Full Segment Notes
Mobile applications have unique risks and threat models compared to server-side applications and infrastructure. Consequently, they need different strategies to ensure their business logic and workflows well secured. We'll dive into some of these defense-in-depth strategies and why they are important to mobile applications. Securing workflows goes beyond input validation and pattern matching suspicious payloads; it requires detailed attention to state machines, edge cases, and collecting signals to evaluate trust.Segment Resources:
This segment is sponsored by Guardsquare. Visit https://securityweekly.com/guardsquare to learn more about them!
Guest
Ryan has spent the past 25 years working for companies that build software tools for developer teams. Version control, issue tracking, automated testing and app security. In his current role as Chief Product Officer for Guardsquare he engages customers to help identify and solve the biggest challenges in mobile application security.
Announcements
- AppSec teams, your backlog is growing faster than you can fix it. SAST and DAST tools are flooding you with findings, developers are pushing back, and prioritizing what actually matters in code is getting harder.So how do you reduce risk without slowing releases?Join the Vulnerability Management Virtual Cybersecurity Summit to learn how teams are prioritizing real exploitable issues, reducing noise, and integrating remediation into modern development workflows.Security Weekly listeners can register for free at https://securityweekly.com/vulnmanagement using the promo code: CSS26-SW
- CyberRisk TV is proud to be an official media partner of Black Hat USA 2026! We'll be broadcasting live from the Black Hat LIVEWIRE Studio, where application security innovators can showcase the technologies, research, and strategies shaping the future of secure software development.Our Executive Interviews and Event Momentum Packages help you stay in front of developers and AppSec teams long after Black Hat ends. Fewer than 10 interview opportunities remain, so visit https://securityweekly.com/exec today and reserve your spot before they're gone.
List of Articles
Mike Shema
- Seven FatFs bugs, one very large blast radius
- AI coding agents vulnerability: GuardFall shell injeciton | Adversa AI
- GPT-5.5-Cyber built a zlib fuzzing lab in a day – The Trail of Bits Blog
- The New MCP Specification: What Security Teams Must Prepare For | Akamai
- Snyk VulnBench JS 1.0: LLM Bug Repeatability
