AppSec Now

This Month In Security, Aubrey King and the crew try out a new show format. Aubrey catches up with Sandy Dunn, CISO, about her work on the AI Security And Governance Checklist. In addition, Sander talks to the roundtable about his latest contribution to Labs, The 2023 Identity Threat Report. David Warburton's back, as well, and sits in with Aaron Brailsford and malcolm Heath for the monthly ro...

This Month In Security, Aubrey King catches up with Ads on his involvement as a release lead for the OWASP Top Ten For Large Language Model Applications. Also, we hear from a fellow speaker at B-Sides Ottawa, Tashaffi Samin Yeassar, regarding her talk on Elder Care Security and how to pick a topic for your talk. Plus, Lori MacVittie joins the roundtable with Aubrey and Malcolm Heath. 00:00 CyberSe...

This Month In Security, Aubrey King welcomes OWASP Top 10 for ML Applications Leads, Shain Singh and Sagar Bhure to find out more about the project. Sander Vinberg also shares his takeaways from the Vuln4Cast Colloquium and we welcome Malcolm Heath for a roundtable. 00:00 Introduction 01:31 Vuln4Cast 07:09 OWASP Top 10 for ML Apps 19:07 RoundTable 29:47 Outro

Join Aubrey King, from DevCentral, as he talks with a record number of guests - 8 - for August, 2023 This Month In Security! Topics are OpenSSF and "Hacker Summer Camp" in Las Vegas (B-Sides, BlackHat, Defcon), as well as the latest news. You'll hear from David Wheeler, from the Linux Foundation, Akira Brand, from Application Security Weekly podcast and F5'ers Buu Lam, Christine...

If you're hitting up BlackHat 2023, you're going to hear a LOT about Large Language Model security, which dominated the news this month in security. Also, Aubrey King talks with Jason Ross, from Rochester Institute of Technology and Jenn Carlson, from Apprenti, about cybersecurity apprenticeship options. 00:00 Introduction 01:44 CyberSecurity Apprenticeship @ RIT 06:26 Apprenti Skill Asses...

DevCentral's Aubrey King takes you through the (more than a) month of May (and June, too)in This Month In Security Episode 11. NXDOMAIN and Water Torture / Resource Exhaustion attacks against DNS are fairly prominent in an interview of Amina Mubeen, Security Support Engineer and with our newest Real Attack Story from DevCentral. Aaron Brailsford, Malcolm Heath and Sander Vinberg cover the late...

This Episode, Aubrey King talks with Aaron Brailsford and Amina Mubeen about the latest happenings in security. He also meets up live with David Warburton, Sander Vinberg and Malcolm Heath, from F5 Labs in SanFrancisco at RSA 2023 to discuss conference perspectives and the Labs presentations this year. Strap on those earbuds! 00:00 Introduction 01:54 RSA Conference Recap 27:40 The Cybersecurity Ha...

Special guest, Ben Edwards, from The Cyentia Institute, joins Aubrey King, Aaron Brailsford and Sander Vinberg on This Month In Security for March, 2023. In addition to some of the latest security news, we focus on CVE, CVSS and the future of threat prediction research, plus we get to hear a tease on Ben and Sander's forthcoming RSA talk. 00:00 Introduction: Ben Edwards 03:22 Ben & Sander...

Aubrey King, Aaron Brailsford and Malcolm Heath welcome special guest, Akira Brand, co-host of the Application Security Weekly podcast, for a chat this month about career paths, podcasting and the hottest news this month... in security. 00:00 Introduction 01:51 Akira on Application Security Weekly podcast 04:58 Discussion on career paths 17:58 Generalist vs. Specialist / Red vs. Blue 32:17 LastPas...

For the Month of January, 2023, Aubrey King sits down for a chat with Brian McHenry, Security PM, to talk about his role in starting the #Security B-Sides NYC Chapter and more, then Brian and Aubrey join Aaron Brailsford and David Warburton for the top of mind cybersecurity news from January. This Month In Security is a monthly, long-format, community driven technology Podcast, focused on malware,...

Aubrey King hosts the monthly security podcast with Aaron Brailsford & David Warburton. The final show of the year focuses on the three most critical segments of the year and a look at some predictions from F5 Labs' 2023 Predictions report. This Month In Security is a monthly, long-format, community driven technology Podcast, focused on malware, bots, dos and so much more in the realm of a...

Aubrey King hosts the monthly security podcast with Aaron Brailsford, Sander Vinberg and Malcolm Heath. Discussion on the month's most relevant security happenings, including updates on guidance from CISA, a Dropbox breach, Supply Chain security and the SANS ICA Hyper-Encabulator! 00:00 Introduction 00:48 ANCIENT SQLite Vulnerability 10:11 Latest CISA Supply Chain Guidance 17:38 DropBox Breach...

This month's news includes some Supply Chain Security, Guidance from CISA and a worrisome UEFI Bootkit October's feature story is Reseller Bots. What are they and how do they impact you? 00:00 Intro.. 01:25 CISA Guidance 09:10 LofyGang Supply Chain News 15:40 MS Exchange Zero Days 23:27 Black Lotus UEFI BootKit 30:53 Labs Updates: Post-Breach, CIS 34:04 Labs Feature: Reseller Bots 42:23 Ou...

DevCentral's Aubrey King sits down with Aaron Brailsford, from F5 Security Incident Response Team (SIRT), Malcolm Heath and Sander Vinberg - both from F5 Labs - and break everything out, in-depth. In this episode, we talk about software supply chain security, the dangers of hard-coded credentials, package management, side-loading mobile applications and more. We also get to review and postulat...

Join DevCentral's Aubrey King and SIRT's Aaron Brailsford as they break down the past month in cybersecurity news in and around the industry! Associated content: https://community.f5.com/t5/technical-articles/f5-sirt-this-week-in-security-june-6th-to-19th-phishing-qnap/ta-p/297263https://community.f5.com/t5/technical-articles/f5-sirt-this-week-in-security-follina-zero-day-karakurt-agent/ta...

DevCentral & SIRT Present: This Month In Security Aubrey King hooks up with Aaron Brailsford to recap top stories for the month in F5 Security. This month we discuss some academic processor side-channel vulnerabilities, as well as covering UEFI vulnerabilities, some rather alarming disclosures in a popular data center application and much more! 00:00 Introduction 02:26 Academics: New Processor...