Listen to a podcast, please open Podcast Republic app. Available on Google Play Store and Apple App Store.
Curious about application security? Want to learn how to detect security vulnerabilities and protect your application. We discuss different topics and provide valuable insights into the world of application security.
| Episode | Date |
|---|---|
|
Ep. 129: When Security Recommendations Miss The Point
|
Jan 30, 2026 |
|
Ep. 128: OWASP Top 10 2025
|
Jan 21, 2026 |
|
Ep. 127: Importance of Terminology
|
Jan 14, 2026 |
|
Ep. 126: Avoiding Panic and Misunderstandings with Proper Authentication Failure Reporting
|
Jan 06, 2026 |
|
Ep. 125: From Flat Tires to AppSec: The Power of Tools and Process
|
Dec 31, 2025 |
|
Ep. 124: Double-ClickJacking
|
Feb 24, 2025 |
|
Ep. 123: Goals of Security Culture - Sort of?
|
Feb 18, 2025 |
|
Ep. 122: Integrating Security Responsibilities into Development
|
Feb 10, 2025 |
|
Ep. 121 - Evolving Ransomware: Unique Tactics for Payment
|
May 07, 2024 |
|
Ep. 120: Addressing Root Cause - Vulnerable Components
|
Jan 31, 2023 |
|
Ep. 119: Risks of SpellCheck
|
Jan 19, 2023 |
|
Ep. 118: Log4J Sparking Thought on Vulnerable Components
|
Dec 19, 2021 |
|
Ep. 117: How Browsers are Helping with Security
|
Feb 09, 2020 |
|
Ep. 116: Chrome Retires XSS Auditor
|
Nov 15, 2019 |
|
Ep. 115: Is CSRF Really Dead?
|
Nov 06, 2019 |
|
Ep. 114: Investing in People for Better Application Security
|
Oct 29, 2019 |
|
Ep. 113: What is your mother's maiden name?
|
May 28, 2019 |
|
Ep. 112: Application Fingerprinting
|
Jan 22, 2019 |
|
Ep. 111: Authentication Alerts
|
Jan 14, 2019 |
|
Ep. 110: Implementation Matters
|
Jan 07, 2019 |
|
Ep. 109: 2018 Reflection
|
Jan 02, 2019 |
|
Ep. 108: Dunkin Donuts Breach, Maybe??
|
Dec 12, 2018 |
|
Ep. 107: Credential Stuffing
|
Nov 09, 2018 |
|
Ep. 106: Facebook Breach Take-aways and Insights
|
Oct 04, 2018 |
|
Ep. 105: Interview with Eric Johnson
|
Sep 20, 2018 |
|
Ep. 104: Securing Devops with Julien Vehent
|
Aug 30, 2018 |
|
Ep. 103: Is 3rd Party Authentication Right For Your Application?
|
Aug 16, 2018 |
|
Ep. 102: Intro to Web Security Policies
|
Jun 26, 2018 |
|
Ep. 101: You're not always right and that is ok
|
Jun 18, 2018 |
|
Ep. 100: Choosing Security Tools
|
Jun 07, 2018 |
|
Ep. 99: Shifting Left in the SDLC
|
May 30, 2018 |
|
Ep. 98: Efail and News Hype
|
May 15, 2018 |
|
EP. 97: Gmail / Netflix Potential Scam
|
Apr 23, 2018 |
|
Ep. 96: Security Flaws as Defects
|
Apr 16, 2018 |
|
Ep. 95: MyFitnessPal Breach Take-Aways
|
Apr 09, 2018 |
|
Ep. 94: Penetration Testing
|
Apr 02, 2018 |
|
Ep. 93: Code Review
|
Mar 09, 2018 |
|
