Episode 333 - LLM Patching Flaws, AI Code Regressions, Bug Bounty Economy
Sponsored by GuardSquare (guardsquare.com), the discussion of Episode 333 opens with an analysis of a 1Password academic paper evaluating ho...
Radio and PodcastLive Radio & PodcastsTechnology
Absolute AppSec
A weekly podcast of all things application security related. Hosted by Ken Johnson and Seth Law.
Episodes
20 of 371 episodesEpisode 332 - AI SDLC, Call for Cyber Defense, Rumor as the Exploit
In episode 332, the discussion focuses on how artificial intelligence is reshaping the Software Development Lifecycle (SDLC). The episode an...
Episode 331 - Being "Mythos" Ready, CRLF-Powered De-sync Attacks
Sponsored by Guardsquare (guardsquare.com), Episode 331 focuses heavily on the growing role of AI agents in application security and how org...
Episode 330 - w/ Jeevan Singh - Vulnerability Jail
In this special episode of Absolute AppSec, we cover a topic which started as a solution proposed by Rippling Security's Jeevan Singh: Vulne...
Episode 329 - AI exploitability, IDOR prevention, Smart TV Proxies
In this episode, sponsored by GuardSquare (guardsquare.com), Ken Johnson and Seth Law discuss OpenAI's reported Hugging Face security incide...
Episode 328 - Wordpress RCE, Vuln Prioritization, AI memory exfiltration
In episode 328 of Absolute AppSec, sponsored by GuardSquare (guardsquare.com), Seth and Ken start by highlighting a newly disclosed, pre-aut...
Episode 327 - w/Coffee, Chaos, and ProdSec - ASPM Consolidation, Vuln Prioritization
In episode 327 of Absolute AppSec, co-hosts Ken Johnson and Seth Law present a highly anticipated quarterly crossover episode with Cameron a...
Episode 326 - AppSec Jobs, Benchmarking LLMs, Open Web Standards
In episode 326 of Absolute AppSec, sponsored by mobile application security provider GuardSquare (guardsquare.com), the hosts start with a d...
Episode 325 - Simplified Threat Modeling, Defining A Vulnerability
In episode 325 of Absolute AppSec, co-hosts Ken Johnson and Seth Law first break down an informal guide to threat modeling, arguing that ove...
Episode 324 - Three Week Trap, Malicious Extensions
In episode 324 of Absolute AppSec, co-hosts Ken Johnson and Seth Law share a mix of security model critiques. Starting with industry dynamic...
Episode 323 - Secrets Logs, Prompt Injection Risks
In episode 323 of Absolute AppSec, co-hosts Ken Johnson and Seth Law focus heavily on core application security vulnerabilities, legacy oper...
Episode 322 - Megalodon, Staged Package Publishing, AI Powered Honeypots
In episode 322, the co-hosts examine critical vulnerabilities, changing security standards, and adaptive defense mechanisms. They deep dive...
Episode 321 - The Future of AppSec
In episode 321 of Absolute AppSec, the co-hosts dive into a sprawling discussion about the future of Application Security amid the heavy noi...
Episode 320 - Return of @lojikil - LLM Bug Hunting, AI OffSec, Defender Burnout
Ken is away, so Stefan Edwards (lojikil) joins Seth to talk all things AppSec. This episode starts by exploring the acceleration of AI on th...
Episode 320 - Return of @lojikil - LLM Bug Hunting, AI OffSec, Defender Burnout
Ken is away, so Stefan Edwards (lojikil) joins Seth to talk all things AppSec. This episode starts by exploring the acceleration of AI on th...
Episode 319 - Vercel Breach, Security vs. Compliance, Pull Request Flows w/ AI Agents
Episode 319 covers a range of industry developments, primarily focusing on the recent Vercel security incident and the evolving landscape of...
Episode 319 - Vercel Breach, Security vs. Compliance, Pull Request Flows w/ AI Agents
Episode 319 covers a range of industry developments, primarily focusing on the recent Vercel security incident and the evolving landscape of...
Episode 318 - Slack Impersonation, Mythos, Vulnerability Research Future
Episode 318 examines critical vulnerabilities and the evolving impact of AI on the security industry. The episode details a recent sophistic...
Episode 318 - Slack Impersonation, Mythos, Vulnerability Research Future
Episode 318 examines critical vulnerabilities and the evolving impact of AI on the security industry. The episode details a recent sophistic...
Episode 317 - (Post-RSAC/BSidesSF), Supply Chain Security, Future of SDLC
Ken Johnson and Seth Law reflect on the 2026 RSA Conference and BSidesSF, noting an industry-wide "awakening" regarding the high costs and e...