Application Security Weekly (Video)

About Application Security Weekly (Video)

About all things AppSec, DevOps, and DevSecOps. Hosted by Mike Shema and John Kinsella, the podcast focuses on helping its audience find and fix software flaws effectively.

Publisher

Mike Shema

Category

news · technology

Language

en

Explicit

No

First episode

6 Jan 2018

Latest episode

20 Oct 2026

Latest episodes

1 of 732 episodes have a transcript.

1. 

   20 Oct 2026

   Standardizing Mobile Defense: Inside the OWASP Mobile App Security Project v2 - Ryan Lloyd, Jan Seredynski - ASW #405

   The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the project to talk about how it's been updated, how orgs can use it, and the challenges orgs face in managing their mobile frameworks and environments. We also cover how agents and LLMs are impacting mobile security and what future iterations of the MAS project might include for securing mobile apps interacting with LLMs or being written by LLMs. Finally, we share practical ways for developers to get involved as OWASP contributors and advocates. Segment Resources: https://mas.owasp.org https://mas.owasp.org/MASWE/ https://hubs.ly/Q04ykvgm0 This segment is sponsored by Guardsquare. Visit https://securityweekly.com/guardsquare to learn more! Show Notes: https://securityweekly.com/asw-405

2. 

   13 Oct 2026

   What's Not Found in AppSec? - ASW #404

   To celebrate our 404th episode we discuss what's not found in modern appsec and what still exists that should become not found. The conversation starts with a classic problem of appsec -- looking for a reliable vuln prioritization methodology. But we expand from there to challenge whether a focus on vulns and patches is even the right choice for an appsec program. Then it's on to incentives, the role of agents in writing and securing software, and what we should be looking for to bring new appsec practitioners into the industry. Show Notes: https://securityweekly.com/asw-404

3. 

   6 Oct 2026

   Getting Granular with Access, Attributes, and Intent - Alex Olivier - ASW #403

   The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined and correct access policies. It's a problem that predates LLMs, but also one that agents and MCPs made all the more acute. We talk about what intent means when trying to constrain agents' activities, what role LLMs have in policy decisions, and how LLMs can help create a much-needed inventory of access controls. Segment Resources: https://www.cerbos.dev/blog/dimmer-switch-not-a-kill-switch-rethinking-ai-agent-governance https://www.cerbos.dev/blog/multi-hop-delegation-ai-agents https://openid.net/wg/authzen/ Show Notes: https://securityweekly.com/asw-403

Inside a recent episode

Discovering & Securing Your AI Agent Attack Surface - Jeremy Snyder - ASW #391

Published 14 Jul 2026 · Transcript excerpt

[…] I'd love to, can you expand a bit more? What does it mean to have observability on just an API for that matter? And then this kind of prompting and interactions that you're describing? Yeah, so let me start with the technical aspect, and then we'll come to the threat or the risk observability aspect of it. So on a technical aspect, a really interesting pattern that we've observed is that every single AI service that we've seen interacts over REST APIs. And that is also true of ChatGPT inside your web browser. What you don't really realize is happening is that the front end that you observe is just a JavaScript-powered application. […]

Who has been a guest on Application Security Weekly (Video)

Names identified in recent episode analyses. Showing up to five guests.

• Janet Worthington
• Will Vandevanter
• Julia Knecht
• Sohrob Kazerounian
• Sandy Carielli

Reach and audience

Public platform figures. Ratings count people who left a rating, not total listeners.

Apple Podcasts (US)

4.8 / 5

4 ratings

Podcast Authority Score: 55 / 100

A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.

Quality

96

Social presence

0

YouTube

0

Engagement

32

Contact Application Security Weekly (Video)

Guest appearances

Does not typically book guests

Based on episode analysis; this does not confirm that the show is currently accepting guests.

Shows with a similar audience

• 

  The Application Security Podcast

• 

  CyberWire Daily

• 

  Risky Business

• 

  SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

• 

  Cyber Security Headlines

• 

  Security Now (Audio)

Questions about Application Security Weekly (Video)