Bugs, Breaches, and More! – Application Security Weekly #55

XSS Vulnerability in Abandoned Cart Plugin Leads to WordPress Site Takeover, The RedMonk Programming Language Rankings: January 2019, I Deleted Facebook Last Year; Here’s What Changed (and What Didn’t), CommitStrip: Over-excited, and more! … Continue reading Bugs, Breaches, and More! – Application Security Weekly #55

DARPA, Yelp, & FBI – Application Security Weekly #54

Owner of MAGA-Friendly Yelp Knockoff Threatens to Call FBI After Researcher Exposes Security Holes, Chinese Data Breach Exposes ‘Breed Ready’ Status Of Almost 2 Million Women, Dozens of companies leaked sensitive data thanks to misconfigure… Continue reading DARPA, Yelp, & FBI – Application Security Weekly #54

Jamie Duncan, Red Hat – Application Security Weekly #54

Jamie Duncan is a recovering history major who has been at Red Hat for just over 7 years. Beginning with his role as a TAM, his focus has increasingly centered on the operations-oriented features of OpenShift, including the May 2018 publication of Open… Continue reading Jamie Duncan, Red Hat – Application Security Weekly #54

Application News – Application Security Weekly #53

WordPress accounted for 90 percent of all hacked CMS sites in 2018, Japanese police charge 13-year-old for sharing ‘unclosable popup’ prank online, Facebook exploit – Confirm website visitor identities, NSA’s top policy advisor: It&#8… Continue reading Application News – Application Security Weekly #53

RSA 2019 Recap – Application Security Weekly #53

Keith and Paul discuss the structure and experiences of 2019’s RSA Conference. Full Show Notes Hosts         Announcements Join us April 1-3, at Disney’s Contemporary Resort for InfoSec World 2019 where you can connect a… Continue reading RSA 2019 Recap – Application Security Weekly #53

Application News – Application Security Weekly #49

    Three UK customer details exposed in homepage blunder, Microsoft cloud services see global authentication outage, the age of surveillance capitalism, the rise of DevXOps, and much more! News Bugs, Breaches, and More! 1.) Three UK customer details e… Continue reading Application News – Application Security Weekly #49

Privacy & Software Development – Application Security Weekly #49

    Keith and Paul discuss the current state of privacy and software development. – Facebook reveals news feed experiment to control emotions– Facebook pays teens to install VPN that spies on them– Apple blocks Facebook from running i… Continue reading Privacy & Software Development – Application Security Weekly #49

CRLF, NASA, & GitHub – Application Security Weekly #46

    Another server security lapse at NASA exposed staff and project data, CRLF Injection Into PHP’s cURL Options, System Down: A systemd-journald exploit, GitHub now gives free users unlimited private repositories, Twitter is Broken, Government shutdow… Continue reading CRLF, NASA, & GitHub – Application Security Weekly #46

Rey Bango, Microsoft – Application Security Weekly #46

      Rey is a security advocate at Microsoft focused on helping the community build secure systems & being a voice for researchers within MS. After a long career in software development, he developed a strong interest in cybersecurity 2 years ago … Continue reading Rey Bango, Microsoft – Application Security Weekly #46

Ken Johnson, GitHub – Application Security Weekly #45

Ken Johnson has been hacking web applications professionally for 10 years and giving security training for 7 of those years. Ken is both a breaker and builder who currently works on the GitHub application security team. Ken explains approaching appsec … Continue reading Ken Johnson, GitHub – Application Security Weekly #45