Paul's Security Weekly Subscribe

New Web Technology & Impact on Automated Security Testing – Benjamin Daniel Mussler – PSW #655

June 11, 2020

As web applications have evolved from static HTML pages into fully-fledged applications with a native feel to them, web browsers continue to provide developers with truly novel functionality. The resulting paradigm shift from merely rendering web pages to acting as an OS-agnostic abstraction layer poses unique challenges to everyone involved with web application security, including automated web application security scanning solutions.

Full episode and show notes

Announcements

Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.

Guest

Benjamin Daniel Mussler

Senior Security Researcher at Acunetix

http://acunetix.com/

Web Application Security Researcher at Acunetix

Hosts

Paul Asadoorian

Principal Security Researcher at Eclypsium

https://securitypodcaster.com

Retired Senior Cyber Advisor at Lawrence Livermore National Laboratory

Chief Product Officer at CyberSaint

CEO at Red Lion

https://redlion.io

Director of Offensive Security & Research at Trimarc Security, Founder & CEO at Dark Element

http://darkelement.io/

Related

Google picks up a Wiz kid, GitHub’s malicious actions, Agentic AI is sus – ESW #399

March 24, 2025

This week, JP Bourget from Blue Cycle is with us to discuss Building the SOC of the Future Then, Michael Mumcuoglu (Moom-cuoglu) from CardinalOps joins us to talk about improving detection engineering. In the enterprise security news, Google bets $32B on a Wiz Kid Cybereason is down a CEO, but $120M richer EPSS version 4 is out Github supply cha...

Security Operations

We need better detection feedback loops – Michael Mumcuoglu – ESW #399

March 24, 2025

It feels like forever ago, but in the mid-2010s, we collectively realized, as an industry, that prevention was never going to be enough. Some attacks were always going to make their way through. Then ransomware got popular and really drove this point home. Detection engineering is a tough challenge, however. Where do we start? Which attacks should...

Security Operations

Building the SOC of the Future – JP Bourget – ESW #399

March 23, 2025

What does a mature SecOps team look like? There is pressure to do more with less staff, increase efficiency and reduce costs. JP Bourget's experience has led him to believe that the answer isn't a tool upgrade, it's better planning, architecture, and process. In this interview, we'll discuss some of the common mistakes SecOps teams make, and where...