Ep. 92: 2-Factor Authentication
|
Mar 06, 2018 |
|
DevelopSec Podcast #91 - OWASP Top 10 2017 Thoughts
|
Feb 09, 2018 |
|
Ep. 90: 5 Steps to Help Secure Your Database
|
Jan 16, 2018 |
|
Ep. 89: New Year's Resolutions
|
Jan 04, 2018 |
|
Ep. 88: Meteor Security with Tim Medin
|
Dec 11, 2017 |
|
Ep. 87: Apple Sign-in Bug Take-Aways
|
Dec 01, 2017 |
|
Ep. 86: Vulnerable 3rd Party Components
|
Nov 23, 2017 |
|
Ep. 85: Open Redirect Revisited
|
Nov 17, 2017 |
|
Ep. 84: Understanding the Technology
|
Oct 31, 2017 |
|
Ep. 83: Authorization Overview
|
Oct 18, 2017 |
|
Ep. 82: Equifax Take-aways
|
Sep 29, 2017 |
|
Ep. 81: JavaScript in HREF and SRC (XSS)
|
Sep 18, 2017 |
|
Ep. 80: Understanding Security of Your Platforms
|
Aug 23, 2017 |
|
Ep. 79: Marketing with USB Drives
|
Jul 31, 2017 |
|
Ep. 78: MySpace Lessons - Looking At Account Recovery
|
Jul 24, 2017 |
|
Ep. 77: Interactive Application Security Testing
|
Jul 07, 2017 |
|
Ep. 76: Validation - Client vs. Server
|
Jun 19, 2017 |
|
Ep. 75: IAM with Geurt van Wijk
|
Jun 05, 2017 |
|
Ep. 74: Audio Driver Key Logger Lessons Learned
|
May 24, 2017 |
|
Ep. 73: Identity with Vittorio Bertocci
|
May 17, 2017 |
|
Ep. 72: Where to Perform Output Encoding
|
May 11, 2017 |
|
Ep. 71: Sub Resource Integrity
|
Apr 17, 2017 |
|
Ep. 70: Considering security when selecting an application platform
|
Mar 27, 2017 |
|
Ep. 69: Concurrent User Sessions
|
Mar 10, 2017 |
|
Ep. 68: How the AWS disruption can help us
|
Mar 03, 2017 |
|
Ep. 67: Clearing up HTTPOnly and Secure Cookie Attributes
|
Feb 24, 2017 |
|
Ep. 66: Forgot Username
|
Feb 22, 2017 |
|
Ep. 65: Security Questions: Good or Bad?
|
Feb 15, 2017 |
|
Ep. 64: Using Stolen Passwords to Protect User Accounts
|
Jan 23, 2017 |
|
Ep. 63: Remember Me Feature: Security Considerations
|
Jan 17, 2017 |
|
Ep. 62: MongoDB Ransomware Attacks
|
Jan 10, 2017 |
|
Ep. 61: Multi-factor Authentication
|
Jan 05, 2017 |
|
Ep. 60: Yahoo Breach Takeaways
|
Dec 15, 2016 |
|
Ep. 59: All About Cookie Protection
|
Dec 14, 2016 |
|
Ep. 58: "Untrusted" Data
|
Nov 16, 2016 |
|
Ep. 57: Source Code Review
|
Nov 04, 2016 |
|
Ep. 56: Security Contacts
|
Oct 26, 2016 |
|
Ep. 55: Scoping an application security assessment (Applications)
|
Sep 28, 2016 |
|
Ep. 54: WAFs and Pen Testing
|
Sep 21, 2016 |
|
Ep. 53: Chrome Changing Secure Notifications
|
Sep 15, 2016 |
|
Login Forms and HTTPS
|
Sep 07, 2016 |
|
Ep. 52: Importance of UI to Security
|
Sep 05, 2016 |
|
Ep. 51: Everything is a target
|
Aug 29, 2016 |
|
Ep. 50: How Serious is Username Enumeration
|
Jul 28, 2016 |
|
Ep. 49: Should Password Change Invalidate Access Tokens?
