Lessons from MongoBleed, CWE Top 25, and Secure Coding Benchmarks - ASW #366
20 January - 44 minsMongoBleed and a recent OWASP CRS bypass show how parsing problems remain a source of security flaws regardless of programming language. We talk with Kalyani Pawar about how these problems rank against the Top 25 CWEs for 2025 and what it means for relying on LLMs to generate code.
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-366
Series Episodes
Clickfixed, Zero Trust World, and OpenClaw is out of control - but that's the point - Rob Allen - ESW #445
1 hour 41 mins
9 February Finished
The smell of victory, Bongo Fury, Sysmon, Looker, Openclaw, Kimwolf, Josh Marpet - SWN #553
37 mins
6 February Finished
Unexamined Leadership Behaviors as CEOs and CISOs Balance Cybersecurity Investments - Hacia Atherton - BSW #433
56 mins
4 February Finished
DBII, Notepad++, Covenant, Fancy Bear, CTFs, Firefox, AI Slop, Josh Marpet, and More - SWN #552
36 mins
3 February Finished
Focusing on Proactive Controls in the Face of LLM-Assisted Malware - Rob Allen - ASW #368
1 hour 7 mins
3 February Finished
