BadHost, Dead CTFs, Exploding NPMs, and the Verizon DBIR - ASW #385
2 June - 45 minsWe dedicate an episode to catching up on appsec news with Kalyani Pawar. We see parsing problems that led to the BadHost vuln, which exposed lots of LLMs, MCPs, and agents to potential compromise. We wonder where to look for security education and practice as the camaraderie of the CTF community becomes infiltrated by LLMs. We talk about the tradeoffs in trust between using public packages vs. having agents write replacements from scratch. And we examine some of the appsec details that the Verizon DBIR reveals about how orgs are being attacked -- and how orgs might use that information to protect themselves.
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes...
Series Episodes
Helping defense's use of AI catch up with offense, cost of the vulnpocalypse, news - Evan Powell - ESW #461
1 hour 37 mins
1 June Finished
Sidhe, GreyVibe, Claude, Lightwell, Eclipse, Kimsuky, Obscure Beliefs, Josh Marpet - SWN #585
32 mins
29 May Finished
What Security Leaders Should Expect from RSAC - Joseph Blankenship - BSW #449
43 mins
27 May Finished
Listening, Drupal, TTE, KEV, Mythos, Megalodon, Badanov, MFA, Pope Leo, Aaran Leyland - SWN #584
30 mins
26 May Finished
