Application Security Weekly Subscribe

Spot On – Application Security Weekly #53

March 15, 2019

Full Audio

View Show Index

Segments

1. RSA 2019 Recap –

Keith and Paul discuss the structure and experiences of 2019's RSA Conference.

Full Show Notes: https://wiki.securityweekly.com/ASW_Episode53

Hosts

Application Security Manager at Thermo Fisher Scientific

Paul Asadoorian

Principal Security Evangelist at Eclypsium

https://securitypodcaster.com

2. Application News –

WordPress accounted for 90 percent of all hacked CMS sites in 2018, Japanese police charge 13-year-old for sharing 'unclosable popup' prank online, Facebook exploit – Confirm website visitor identities, NSA's top policy advisor: It's time to start putting teeth in cyber deterrence, study shows programmers will take the easy way out and not implement proper password security, and the CommitStrip for the week on Why check for incognito mode?

Full Show Notes: https://wiki.securityweekly.com/ASW_Episode53

Hosts

Application Security Manager at Thermo Fisher Scientific

Paul Asadoorian

Principal Security Evangelist at Eclypsium

https://securitypodcaster.com

Related

Daleks, AVTECH, Palo Alto, VMWARE, Travel, California AI Dreamin’, Aaran Leyland… – SWN #411

August 30, 2024

Daleks, AVTECH, Palo Alto, VMWARE, Travel, California AI Dreamin', Aaran Leyland, and More on the Security Weekly News.

Asset Management

What asset management (ITAM) looks like outside cybersecurity – Jeremy Boerger – ESW #374

August 29, 2024

The top priority on the CIS Critical Security Controls list has never changed: inventory and control of enterprise assets. Yet it remains one of the most challenging controls to implement, much less master. The refrain, "you can't secure what you don't know about" is as old as information security itself. Complicating this task is the fact that im...

Endpoint/Device Security

Interview with ThreatLocker: Is Application Allowlisting Making a Comeback? – Danny Jenkins – ESW #374

August 29, 2024

I often say that it isn't the concepts or ideas in cybersecurity that are bad, but the implementations of them. Sometimes the market timing is just wrong and the industry isn't ready for a particular technology (e.g. enterprise browsers). Other times, the technology just isn't ready yet (e.g. SIEMs needed better database technology and faster stora...