In this episode of the podcast, host Paul Roberts welcomes Tanya Janca of She Hacks Purple back into the studio. Tanya talks about her newly released book: Alice and Bob Learn Secure Coding, published by Wiley and the larger problem of how to promote the teaching of secure coding practices to developers.

The post Episode 260: The Art of Teaching Secure Coding with Tanya Janca appeared first on The Security Ledger with Paul F. Roberts.

The pandemic isn't the only thing shaking up development organizations. Application security is a top concern and security work is "shifting left" and becoming more intertwined with development. In this podcast, Security Ledger Editor in Chief Paul Roberts talks about it with Jonathan Hunt, Vice President of Security at the firm GitLab.

The post Podcast Episode 189: AppSec for Pandemic Times, A Conversation with GitLab Security VP Jonathan Hunt appeared first on The Security Ledger with Paul F. Roberts.

In this Spotlight episode of the Podcast, sponsored* by ForAllSecure we speak with CEO David Brumley about application "fuzzing" and how advancements in machine learning technology are allowing security researchers to find more and more serious vulnerabilities faster. The challenge now, Brumley says, is to keep up with the machines.

The post Spotlight Podcast: How Machine Learning is revolutionizing Application Fuzzing appeared first on The Security Ledger with Paul F. Roberts.

In this week’s podcast (#124):  we speak with French security researcher Baptiste Robert about research on the social media accounts pushing the french "Yellow Vest" protests. Surprise, surprise: they're not french. Also: Brian Fox of the firm Sonatype joins us to talk about the recent compromise of the Github event-stream project and why social engineering poses a real risk to the security of the software supply chain. 

The post Episode 124: The Twitter Accounts Pushing French Protests. Also: social engineering the Software Supply Chain appeared first on The Security Ledger with Paul F. Roberts.

In this episode of The Security Ledger Podcast (#91): with Facebook CEO Mark Zuckerberg saying he will testify before Congress, we ask Harvard’s Matthew Baum about what Congressmen and women should ask him and how to best fight fake news. Also: Adam Kujawa of Malwarebytes updates us on that company’s latest quarterly threat report and helps us answer the question “what’s with all the cryptomining”? Shadowboxing fake news Facebook CEO Mark Zuckerberg has promised to testify before the US Congress in the wake of serial revelations about his company’s ties to shady data analytics operations that helped foment social unrest and political tension around both the Brexit vote and the US Presidential election. It is now believed that more than 80 million Facebook users may have had their data exposed to Cambridge Analytica and its many clients. Ahead of Zuckerberg’s (presumed) testimony, however, there has been lots of attention to […]

The post Podcast Episode 91: Fighting Fake News with or without Facebook and whats with all the Cryptojacking? appeared first on The Security Ledger with Paul F. Roberts.