AppSec Now

Welcome to the latest episode of AppSec Monthly! In this episode, we delve into IT policies, recent cybersecurity trends, and sophisticated attack detection with industry experts David Warburton, Malcolm Heath, and MegaZone.

Special guests Adeolu and Shuang from F5 Labs share their latest research on Black Friday shopping trends, automation, and bot attacks, providing insights into the types of bots targeting retailers and their impact.

We also look ahead to future trends in automation and predictions for 2024, offering practical advice for retailers on dealing with bot attacks effectively.

In our security news segment, we discuss the implications of quantum computing on RSA decryption, security flaws in popular ML toolkits, and the updated 2025 OWASP LLM Apps Top Ten.

Explore more at f5.com/labs and visit community.f5.com for additional content from F5 SIRT and F5 Labs.

Don't forget to like, subscribe, and leave a review!

Theme song, 'Deserted Dunes Welcome Weary Feet,' freely usable by King Gizzard And The Lizard Wizard, as per https://kinggizzardandthelizardwizard.com/bootlegger.

Welcome to another exciting episode of AppSec Monthly, brought to you by DevCentral! This month, we dive deep into various aspects of application security with contributions from Aaron Brailsford, Malcolm Heath, and MegaZone!

After a small summer break, the gang's back and talking DDoS with F5 Labs' new DDoS Report. David Warburton lays it all out for us after a healthy dose of news with Aaron Brailsford, Malcolm Heath and, for the first time, MegaZone! Tune in for this action packed episode 23 for July of 2024!

In May of 2024, Aubrey King, from DevCentral, went to #RSAC. While there, he got a chance to hook up with Steve Wilson and Ken Huang to talk about security authoring - 'how to get going' and 'what's the process like?' - before catching up with Akira Brand, who talks about speaking at RSA and more!

It's an action packed Episode 22 before we even get to our roundtable, where F5 Labs' David Warburton and Aaron Brailsford catch up with Sam Borer, from the F5 Security Incident Response Team about all the latest happenings. You'll hear about the Dell Breach, Ticketmaster and more!

In Episode 21, we change our name! Welcome AppSec Monthly, goodbye This Month In Security. In addition to that new in April of 2024, DevCentral's Aubrey King catches up with Semgrep's Jonathan Werrett to talk about how the AI phenomenon changes the game for Red and Blue Teamers out there in the security world. Also, Aubrey catches up with DevCentral OG, Peter Silva, to talk about 5g security and app isolation for security. Aaron Brailsford herds those cats named David Warburton and Malcolm Heath for our monthly roundtable, as well!

DevCentral's Aubrey King is joined by Dave Warburton, Malcolm Heath and Aaron Brailsford this month for the roundtable and he shares a conversation with Dan Barahona about the APISec University 2024 API Security Market Review they just published and shares the news about APISec Con, coming up on May 22. There's also a teaser of an #AppWorld2024 AI API Security panel conversation between Aubrey, Dan, Corey Ball and Cameron Delano.

In Episode 19 of This Month In Security, Aubrey King catches back up with Tashaffi Samin Yeasar to talk about her daily grind and an IoT coder who's using AI at the edge and some of the security implications of Edge AI. Also, Byron McNaught jumps into the monthly roundtable with Aaron Brailsford and David Warburton, where they talked a bit about AI and deepfakes, as well as some of the latest Ransomware news out there.

This Month In Security, Aubrey King gets to talk to DevCentral MVP Daniel Wolf about how he recommends customers build WAF policy from SBOM. Aaron Brailsford shares the roundtable with Malcolm Heath and Sander Vinberg. Also, we get a sample from This Week In Security.

This week in security, our editor is AaronJB, who brings news of a VMWare exploit that might be older than Aubrey! Also, countless exploits and some amazing videos from The 37th Chaos Communication Congress.

Read the full article here: https://community.f5.com/t5/technical-articles/time-to-exploit-and-large-scale-breaches-jan-15th-21st-2024-f5/ta-p/327201

This Week In Security is a contribution to DevCentral by the F5 Security Incident Response Team and you can find it in our Technical Articles section every week.

This Week In Security, our editor is Jordan_Zebor, who shows the community about Github's Runner Poisoning, a cloud threat called F-Bot and an attack on Hadoop!

Read the full article here:

https://community.f5.com/t5/technical-articles/compromised-ci-cd-fbot-and-hadoop-attacks-jan-7th-14th-2023-f5/ta-p/326973

This Week In Security is a contribution to DevCentral by the F5 Security Incident Response Team and you can find it in our Technical Articles section every week.