The DevSecOps Talks Podcast

The DevSecOps Talks Podcast

By Mattias Hemmingsson, Julien Bisconti and Andrey DevyatkinTechnology
Download on the App Store

The DevSecOps Talks Podcast episodes

  • #84 - AI for DevSecOps: Current Wins and Ongoing Gaps
    Can AI really help us build more secure software? What’s working in practice right now, and where do the tools still fall short? Mattias and Paulina share their views.

     

    We are always happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.

    DevSecOps Talks podcast LinkedIn page

    DevSecOps Talks podcast website

    DevSecOps Talks podcast YouTube channel

    36 min
  • #83 - Opentofu Vs Terraform: Where We Are Now With Cole Bittel

    It’s been a while since OpenTofu was released to the public, so we wanted to check in on where it stands today. How is the community adopting it? What’s the public sentiment? And how does it differ from Terraform in terms of features?

    This time we’re joined by Cole Bittel, an experienced SRE, platform engineer, and contributor to OpenTofu. He shares his hands-on experience migrating to OpenTofu, and we look into the problems teams face with infrastructure as code and how both Terraform and OpenTofu approach solving them.

    We are always happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.

    DevSecOps Talks podcast LinkedIn page

    DevSecOps Talks podcast website

    DevSecOps Talks podcast YouTube channel

    39 min
  • #82 - Tools, Mcps, And Attack Scenarios
    This time we talk about how LLMs use tools and what the Model Context Protocol (MCP) brings to the table. What are the risks? How can an attacker exploit MCPs? And why are LLMs a bit like grandpas — helpful but forgetful?

     

    We are always happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.

    DevSecOps Talks podcast LinkedIn page

    DevSecOps Talks podcast website

    DevSecOps Talks podcast YouTube channel

    37 min
  • #81 - Keeping Secrets Safe

    Still pasting tokens into Slack? What types of secrets are at risk, and which tools fit which consumer—humans, CI/CD, or workloads? Where do most teams stumble, and how do you fix it fast? Hear our no-nonsense checklist.

     

    Connect with us on LinkedIn or X (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.

    The video version of this episode is available on our YouTube channel

    LinkedIn page of the DevSecOps Talks team is here

    34 min
  • #80 - Understanding Passkeys: Benefits And Limitations

    Passkeys are gaining attention as a new way to log in without passwords. How do they work, and how do they compare to traditional multi-factor authentication (MFA)? In this episode, we explore the history of passwords, the strengths and weaknesses of common MFA methods, and the potential of passkeys to enhance security. What threats do passkeys mitigate, and what still remain?

     

    Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.

    37 min
  • #79 - Going Local: What’S Driving The Move?
    Andrey, Paulina, and Mattias kick off a miniseries on European infrastructure. We talk about infrastructure providers' options across Europe, ask what really drives the move away from hyperscalers, and wonder whether the trade-offs make sense for most teams.

     

    Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.

    21 min
  • #78 - Building AI Tools For IaC Compliance

    In this guest episode, we chat with Davlet Dzhakishev, co-founder of Cloudgeni, who’s working on an AI-powered approach to fixing compliance issues in IaC. What’s the state of tools in this space? Where does his idea fit in? And how should we think about the relationship between compliance and security?

     

    Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.

    42 min
  • #77 - Chaos Engineering Explained: Part 2
    Part two of our chaos engineering series is here! Join Andrey, Mattias, and Paulina as they talk through practical strategies for chaos engineering. Who should do it? How can you start? And what are the essential prerequisites?

     

    Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.

    35 min
  • #76 - Chaos Engineering Explained: Part 1
    Chaos engineering—is it really chaos, or something more structured? Andrey, Paulina, and Mattias talk about what chaos engineering means, how it started, and why you might already be using it unintentionally.

     

    Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.

    27 min
  • #75 - Learning from the Crisis: Post-Incident Actions
    This is the final episode of our three-part series on incident response. We focus on what happens after the dust settles. How do you learn from what went wrong and avoid repeating it? Tune in to hear our top recommendations.

     

    Connect with us on LinkedIn or Twitter (see info at https://devsecops.fm/about/). We are happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners.

    25 min

About The DevSecOps Talks Podcast

From the publisher's feed

This is the show by and for DevSecOps practitioners who are trying to survive information overload, get through marketing nonsense, do the right technology bets, help their organizations to deliver…

More shows like The DevSecOps Talks Podcast

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

373 Listeners

Risky Business by Risky Business Media

Risky Business

374 Listeners

The Enterprise AI Show by Massive Studios

The Enterprise AI Show

149 Listeners