Application Security Weekly Subscribe

WordPress, Silicon Valley, and Hijacking –

January 8, 2019

Wormable stored XSS on WordPress.org, a security lapse revealed private complaints from Silicon Valley employees, hackers hijack thousands of Chromecasts to warn of latest security bug, a linting tool for checking accessibility, speed, and security, host websites on GitHub, and UnCaptcha2.

Full Show Notes: https://wiki.securityweekly.com/ASW_Episode45

Full episode and show notes

Hosts

Engineering Director at Trail of Bits

Paul Asadoorian

Principal Security Researcher at Eclypsium

https://securitypodcaster.com

Related

Vulnerability Management

AI Bad, PHP, RDP, SuperBlack, VT, Deepseek, MassJacker, Roblox, Aaran Leyland… – SWN #459

March 14, 2025

AI Bad, PHP, Remote Desktop, SuperBlack, Deepseek, Volt Typhoon, MassJacker, Roblox, Aaran Leyland, and More, on this edition of the Security Weekly News.

Government Regulations

AI Is Oversharing and Leaking Data – Sounil Yu – PSW #865

March 13, 2025

Sounil Yu joins us to kick things off with AI defenses: Enterprise AI search tools like Copilot for Microsoft 365 lack the in-depth access controls required to ensure that query responses align with the user’s need-to-know boundaries. Without proper controls, these tools accelerate the discovery of improperly secured sensitive files within the orga...

CISO vs. CIO, as CISOs Are Opting for Consulting Gigs and Cyber Pros Look for Change – BSW #386

March 12, 2025

In the leadership and communications segment, CISO vs. CIO: Where security and IT leadership clash (and how to fix it), The CISO's bookshelf: 10 must-reads for security leaders, The CISO's bookshelf: 10 must-reads for security leaders, and more!