Couverture de Absolute AppSec

Absolute AppSec

Absolute AppSec

De : Ken Johnson and Seth Law
Écouter gratuitement

3 mois pour 0,99 €/mois Offre valable jusqu'au 12 décembre 2025. 3 mois pour 0,99 €/mois, puis 9,95 €/mois. Offre soumise à conditions.J'en profite

À propos de ce contenu audio

 A weekly podcast of all things application security related. Hosted by Ken Johnson and Seth Law.
Les membres Amazon Prime bénéficient automatiquement de 2 livres audio offerts chez Audible.

Vous êtes membre Amazon Prime ?

Bénéficiez automatiquement de 2 livres audio offerts.
Bonne écoute !
    Épisodes
    • Episode 304 - More OWASP Top 10, AI Dynamic Testing

      Episode 304 - More OWASP Top 10, AI Dynamic Testing
      Nov 18 2025
      This episode, the 304th of Absolute AppSec, features hosts Ken Johnson (@cktricky) and Seth Law (@sethlaw) discussing the crush of Q4 expectations, upcoming training opportunities, the recent updates to the OWASP Top Ten, and the impact of AI tools like XBow on application security (AppSec) consulting. The hosts discuss the shift in the OWASP Top Ten from focusing on vulnerabilities to focusing on risks, and the dual role the list now plays for both awareness/training and compliance. Shifting to recent funding of XBow, the overall consensus is that while AI tools dramatically improve process flow, scoping, and the speed of vulnerability identification for consultants, they won't replace the need for human experts for complex, bespoke systems, business logic flaws, or authorization issues. AI is commoditizing lower-level AppSec work.
      Afficher plus Afficher moins
      Moins d'une minute
    • Episode 303 - w/Prof. Brian Glas - OWASP Top 10 2025

      Episode 303 - w/Prof. Brian Glas - OWASP Top 10 2025
      Nov 10 2025
      Prof. Brian Glas (infosecdad on social media) joins Seth Law (sethlaw) and Ken Johnson (cktricky) for a timely episode of Absolute AppSec. Infosec Guru and one of the OWASP Top Ten project leaders Prof. Glas joins us in the aftermath of the Global AppSec conference and the announcement of the new OWASP Top Ten (2025). This episode focuses on the process for compiling the list as well as gleaning any other insights from Prof. Glas.
      Afficher plus Afficher moins
      Moins d'une minute
    • Episode 302 - OWASP Global AppSec DC predictions, AI Browser Dangers, MCP Security

      Episode 302 - OWASP Global AppSec DC predictions, AI Browser Dangers, MCP Security
      Nov 4 2025
      Episode 302 of Absolute AppSec has hosts Ken Johnson and Seth Law speculating on the upcoming Global AppSec DC conference, predicting the announcement of the OWASP Top Ten 2025 edition, with Brian Glass scheduled to discuss it on the podcast. The conversation shifts to a technical discussion of OpenAI's new browser, Atlas, which is built on Chromium and includes AI capabilities. The hosts noted concern over the discovered prompt instructions for Atlas, which direct the ChatGPT agent to use browser history and available APIs to find data from the user's logged-in sites to answer ambiguous queries or fulfill requests. This functionality raises significant security concerns, as the agent's ability to comb the cache and logged-in sites could be exploited, effectively creating a "honeypot for cross-site scripting" with malicious potential like unauthorized money transfers. The hosts discussed the lack of talk submissions on Mobile Context Protocol (MCP) security at the conference, despite its growing relevance in a world of AI agents and tooling. Finally, they highlighted a new tool called SlopGuard, developed to prevent the risk of AI hallucinating non-existent, potentially malicious packages (which occurs 5-21% of the time) and attempting to install them from registries like NPM.
      Afficher plus Afficher moins
      Moins d'une minute
    Aucun commentaire pour le moment