Castuner

The DevSecOps Talks Podcast

Mattias Hemmingsson, Julien Bisconti and Andrey Devyatkin

This is the show by and for DevSecOps practitioners who are trying to survive information overload, get through marketing nonsense, do right technology bets, help their organizations to deliver value and last but not the least to have some fun. Tune in for talks about technology, ways of working and news from DevSecOps. This show is not sponsored by any technology vendor and trying to be as unbiased as possible. We talk like no one is listening! For good or bad :) For more info, show notes, and discussion of past and upcoming episodes visit devsecops.fm

Podcast website

Listen in your app

Episodes

100 episodes

  1. #116 - Hot Fridges, sshole and New Container Defenses 40:37
  2. #115 - Julien Bisconti on Node2Shell, PHP and Patch Panic 29:25
  3. #114 - Fridge Hacks and Security by Obscurity 19:06
  4. #113 - Books, Juniors and Mattias’s Dark Factories 40:19
  5. #112 - DevOps Careers: What Should You Learn Now? 31:48
  6. #111 - AI Agents: When Helpful Becomes Harmful 29:56
  7. #110 - Can Broken GitHub Actions Get Your AWS Account Blocked? 20:10
  8. #109 - Docker Got Quiet. Did You Miss Anything? 33:10
  9. #108 - Assume You’re Vulnerable: Security Beyond Patching 30:17
  10. #107 - Continuous Integration in 2026: What Still Matters 30:09
  11. #106 - When Your Pet Project Tells You No 40:41
  12. #105 - EU LLMs with Pawel Piwosz, Filipe Berti and Mark Shine 46:20
  13. #104 - When AI Coding Gets 10x More Expensive 33:05
  14. #103 - European Cloud Sovereignty with Mark Shine, Pawel Piwosz and Filipe Berti 56:19
  15. #102 - The 90-Day Patch Window Is Dead With Ian Amit And Matias Madou 51:19
  16. #101 - Infrastructure as Code in 2026: Still Essential or Already Changing? 38:26
  17. #100 - 100 Episodes Later: What Still Matters in DevSecOps 40:45
  18. #99 - AI SRE and the End of 3 AM On-Call 48:21
  19. #98 - Beyond AI SRE 37:10
  20. #97 - Shift Left, Get Hacked: Supply Chain Attacks Hit Devs 35:36
  21. #96 - Keeping Platforms Simple and Fast with Joachim Hill-Grannec 48:44
  22. #95 - From Platform Theater to Golden Guardrails with Steve Wade 45:44
  23. #94 - Small Tasks, Big Wins: The AI Dev Loop at System Initiative 52:42
  24. #93 - The DevSecOps Perspective: Key Takeaways From Re:Invent 2025 27:30
  25. #92 - From System Initiative to SWAMP: Agent-Native Infra with Paul Stack 47:55
  26. #91 - January security roundup: CVSS 10 in n8n, self-hosted AI scares, and nonstop patching 44:01
  27. #90 - K8s vs Managed Services: Cost, Lock-In, and Reality 51:44
  28. #89 - Agents, Reviews, and Secrets: Real Talk on AI in Dev 34:01
  29. #88 - EU Compliance 101: DSA, MiCA explained 30:56
  30. #87 - EU Compliance 101: AI Act, DORA, NIS2 explained 38:20
  31. #86 - MCP plugins: your next security blind spot? 1:04:54
  32. #85 - Is It Time for OpenTofu? Our HashiConf Takeaways 30:46
  33. #84 - AI for DevSecOps: Current Wins and Ongoing Gaps 35:22
  34. #83 - Opentofu Vs Terraform: Where We Are Now With Cole Bittel 38:45
  35. #82 - Tools, Mcps, And Attack Scenarios 36:57
  36. #81 - Keeping Secrets Safe 33:35
  37. #80 - Understanding Passkeys: Benefits And Limitations 36:55
  38. #79 - Going Local: What’S Driving The Move? 20:31
  39. #78 - Building AI Tools For IaC Compliance 41:12
  40. #77 - Chaos Engineering Explained: Part 2 34:30
  41. #76 - Chaos Engineering Explained: Part 1 26:29
  42. #75 - Learning from the Crisis: Post-Incident Actions 24:18
  43. #74 - From Preparation To Execution: Handling An Active Incident 27:50
  44. #73 - Incident Response: Key Preparations You Need 38:23
  45. #72 - AWS Resource Control Policies (RCPs) 21:25
  46. #71 - Unpacking The Dora Accelerate State Of Devops Report 40:49
  47. #70 - System Initiative Goes Ga 40:26
  48. #69 - Who Is Paulina? 42:16
  49. #68 - Julien’s Last Episode? 27:16
  50. #67 - Building MVP On AWS 29:53