DevCentral

At AppWorld 2025, Buu Lam sits down with Haiyan Song, Executive Vice President of CloudOps at NetApp as well as Shawn Wormke, Vice President and General Manager, F5 NGINX. Haiyan and Shawn just wrapped up a keynote on stage and swing by the podcast booth to expand on the insights that they shared on stage. With NetApp being the whole of so much of the world's enterprise data, it makes sense for F5 to partner with them to provide fast and secure connectivity as customers seek to get data out to their AI applications for Retrieval Augmented Generation (RAG) architectures.

Dive into the latest episode of AppSecNow, where we break down the Ingress Nightmare vulnerability impacting NGINX and Kubernetes environments, plus the implications of a critical CVE in Next.js, one of the most widely-used JavaScript frameworks with 9 million weekly downloads.

Join Aubrey, Chase, and Merlyn for expert analysis on the security landscape, from Chromium Zero Day concerns to ransomware gangs getting pwned. Stay informed on the front lines of application security with actionable advice from DevCentral's experts.

00:00 Introduction

01:45 IngressNightmare

08:39 Next.js Critical CVE

12:07 Chrome Zero Day

16:22 New Agents For Security Copilot

24:57 HaveIBeenPwned Mail List Leak

27:10 BlackLock RaaS Gang Pwned

30:28 Outro

Join the DevCentral crew as we dive into groundbreaking AI research, explore how OpenAI's GPT models mimic humans, and discuss critical advancements in AI security and ethics. From Turing tests to deepfake controversies, this episode of AI Friday is packed with thought-provoking insights and practical takeaways for the AI-powered future.

Whether you're an enthusiast or in the IT trenches, don’t forget to subscribe to keep up with the conversation.

Secure your AI journey. Stay informed. Stay connected. It's time to redefine intelligence—welcome to AI Friday!

00:00 Introduction

02:45 AI PASSES TURING TEST!

12:13 Tracing LLM Reasoning

22:41 AI Image Ethics

31:51 Model Context Protocol

44:27 Outro

Welcome to the 31st episode of AppSec Now! This week, our hosts Aubrey, David Warburton, Chase Abbott, and MegaZone get into some hot topics in the world of application security. Our focus is on the latest F5 Labs Advanced Persistent Bots report, highlighting the ever-evolving landscape of bot attacks and the importance of robust mitigation strategies. We analyze Google's hefty $32 million acquisition of Wiz, exploring what this move means for the tech giant's security posture and its potential impact on the cloud security market.

We also tackle the sensitive topic of personal data with a focus on 23andMe's bankruptcy and the critical steps you should take to safeguard your genetic information. Finally, we explore the emerging trend of "vibe coding" and its implications for both seasoned developers and novices. Join us for these engaging discussions and more, and don't forget to like, subscribe, and leave a comment with your thoughts!

00:00 Introduction

01:08 Google / Wiz Deal

04:57 Electrical Fire Closes Heathrow

12:39 23andMe Bankrupt! Delete data.

19:10 Advance Persistent Bots Report

32:06 Vibe Coding Roundtable

42:37 Outro

Welcome to AI Friday! In this episode, we dive into the latest developments in Generative AI Security, discussing the implications and challenges of this emerging technology. Join Aubrey from DevCentral and the OWASP GenAI Security Project, along with an expert panel including Byron, Ken, Lori, and special guest Steve Wilson, as they explore the complexities of AI in the news and the evolving landscape of AI security.

We also take a closer look at the fascinating topic of vibe coding, its impact on software development, and the transformative potential of AI-assisted coding practices. Whether you're a developer, security professional, or an AI enthusiast, this episode is packed with insights and expert opinions that you won't want to miss. Don't forget to like, subscribe, and join the conversation!

00:00 Introduction

02:16 Agentic Risks vs. Rewards

04:19 Steve Wilson & OWASP GenAI Security Project

18:25 DeepSeek & Inference Performance

28:41 Vibe Coding

51:01 Outro

Join us for the thirtieth episode of AppSecNow, a DevCentral podcast dedicated to the latest trends and threats in the application security (AppSec) world. In this episode, host Aubrey King is joined by Malcolm Heath, Chase Abbott, and MegaZone to dive into recent security incidents and developments, including a detailed analysis of the Coinbase phishing scam, the resurgence of user-mode rootkits with OBSCURE#BAT, the BRUTED brute force campaign and KoSpy, a sophisticated Android spyware campaign linked to North Korean threat actors.

Stay informed with custom-curated content from F5's Security Incident Response Team and relevant data from F5 Labs. Discover how attackers are evolving their methods and learn practical tips to protect your applications from these emerging threats. Whether you’re a security professional or just interested in the latest in cybersecurity, this episode has something for you.

00:00 Introduction

01:52 Coinbase Phishing Scam

12:24 BRUTED Brute Force

18:26 OBSCURE#BAT Malware

21:14 KoSpy Android Spyware

33:15 CISA KEV Updates

34:19 Outro

Join us for our first live episode of AI Friday, where we delve into the latest and most exciting developments in the world of artificial intelligence. This week, we discuss the major announcements from NVIDIA's GTC conference, including insights on their new Blackwell chips and the fascinating advancements in autonomous vehicles. Our very own Buu Lam from DevCentral shares his firsthand experience and key takeaways from the event.

