Application Security Weekly Subscribe

Good Ol’ Days – Application Security Weekly #41

November 27, 2018

Full Audio

View Show Index

Segments

1. Brent Dukes –

Brent Dukes is a hacker, and Director of Information Security for an established manufacturing company. He joins Keith and Paul this week to talk about WAF’s, Pentesting, Burp Suite, and more!

Full Show Notes: https://wiki.securityweekly.com/ASW_Episode41

Hosts

Application Security Manager at Thermo Fisher Scientific

Paul Asadoorian

Principal Security Evangelist at Eclypsium

https://securitypodcaster.com

2. Drupalgeddon, USPS, & JavaScript –

Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers, second WordPress hacking campaign underway, USPS took a year to fix a vulnerability that exposed all 60 million users' data, this JavaScript can snoop on other Browser Tabs to work out what you're visiting, and more!

Full Show Notes: https://wiki.securityweekly.com/ASW_Episode41

Hosts

Application Security Manager at Thermo Fisher Scientific

Paul Asadoorian

Principal Security Evangelist at Eclypsium

https://securitypodcaster.com

3. Drupalgeddon, USPS, & JavaScript – Application Security Weekly #41

Hackers use Drupalgeddon 2 and Dirty COW exploits to take over web servers, second WordPress hacking campaign underway, USPS took a year to fix a vulnerability that exposed all 60 million users' data, this JavaScript can snoop on other Browser Tabs to work out what you're visiting, and more! Full Show Notes: https://wiki.securityweekly.com/ASW_Episode41 Follow us on Twitter: https://www.twitter.com/securityweekly

Related

Twitter, the DOJ, DarkSeoul, Fake Employees, PlugX, Stargazer Ghost, Aaran Leyland… – SWN #401

July 26, 2024

Twitter Opt-In, the DOJ, DarkSeoul, Fake Employees, PlugX, Stargazer Ghost, Aaran Leyland, and More on the Security Weekly News.

AI Ruining the Internet, Crowdstrike Post Mortem, Wiz Walks – ESW #369

July 25, 2024

This week, on Enterprise Security Weekly, we've got: Identity Security gets more funding Wiz walks away BlackHat Announces Startup Spotlight Finalists Crowdstrike post mortem Simple Security Tricks are the Best Security Tricks Splitting the CISO role Web scraping for AI is out of control SEC vs Solarwinds Vaping the Internet

Generative AI (as used by defenders AND attackers) will Drive SOC Evolution – Greg Notch – ESW #369

July 25, 2024

The emergence of generative AI has caused us to rethink things on two fronts: how we consume threat detection data, as defenders how we need to shift our thinking and approaches to prepare for attackers' newfound GenAI capabilities But wait - is GenAI even useful for defenders or attackers? We'll dive deep into the state of AI as it pertains t...