Application Security Weekly Subscribe

The Wind Beneath My Wings – Application Security Weekly #46

January 16, 2019

Full Audio

View Show Index

Segments

1. Rey Bango, Microsoft –

Rey is a security advocate at Microsoft focused on helping the community build secure systems & being a voice for researchers within MS. After a long career in software development, he developed a strong interest in cybersecurity 2 years ago & worked feverishly to transition into this new community.

Full Show Notes: https://wiki.securityweekly.com/ASW_Episode46

Hosts

Application Security Manager at Thermo Fisher Scientific

Paul Asadoorian

Principal Security Evangelist at Eclypsium

https://securitypodcaster.com

2. CRLF, NASA, & GitHub –

Another server security lapse at NASA exposed staff and project data, CRLF Injection Into PHP’s cURL Options, System Down: A systemd-journald exploit, GitHub now gives free users unlimited private repositories, Twitter is Broken, Government shutdown: TLS certificates not renewed, many websites are down, and much more!

Full Show Notes: https://wiki.securityweekly.com/ASW_Episode46

Hosts

Application Security Manager at Thermo Fisher Scientific

Paul Asadoorian

Principal Security Evangelist at Eclypsium

https://securitypodcaster.com

Related

Daleks, AVTECH, Palo Alto, VMWARE, Travel, California AI Dreamin’, Aaran Leyland… – SWN #411

August 30, 2024

Daleks, AVTECH, Palo Alto, VMWARE, Travel, California AI Dreamin', Aaran Leyland, and More on the Security Weekly News.

Asset Management

What asset management (ITAM) looks like outside cybersecurity – Jeremy Boerger – ESW #374

August 29, 2024

The top priority on the CIS Critical Security Controls list has never changed: inventory and control of enterprise assets. Yet it remains one of the most challenging controls to implement, much less master. The refrain, "you can't secure what you don't know about" is as old as information security itself. Complicating this task is the fact that im...

Endpoint/Device Security

Interview with ThreatLocker: Is Application Allowlisting Making a Comeback? – Danny Jenkins – ESW #374

August 29, 2024

I often say that it isn't the concepts or ideas in cybersecurity that are bad, but the implementations of them. Sometimes the market timing is just wrong and the industry isn't ready for a particular technology (e.g. enterprise browsers). Other times, the technology just isn't ready yet (e.g. SIEMs needed better database technology and faster stora...