the team talk to Kavya Pearlman and Tamas Henning from the XR Safety Initiative. They provide a fascinating insight into the privacy, security, and ethics within immersive environments (virtual reality, mixed reality, and …
C
Cyber Security & Cloud Podcast

1
CSCP S02E31 - Sarah Young - Did that really happen in Microsoft Azure Cloud
35:56
35:56
Play later
Play later
Lists
Like
Liked
35:56
Working in New Zealand, Sarah Young is the Senior Program Manager for Azure Security at Microsoft. Sarah shares her insights on the cybersecurity industry— mainly that there is not enough understanding of how cloud platforms work, evenamong tech professionals! Sarah also speaks on being a woman in this male-dominated industry. The episode is brough…
P
People | Process | Technology Podcast


1
The Ops Side of DevSecOps w/ Damon Edwards
24:20
24:20
Play later
Play later
Lists
Like
Liked
24:20
When Shannon Lietz and the team at DevSecOps.org published the DevSecOps Manifesto six years ago, security was uppermost in their minds. The manifesto starts with a call to arms…“Through Security as Code, we have and will learn that there is simply a better way for security practitioners, like us, to operate and contribute value with less friction.…
B
Bill Murphy's RedZone Podcast | Innovation, Strategy, Leadership, 10X Thinking, Mindset and More.....


1
#208 The Inside Truth About Cybercrime & Risk Management - How to Protect Your Business with Mark Sangster, Cybersecurity Author & Security Strategist at eSentire Inc.
52:03
52:03
Play later
Play later
Lists
Like
Liked
52:03
In Episode #208, I talk with Mark Sangster. Mark is the VP & Industry Security Strategist at eSentire Inc., an award-winning speaker, and the author of the new book, “No Safe Harbor: The Inside Truth About Cybercrime―and How To Protect Your Business.” As a CIO and Business IT Leader here are some wins you will get by listening: How remote work and …