In addition, we explore the groundbreaking world of robotics, highlighting how Disney's cute robots, powered by NVIDIA and Google DeepMind, are set to revolutionize the industry. We also tease our upcoming episode featuring Steve Wilson, where we will discuss the OWASP Gen AI Security Project and its implications for large language model applications. Don't miss out on this engaging and informative discussion!

00:00 Introduction

02:10 Buu Lam Event Summary

11:33 Want Fish With All Those New Chips?

17:23 DGX Spark & Station

21:20 Robotics: Groot & Newton

28:42 Nemotron Model Family

36:14 Outro

Join us as we dive into the exciting world of quantum computing and AI at App World 2025, held at the fabulous Fontainebleau in Las Vegas. Aubrey from DevCentral hosts a fascinating discussion with Daniela Pontes and Brett Wolmarans from F5. They explore the latest advancements in AI, the impact of quantum computing on cybersecurity, and what the future holds for post-quantum cryptography.

Discover how F5 is leveraging AI to optimize and secure applications, and learn about the recent release of the AI gateway. Daniela delves into the looming threat of quantum computing on current cryptography standards, explaining the importance of transitioning to quantum-resistant algorithms and even a little on quantum networking. Stay tuned for insights on how industries like finance and healthcare are preparing for a quantum future. Don't miss this episode full of expert knowledge and cutting-edge technology!

Discover how F5 is leveraging AI to optimize and secure applications, and learn about the recent release of the AI gateway. Daniela delves into the looming threat of quantum computing on current cryptographic systems, explaining the importance of transitioning to quantum-resistant algorithms. Stay tuned for insights on how industries like finance and healthcare are preparing for a quantum future. Don't miss this episode full of expert knowledge and cutting-edge technology!

Welcome to the latest episode of AppSec Now, a DevCentral podcast dedicated to the ever-evolving world of application security. In this episode, Chase takes the reins while Aubrey is away, joined by Malcolm Heath, a principal researcher at F5 Labs, and the illustrious MegaZone, a principal security engineer on the SIRT team.

We dive deep into the recent Apache Camel remote code execution vulnerability, discussing the initial panic and the eventual revelation that it was a medium-severity CVE with narrow impact. We also explore the ongoing debate on government backdoors in end-to-end encryption, with insights on the recent stances of Signal and Apple. Finally, we shed light on the recent DDoS attack on X (formerly Twitter), attributed to Dark Storm, and discuss the complexities of attributing such attacks. Stay informed and up-to-date with the latest trends and threats in the AppSec world!

References:

https://community.f5.com/kb/security-insights/appsec-camels-typhoons-and-backdoors/340217

00:00 Introduction

00:59 Apache Camel RCE

10:09 Silk Typhoon

16:11 Government Encryption Backdoors

25:51 X (Twitter) DDoS

30:25 VulnCon Comin' Up!

32:16 Outro

Join hosts Joel Moses, Oscar Spencer, and Matthew Yacobucci as they discuss recent WebAssembly advancements, such as data science in browsers with WebR, LibreOffice now running as ZetaOffice, and a unique case study from Dagger.IO on replacing a React front end with Go and WebAssembly. The team is joined by special guest, journalist and analyst Bruce Gain, who shares his insights on the impact of WebAssembly in gaming and its applications in various industries. Topics include performance benchmarking, the evolution of WebAssembly, and its potential tipping points for mainstream media attention. Tune in for an engaging conversation about the future of WebAssembly and its broader implications.

Chapters:

00:00 Welcome to WebAssembly Unleashed

00:57 Exciting WebAssembly Developments

02:38 Oscar's Insights from the Wasm Community

04:28 Special Guest: Analyst and Journalist Bruce Gain

05:22 WebAssembly in Gaming

09:16 Future of Gaming with WebAssembly

13:03 Media Perspective on WebAssembly

15:08 WebAssembly Garners Media Attention

19:06 What can WebAssembly do to create a media tipping point?

21:36 Security Implications of WebAssembly

24:04 AI and WebAssembly: A Synergistic Future

28:40 ReveCom Project and Benchmarking Efforts

34:16 Future of WebAssembly in Media and Technology

Read more on recent developments discussed by the hosts:

Replacing React with Go: https://dagger.io/blog/replaced-react-with-go

R in the Browser: https://blog.jupyter.org/r-in-the-browser-announcing-our-webassembly-distribution-9450e9539ed5

LibreOffice built for the Wasm runtime: https://www.theregister.com/2025/02/13/libreoffice_wasm_zetaoffice/ ; https://zetaoffice.net/

For more from F5's Office of the CTO visit the following sites:

Blogs - https://www.f5.com/company/octo

Reports - https://www.f5.com/services/resources/reports

Meet Your Hosts:

Joel Moses | www.linkedin.com/in/joelmoses/ | community.f5.com/t5/user/viewprof…e/user-id/398372

Oscar Spencer | twitter.com/oscar_spen | www.linkedin.com/in/oscarspen/

Matthew Yacobucci | www.linkedin.com/in/matthew-yacobucci-323b4b2/