DevelopSec: Developing Security Awareness

May 07 2024 125 ep. 20 mins 444
DevelopSec: Developing Security Awareness Podcast artwork

Curious about application security? Want to learn how to detect security vulnerabilities and protect your application. We discuss different topics and provide valuable insights into the world of application security.

  Technology  Education
RSS feed Share
Copy RSS


Subscribe on Podcast Addict


Ep. 121 - Evolving Ransomware: Unique Tactics for Payment

May 07 2024 17 mins  
In this episode I talk about the evolving world of ransomware. I discuss a few examples of unique tactics the malicious actors are using to put pressure on organizations to pay the ransom. Referenced Articles: https://www.theregister.com/AMP/2024/04/30/finnish_psychotherapy_center_crook_sentenced/ https://www.darkreading.com/cyber-risk/hackers-weaponize-sec-disclosure-rules-

Ep. 120: Addressing Root Cause - Vulnerable Components

Jan 31 2023 16 mins  
In this episode we talk about addressing the root cause of an issue versus the symptoms. How can the process of keeping application components updated be improved? For more info go to https://www.developsec.com or follow us on twitter (@developsec). DevelopSec provides application security consulting and training to add value to your application security program. Contact us t

Ep. 119: Risks of SpellCheck

Jan 19 2023 12 mins  
In this episode we talk about the spell check feature of the browser and how it could present a risk to sensitive data. Link to article referenced: https://www.darkreading.com/application-security/spellchecking-google-chrome-microsoft-edge-browsers-leaks-passwords For more info go to https://www.developsec.com or follow us on twitter (@developsec). DevelopSec provides a

Ep. 118: Log4J Sparking Thought on Vulnerable Components

Dec 19 2021 24 mins  
Log4J has been the talk of the town recently and everyone is focused on the technical details of the specific vulnerabilities found. In this episode, James talks about the overarching ideas around dealing with vulnerable components. Are you vulnerable? If so, what needs to be done? For more info go to https://www.developsec.com or follow us on twitter (@developsec). Join the conver

Ep. 117: How Browsers are Helping with Security

Feb 09 2020 13 mins  
Chrome has announced a few changes that we need to watch out for in the near future. We previously talked about the default value for samesite that is coming up fast. I wrote about this here: https://www.jardinesoftware.net/2019/10/28/samesite-by-default-in-2020/ Also, they are getting ready to start blocking mixed content downloads: https://blog.chromium.org/2020/02/protecting-u

Ep. 116: Chrome Retires XSS Auditor

Nov 15 2019 14 mins  
It was recently announced that Chrome was dropping the XSS Auditor in Chrome 78. What does that mean and how does that change things for you as a developer? https://www.chromium.org/developers/design-documents/xss-auditor For more info go to https://www.developsec.com or follow us on twitter (@developsec). Join the conversations.. join our slack channel. Email [email protected]

Ep. 115: Is CSRF Really Dead?

Nov 06 2019 15 mins  
In 2020, Chrome will default the SameSite attribute to Lax on all cookies. SameSite helps mitigate CSRF, but does that mean CSRF is Dead? For more info go to https://www.developsec.com or follow us on twitter (@developsec). Join the conversations.. join our slack channel. Email [email protected] for an invitation. DevelopSec provides application security training to add value t

Ep. 114: Investing in People for Better Application Security

Oct 29 2019 24 mins  
In this episode, James talks about investing in the development teams to increase application security priorities. For more info go to https://www.developsec.com or follow us on twitter (@developsec). Join the conversations.. join our slack channel. Email [email protected] for an invitation. DevelopSec provides application security training to add value to your application secu

Ep. 113: What is your mother's maiden name?

May 28 2019 21 mins  
In this episode, James talks about some of the risks and recommendations around security questions and their implementation. For more info go to https://www.developsec.com or follow us on twitter (@developsec). Join the conversations.. join our slack channel. Email [email protected] for an invitation. DevelopSec provides application security consulting and training to add valu

Ep. 112: Application Fingerprinting

Jan 22 2019 21 mins  
Does your application give away details about it server, framework, or other components? How is this information used by an attacker? Check out this episode to learn more. For more info go to https://www.developsec.com or follow us on twitter (@developsec). Join the conversations.. join our slack channel. Email [email protected] for an invitation. DevelopSec provides applicatio