Full episode and show notes

The AI Threat Multiplier: Securing Mobile Apps in the Automated Era – Ryan Lloyd, Jason Cortlund – ASW #400

While agents and LLMs haven’t fundamentally changed core mobile vulnerability types, they have supercharged speed, scale, and accessibility—democratizing threats like automated phishing, synthetic identity fraud, and easier identification of hard-coded secrets. Ryan Lloyd and Jason Cortlund break down how threat actors leverage LLMs as a force multiplier to accelerate mobile app attacks. Then we discuss actionable defense strategies, from viewing agents as an active adversary to leveraging server-side threat telemetry, attestation, and layered defense strategies combined with polymorphic code releases. This segment is sponsored by Guardsquare. Visit https://securityweekly.com/guardsquare to ...

This episode is sponsored by
Full Segment Notes

While agents and LLMs haven't fundamentally changed core mobile vulnerability types, they have supercharged speed, scale, and accessibility—democratizing threats like automated phishing, synthetic identity fraud, and easier identification of hard-coded secrets. Ryan Lloyd and Jason Cortlund break down how threat actors leverage LLMs as a force multiplier to accelerate mobile app attacks. Then we discuss actionable defense strategies, from viewing agents as an active adversary to leveraging server-side threat telemetry, attestation, and layered defense strategies combined with polymorphic code releases.

This segment is sponsored by Guardsquare. Visit https://securityweekly.com/guardsquare to learn more about them!

Guests
Chief Product Officer at Guardsquare

Ryan has spent the past 25 years working for companies that build software tools for developer teams. Version control, issue tracking, automated testing and app security. In his current role as Chief Product Officer for Guardsquare he engages customers to help identify and solve the biggest challenges in mobile application security.

Technical Marketing Writer at Guardsquare

Jason Cortlund is a mobile application security evangelist at Guardsquare. His recent work includes examining cloned-app proliferation and broader AppSec trends across various industries, including healthcare, banking, and retail.

Announcements

  • You shipped it, but is it still exposed? Shadow APIs, forgotten endpoints, and unmanaged services are expanding your attack surface beyond what AppSec teams can track.

    So what’s still out there?

    At the Attack Surface Management Virtual Cybersecurity Summit on September 16th, learn how to discover exposed applications and APIs and reduce risk across your environment.

    Security Weekly listeners can register for free at https://securityweekly.com/asm using the promo code: CSS26-SW

  • InfoSec World is introducing a fresh experience for 2026, with new voices, a new venue, and new topics reflecting the challenges security teams are facing now. Join practitioners and leading professionals from across industries in Orlando, October 12–14. Listeners save 30% on their pass with code ISW26-SWSAVINGS at securityweekly.com/infosecworld2026.

List of Articles

Mike Shema

  1. An alignment assessment of recent cybersecurity incidents Anthropic
  2. OpenAI agents carried out an undisclosed cyber-attack on RubyGems

    See also more unmonitored activity in "Discovery of a new OpenAI agent message board."

  3. CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key
  4. The Anthropic Glasswing Receipts Are Starting to Trickle In | Blog | VulnCheck
  5. Cybersecurity Benchmarking: Why, Why Not, When and How

    Here's an example of exploring benchmarks that distinguish between the coding effectiveness of a model from the effectiveness of the coding tools that exercise that model.

  6. Evaluating AGENTS.md: Are Repository-Level Context Files Helpful for Coding Agents?
  7. OWASP MCP Taxonomy · GitHub
Show More

Stay in the Know, No Smoke and Mirrors – Join Our Newsletter

Get expert insights and technical breakdowns straight to your inbox.
Join Now

Related Segments

Related Content

You can skip this ad in 5 seconds