AppSec Now

AppSec Now

By DevCentralTechnology
Download on the App Store

AppSec Now episodes

  • Episode 11 - May / June, 2023 - NXDOMAIN / Water Torture

    DevCentral's Aubrey King takes you through the (more than a) month of May (and June, too)in This Month In Security Episode 11. NXDOMAIN and Water Torture / Resource Exhaustion attacks against DNS are fairly prominent in an interview of Amina Mubeen, Security Support Engineer and with our newest Real Attack Story from DevCentral. Aaron Brailsford, Malcolm Heath and Sander Vinberg cover the latest interesting happenings.

    56 min
  • Episode 10: April, 2023 - RSA Edition

    This Episode, Aubrey King talks with Aaron Brailsford and Amina Mubeen about the latest happenings in security. He also meets up live with David Warburton, Sander Vinberg and Malcolm Heath, from F5 Labs in SanFrancisco at RSA 2023 to discuss conference perspectives and the Labs presentations this year. Strap on those earbuds!

    00:00 Introduction
    01:54 RSA Conference Recap
    27:40 The Cybersecurity Happenings
    45:04 Labs' Talks @ RSA
    54:54 Outro

    56 min
  • Episode 09: March, 2023 w/ Ben Edwards

    Special guest, Ben Edwards, from The Cyentia Institute, joins Aubrey King, Aaron Brailsford and Sander Vinberg on This Month In Security for March, 2023. In addition to some of the latest security news, we focus on CVE, CVSS and the future of threat prediction research, plus we get to hear a tease on Ben and Sander's forthcoming RSA talk.

    00:00 Introduction: Ben Edwards
    03:22 Ben & Sander At RSA
    05:20 Amazing MS Outlook Client Vuln!
    08:11 Aubrey's Solaris Confession
    09:30 Back To Outlook...
    10:43 WRT Exposure, How Long Is Long?
    15:24 3CX VoIP Supply Chain Breach
    19:33 YouTube Takedown: Linus Tech Tips
    21:42 The CVE Report: Ben & Sander
    37:37 Exploit Prediction Scoring System
    40:23 Outro

    42 min
  • Episode 08: February 2023 w/ Akira Brand

    Aubrey King, Aaron Brailsford and Malcolm Heath welcome special guest, Akira Brand, co-host of the Application Security Weekly podcast, for a chat this month about career paths, podcasting and the hottest news this month... in security.

    00:00 Introduction
    01:51 Akira on Application Security Weekly podcast
    04:58 Discussion on career paths
    17:58 Generalist vs. Specialist / Red vs. Blue
    32:17 LastPass continues... to affirm zero trust
    38:26 How secure is 'secure enough'?
    43:02 F5 Labs' new DDoS report findings
    47:16 News tidbits and out.

    50 min
  • Episode 07: January, 2023 w/ Brian McHenry

    For the Month of January, 2023, Aubrey King sits down for a chat with Brian McHenry, Security PM, to talk about his role in starting the #Security B-Sides NYC Chapter and more, then Brian and Aubrey join Aaron Brailsford and David Warburton for the top of mind cybersecurity news from January.

    This Month In Security is a monthly, long-format, community driven technology Podcast, focused on malware, bots, dos and so much more in the realm of application security (appsec).
    00:00:00 Introduction
    00:01:24 Brian McHenry Intro
    00:04:19 How Product Organizations Consume Governing Guidance
    00:09:12 Brian's Role With Security B-Sides NYC
    00:18:35 The Evolution of AppSec Architectures
    00:23:29 Breach Updates: LastPass Continues & More
    00:39:46 What Are Some Security Implications of ChatGPT?
    00:50:43 FBI Takes Down The Hive
    00:57:34 F5 Labs Updates
    00:59:37 Outro

    1 hr 1 min
  • Episode 06: December, 2022

    Aubrey King hosts the monthly security podcast with Aaron Brailsford & David Warburton. The final show of the year focuses on the three most critical segments of the year and a look at some predictions from F5 Labs' 2023 Predictions report.

    This Month In Security is a monthly, long-format, community driven technology Podcast, focused on malware, bots, dos and so much more in the realm of application security (appsec).
    ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
    https://soundcloud.com/f5security
    ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
    00:00 Introduction
    01:12 ProxyNotShell Resurgence
    09:57 Quantum Security Impacts
    25:28 Android OEM App-Signing Keys Leaked
    33:06 Predictions Intro.
    33:59 MFA Will Become Ineffective
    42:40 Software Repositories Become THE Target
    48:52 Outro

    50 min
  • Episode 05: November, 2022

    Aubrey King hosts the monthly security podcast with Aaron Brailsford, Sander Vinberg and Malcolm Heath. Discussion on the month's most relevant security happenings, including updates on guidance from CISA, a Dropbox breach, Supply Chain security and the SANS ICA Hyper-Encabulator!

    00:00 Introduction
    00:48 ANCIENT SQLite Vulnerability
    10:11 Latest CISA Supply Chain Guidance
    17:38 DropBox Breach and MFA Bypass
    26:44 Cranefly MS Logging C&C
    35:35 SANS ICA HyperEncabulator
    37:14 Outro

    39 min
  • Episode 04: October, 2022

    This month's news includes some Supply Chain Security, Guidance from CISA and a worrisome UEFI Bootkit

    October's feature story is Reseller Bots. What are they and how do they impact you?
    00:00 Intro..
    01:25 CISA Guidance
    09:10 LofyGang Supply Chain News
    15:40 MS Exchange Zero Days
    23:27 Black Lotus UEFI BootKit
    30:53 Labs Updates: Post-Breach, CIS
    34:04 Labs Feature: Reseller Bots
    42:23 Outro..

    44 min
  • Episode 03: September 2022

    DevCentral's Aubrey King sits down with Aaron Brailsford, from F5 Security Incident Response Team (SIRT), Malcolm Heath and Sander Vinberg - both from F5 Labs - and break everything out, in-depth. In this episode, we talk about software supply chain security, the dangers of hard-coded credentials, package management, side-loading mobile applications and more. We also get to review and postulate on the latest data from F5 Labs' Sensor Intel Series, sampling CVE attempts at critical points on the internet backbone to understand the nature of attacks and how they're changing over time.

    00:00 Introduction
    01:25 High profile updates for Apple / Google
    02:20 Hard-Coded Credential Woes
    14:17 LastPass Breach
    21:52 Uber Breach
    28:52 Mudge Testimony
    36:10 F5 Labs SIS Report
    53:40 WRAP IT UP, B !!

    55 min
  • Episode 02: August 2022

    Join DevCentral's Aubrey King and SIRT's Aaron Brailsford as they break down the past month in cybersecurity news in and around the industry!

    Associated content:
    https://community.f5.com/t5/technical-articles/f5-sirt-this-week-in-security-june-6th-to-19th-phishing-qnap/ta-p/297263https://community.f5.com/t5/technical-articles/f5-sirt-this-week-in-security-follina-zero-day-karakurt-agent/ta-p/296852https://community.f5.com/t5/technical-articles/apple-vmware-supply-chain-and-breaches-f5-sirt-this-week-in/ta-p/300079

    31 min

About AppSec Now

From the publisher's feed

AppSec Now is a podcast aimed at delivering the top stories from the latest (mosttly application) security news and interesting guests from the application security community.