Application Security Weekly Subscribe

Malicious Ruby Gems & JSON Web Token Bypass – ASW #104

April 20, 2020

This week in the Application Security News, JSON Web Token Validation Bypass in Auth0 Authentication API, Mining for malicious Ruby gems, A Brief History of a Rootable Docker Image, Privacy In The Time Of COVID, and Threat modeling explained: A process for anticipating cyber attacks!

Full episode and show notes

Hosts

Tech Lead at Block

Senior Engineering Leader at AWS

Chief Product Officer at CyberSaint

Related

Security Strategy, Plan, Budget

Cybersecurity best practices are the worst, AI indegestion, real time doxxing – ESW #378

October 3, 2024

This week in the enterprise security news, we've got: Torq, Tamnoon, and Defect Dojo raise funding Checkmarx acquires ZAP Commvault acquires Clumio Would you believe San Francisco is NOT the most funded metro area for cybersecurity? Auto-doxxing Smart glasses are now possible Meta gets fined $100M for storing plaintext passwords AI coding assista...

Cybersecurity Career Paths: from touring musician to purple teaming at Meta – Jayson Grace – ESW #378

October 3, 2024

Our latest in a series of interviews discussing cybersecurity career paths, today we talk to Jayson Grace his path into cybersecurity and his experience building red teams at national labs and purple teams at Meta. We also talk about his community impact, giving talks and building open source tools. Jayson just left Meta for an AI safety startup na...

Vulnerability Management

Secure the Browser & Vulnerability and Exposure Management – Brian Contos, Neko Papez – ESW #378

October 3, 2024

The way we use browsers has changed, so has the way we need to secure them. Using a secure enterprise browser to execute content away from the endpoint, inside a secure cloud browser is a dramatically more effective and cost-effective approach to protect users and secure access. This segment is sponsored by Menlo Security. Visit https://securitywe...