Typosquatting NPM, vulnerability analysis, and AI challenges - ASW

Typosquatting NPM, vulnerability analysis, and AI challenges - ASW #307

Listen now

Description

This week, in the Application Security News, we spend a lot of time on some recent vulnerabilities. We take this opportunity to talk about how to determine whether or not a vulnerability is worth a critical response. Can AI fully automate DevSecOps Governance? Adrian has his reservations, but JLK is bullish. Is it bad that 70% of DevSecOps professionals don't know if code is AI generated or not? All that and more on this week's news segment. Show Notes: https://securityweekly.com/asw-307

More Episodes

See all »

AI messes with scammers, autonomous endpoint security, malware targets Excel - ESW #385

In the enterprise security news, Bitsight, Snyk, and Silverfort announce acquisitions Tanium announces an “autonomous” endpoint security offering We find out how much a smartphone costs when it is manufactured in the US CISA’s leadership announces resignations Ransomware is going after old...

Published 11/23/24

Security Weekly Podcast Network (Video)

Published 11/23/24

All the biggest cybersecurity news out of Microsoft Ignite 2024 - ESW #385

Why a special segment on Microsoft Ignite announcements? There were a lot of announcements Microsoft is the largest security vendor, in terms of revenue Microsoft and its products are also the biggest and most vulnerable hacking target in the tech industry. Show Notes:...

Published 11/22/24