|
Jul 25, 2016 |
|
Ep. 48: Pokemon Go Security Discussions
|
Jul 18, 2016 |
|
Ep. 47: Account Lockouts and auto-unlock
|
Jun 17, 2016 |
|
Ep. 46: Password Confirm Boxes
|
Jun 10, 2016 |
|
Ep. 45: The importance of WHY
|
Jun 03, 2016 |
|
Ep. 44: "We don't support Macs"
|
May 27, 2016 |
|
Ep. 43: Reflecting on Current AppSec Training
|
May 21, 2016 |
|
Ep. 42: The Need for Better Secure Code Examples
|
Apr 24, 2016 |
|
Ep. 41: Why You Need an Application Inventory
|
Apr 19, 2016 |
|
Ep. 40: Getting More Value from Pen Tests
|
Mar 08, 2016 |
|
Ep. 39: Authentication
|
Feb 29, 2016 |
|
Ep. 38: Static Analysis: Tips for Successful Program
|
Feb 07, 2016 |
|
Ep. 37: CSRF Chaining
|
Jan 26, 2016 |
|
Ep. 36: Intro to Cross Site Request Forgery (CSRF)
|
Jan 07, 2016 |
|
Ep. 35: An Introduction to Open Redirects
|
Dec 15, 2015 |
|
Ep. 34: Importance of Hacking
|
Dec 11, 2015 |
|
Ep. 33: Holiday Gift Security Considerations
|
Nov 24, 2015 |
|
Ep. 32: Dynamic Analysis: An Overview
|
Nov 21, 2015 |
|
Ep. 31: Response Splitting and Header Injection
|
Nov 09, 2015 |
|
Newscast - Oct. 20, 2015
|
Oct 20, 2015 |
|
Newscast - Sept. 30, 2015
|
Oct 01, 2015 |
|
Newscast - Sept. 23, 2015
|
Sep 24, 2015 |
|
Ep. 30: HTTP Strict Transport Security (HSTS): Intro
|
Sep 18, 2015 |
|
Ep. 29: FTC Start with Security Guidelines
|
Jul 30, 2015 |
|
Ep. 28: What is Penetration Testing
|
Jul 17, 2015 |
|
Ep. 27: Importance of Security for BA and PM
|
Jun 18, 2015 |
|
Ep. 26: The Importance of Security for QA
|
May 26, 2015 |
|
Ep. 25: Static Analysis: Analyzing the Options
|
Apr 10, 2015 |
|
Ep. 24: The Importance of Baselines
|
Apr 02, 2015 |
|
Ep. 23: 3rd Party CMS Security Thoughts
|
Mar 11, 2015 |
|
Ep. 22: Black lists vs. White Lists
|
Feb 19, 2015 |
|
Ep. 21: Sensitive Data and Storage
|
Feb 04, 2015 |
|
EP. 20: MoonPig Take-aways
|
Jan 09, 2015 |
|
Ep. 19: Target Environments
|
Nov 30, 2014 |
|
Ep. 18: Planning for an Assessment
|
Oct 12, 2014 |
|
Ep. 17: Authorization
|
Oct 03, 2014 |
|
Ep. 16: The Cloud: Is it Safe?
|
Sep 05, 2014 |
|
Ep. 15: Security Testing - QA can do this!!
|
Aug 22, 2014 |
|
Ep. 14: Input Validation and Output Encoding
|
Jul 27, 2014 |
|
Ep. 13: Introduction to Cross Site Scripting
|
Jun 27, 2014 |
|
DS: Ep 12: Ebay hacked. All about Cookies
|
May 27, 2014 |
|
Ep. 11: Not your Grandpa's Phishing
|
May 09, 2014 |
|
Ep. 10: Threat Modeling
|
Apr 25, 2014 |
|
Ep. 9: Windows XP and HeartBleed
|
Apr 11, 2014 |
|
Ep. 8: Oversharing is not Caring
|
Mar 21, 2014 |
|
Ep. 7: Data Breaches
|
Mar 14, 2014 |
|
Ep. 6: Mobile Security
|
Mar 07, 2014 |
|
Ep. 5: SQL Injection
|
Feb 21, 2014 |
|
Ep. 4: Web Proxies
|
Feb 14, 2014 |
|
Ep. 3:Connected System Security
|
Feb 07, 2014 |
|
Ep. 2: All About Passwords
|
Jan 31, 2014 |
|
Ep. 1: Introduction to the Podcast
|
Jan 24, 2014 |