Castuner

Absolute AppSec

Ken Johnson and Seth Law

A weekly podcast of all things application security related. Hosted by Ken Johnson and Seth Law.

Site do podcast

Ouça no seu app

Episódios

338 episódios

  1. Episode 338 - w/ Kiston Finney and John Snow - AI Restrictions, Asset Management
  2. Episode 337 - w/Coffee, Chaos, and ProdSec - AI Guardrails, Risk Prioritization Shift
  3. Episode 336 - Hardware Image Signing, Bot Reduction, AI Code Insecurities
  4. Episode 335 - w/ Ron Perris - Secure Coding with AI
  5. Episode 331 - Being "Mythos" Ready, CRLF-Powered De-sync Attacks
  6. Episode 330 - w/ Jeevan Singh - Vulnerability Jail
  7. Episode 329 - AI exploitability, IDOR prevention, Smart TV Proxies
  8. Episode 328 - Wordpress RCE, Vuln Prioritization, AI memory exfiltration
  9. Episode 327 - w/Coffee, Chaos, and ProdSec - ASPM Consolidation, Vuln Prioritization
  10. Episode 326 - AppSec Jobs, Benchmarking LLMs, Open Web Standards
  11. Episode 325 - Simplified Threat Modeling, Defining A Vulnerability
  12. Episode 324 - Three Week Trap, Malicious Extensions
  13. Episode 323 - Secrets Logs, Prompt Injection Risks
  14. Episode 322 - Megalodon, Staged Package Publishing, AI Powered Honeypots
  15. Episode 321 - The Future of AppSec
  16. Episode 320 - Return of @lojikil - LLM Bug Hunting, AI OffSec, Defender Burnout
  17. Episode 319 - Vercel Breach, Security vs. Compliance, Pull Request Flows w/ AI Agents
  18. Episode 318 - Slack Impersonation, Mythos, Vulnerability Research Future
  19. Episode 317 - (Post-RSAC/BSidesSF), Supply Chain Security, Future of SDLC
  20. Episode 316 - w/Coffee, Chaos, and ProdSec - Agentic Development Lifecycle
  21. Episode 315 - Risks of "AI-Native" Security Products, Rapid Software Development
  22. Episode 314 - LLM AppSec Disruption, Limitations of AI in Security, AppSec Oversight
  23. Episode 313 - AppSec Role Evolution, AI Skills & Risks, Phishing AI Agents
  24. Episode 312 - Vibe Coding Risks, Burnout, AppSec Scorecards
  25. Episode 311 - Transformation of AppSec, AI Skills, Development Velocity
  26. Episode 310 - w/ Mohan Kumar and Naveen K Mahavisnu - AI Agent Security
  27. Episode 309 - w/ Nathan Hunstad - Compliance, Security Governance
  28. Episode 308 - w/Avi Douglen - Privacy, AppSec Conferences, OWASP
  29. Episode 307 - 2025 Retrospective, Supply Chain, MCP and APIs
  30. Episode 306 - w/ Paul McCarty - Open Source Malware
  31. Episode 305 - Career Impact of GenAI, SEO/GEO, More Supply Chain Attacks
  32. Episode 304 - More OWASP Top 10, AI Dynamic Testing
  33. Episode 303 - w/Prof. Brian Glas - OWASP Top 10 2025
  34. Episode 302 - OWASP Global AppSec DC predictions, AI Browser Dangers, MCP Security
  35. Episode 301 - AI Browsers, New AI Agent Attacks, Framework Checklists
  36. Episode 300 - THIS! IS! APPSEC!
  37. Episode 299 - Startup Grind, Will Security Companies Disappear
  38. Episode 298 - Shai Hulud, Layered Security, New Commandments of Security Teams
  39. Episode 297 - True/False Positives, Phishing Package Maintainers
  40. Episode 296 - OWASP Top 10, NX Compromise, Security News Sources
  41. Episode 295 - DEF CON 33 Recap, Crocs and Socks (and Bots)
  42. Episode 294 - w/ Anshuman Bhartiya - AppSec in the Age of AI
  43. Episode 293 - AppSec's Reality Gap
  44. Episode 292 - Manual Source Code Review, AI Slop in Bug Bounties, AppSec Authorization
  45. Episode 291 - w/ Sean Varga - OWASP Top 10 of AppSec Sales
  46. Episode 290 - Authentication Fatigue, Browser AI Agents
  47. Episode 289 - Return of @lojikil - Context Matters
  48. Episode 288 - Security and AI
  49. Episode 287 - w/ Hayden Smith (Hunted Labs) - Open Source Dependency Threats
  50. Episode 286 - Kayra Otaner - Authenticating Open Source Developers