Absolute AppSec Titelbild

Absolute AppSec

Absolute AppSec

Von: Ken Johnson and Seth Law
Jetzt kostenlos hören, ohne Abo

Über diesen Titel

 A weekly podcast of all things application security related. Hosted by Ken Johnson and Seth Law.
Folgen
  • Episode 305 - Career Impact of GenAI, SEO/GEO, More Supply Chain Attacks

    Episode 305 - Career Impact of GenAI, SEO/GEO, More Supply Chain Attacks
    Nov 25 2025
    The latest episode of Absolute AppSec is here, with Ken Johnson and Seth Law checking in during the busy Q4 holiday season to share some fascinating insights on the evolving landscape of security and technology. They kick off by reflecting on their intensive, ever-changing "Harnessing LLMs for Application Security" courses, noting how rapidly the underlying tech evolves. The conversation quickly turns to a compelling debate: How will the rise of generative AI impact career paths for newcomers, especially given that LLMs fundamentally rely on the contributions of existing experts? While pathways may change, they agree that core human activities—like networking, contributing to projects, and maintaining a hacker mindset—will remain crucial. The hosts then dive into a fascinating discussion on the darker side of SEO, introducing the concept of Generative AI Engine Optimization (GEO), where marketers exploit AI search results through tricks like keyword-stuffed files to game rankings. They tie this to historical examples of exploitation, harkening back to Google hacking days. Finally, they cover the recent Shai Hulud 2 supply chain attack, which infected hundreds of NPM packages and utilized even more sophisticated obfuscation and delayed execution tactics than its predecessor.
    Mehr anzeigen Weniger anzeigen
    Weniger als 1 Minute
  • Episode 304 - More OWASP Top 10, AI Dynamic Testing

    Episode 304 - More OWASP Top 10, AI Dynamic Testing
    Nov 18 2025
    This episode, the 304th of Absolute AppSec, features hosts Ken Johnson (@cktricky) and Seth Law (@sethlaw) discussing the crush of Q4 expectations, upcoming training opportunities, the recent updates to the OWASP Top Ten, and the impact of AI tools like XBow on application security (AppSec) consulting. The hosts discuss the shift in the OWASP Top Ten from focusing on vulnerabilities to focusing on risks, and the dual role the list now plays for both awareness/training and compliance. Shifting to recent funding of XBow, the overall consensus is that while AI tools dramatically improve process flow, scoping, and the speed of vulnerability identification for consultants, they won't replace the need for human experts for complex, bespoke systems, business logic flaws, or authorization issues. AI is commoditizing lower-level AppSec work.
    Mehr anzeigen Weniger anzeigen
    Weniger als 1 Minute
  • Episode 303 - w/Prof. Brian Glas - OWASP Top 10 2025

    Episode 303 - w/Prof. Brian Glas - OWASP Top 10 2025
    Nov 10 2025
    Prof. Brian Glas (infosecdad on social media) joins Seth Law (sethlaw) and Ken Johnson (cktricky) for a timely episode of Absolute AppSec. Infosec Guru and one of the OWASP Top Ten project leaders Prof. Glas joins us in the aftermath of the Global AppSec conference and the announcement of the new OWASP Top Ten (2025). This episode focuses on the process for compiling the list as well as gleaning any other insights from Prof. Glas.
    Mehr anzeigen Weniger anzeigen
    Weniger als 1 Minute
Noch keine Rezensionen vorhanden