Secure Code Reviews, LLM Coding Assistants, and Trusting Code – Rey Bango, Karim Toubba, Gal Elbaz – ASW #330
Developers are relying on LLMs as coding assistants, so where are the LLM assistants for appsec? The principles behind secure code reviews don't really change based on who write the code, whether human or AI. But more code means more reasons for appsec to scale its practices and figure out how to establish trust in code, packages, and designs. Rey Bango shares his experience with secure code reviews and where developer education fits in among the adoption of LLMs.
As businesses rapidly embrace SaaS and AI-powered applications at an unprecedented rate, many small-to-medium sized businesses (SMBs) struggle to keep up due to complex tech stacks and limited visibility into the skyrocketing app sprawl. These modern challenges demand a smarter, more streamlined approach to identity and access management. Learn how LastPass is reimagining access control through “Secure Access Experiences” - starting with the introduction of SaaS Monitoring capabilities designed to bring clarity to even the most chaotic environments. Secure Access Experiences - https://www.lastpass.com/solutions/secure-access
This segment is sponsored by LastPass. Visit https://securityweekly.com/lastpassrsac to learn more about them!
Cloud Application Detection and Response (CADR) has burst onto the scene as one of the hottest categories in security, with numerous vendors touting a variety of capabilities and making promises on how bringing detection and response to the application-level will be a game changer. In this segment, Gal Elbaz, co-founder and CTO of Oligo Security, will dive into what CADR is, who it helps, and what the future will look like for this game changing technology. Segment Resources - https://www.oligo.security/company/whyoligo
To see Oligo in action, please visit https://securityweekly.com/oligorsac
Rey is an experienced technologist and storyteller, focused on building resilient and secure products that delight users and drive company impact.
He’s passionate about great user experiences, building secure systems, empowering communities with great technology and understanding how to help companies embrace AI and cybersecurity in a responsible manner.
He’s an advocate for user privacy, digital rights and an internet that everyone can have a voice in.
Karim Toubba is the Chief Executive Officer of LastPass, having joined the company in 2022. A cybersecurity industry veteran with over 25 years of experience within the sector, Karim brings proven leadership and innovation to the security market with a focus on creating products that solve real-world challenges yet form the foundation for lasting change.
He previously served as CEO of Kenna Security, which leveraged machine learning and data science to disrupt a stagnant market and create a new category of Risk-Based Vulnerability Management (RBVM). The business was acquired by Cisco in July of 2021. He most recently served at Cisco, overseeing the Kenna Security integration along with Cisco’s EDR and XDR portfolio. Before that, he was Vice President of Products and Strategy for the Security Business Unit at Juniper Networks, a billion-dollar security business, where he oversaw product management, strategy, and technical marketing. He has held numerous executive product roles at private and public companies where he led product innovation in the areas of encryption and network analytics.
Gal Elbaz is the co-founder and CTO at Oligo Security, bringing over a decade of expertise in vulnerability research and ethical hacking. Gal started his career as a security engineer in the IDF’s elite intelligence unit. Later on, he joined Check Point, where he was instrumental in building the research team and served as a senior security researcher. In his free time, Gal enjoys playing the guitar and participating in CTF (Capture The Flag) challenges.
Identiverse 2025 is returning to Las Vegas, June 3-6. Hear from 250+ expert speakers and connect with 3,000+ identity security professionals across four days of keynotes, breakout sessions, and deep dives into the latest identity security trends. Plus, take part in hands-on workshops and explore the brand-new Non-Human Identity Pavilion. Register now and save 25% with code IDV25-SecurityWeekly at https://www.securityweekly.com/IDV2025
