Season 2: Training & Awareness

Episode 2: Developer Security Training - Beyond Annual Compliance

In our last episode, we talked about building an effective Security Champions program. Today, we're tackling something even bigger: How to make security training actually work for developers.

Season 2: Training & Awareness

Episode 1: Building a Security Champions Program That Actually Works

In this episode we'll talk about the most important security program you're not running correctly: The Security Champions program.

Intro to Season 2 of AppSec Unlocked

Welcome to Season 2 where we're diving into something critical that often gets overlooked in the world of cybersecurity: Training and Awareness.

Season 1: Open Source Security

Episode 11: Help! There’s too many Vulnerabilities! A Practical Guide to Tackling Open-Source Security

Season 1: Open Source Security

Episode 10: A FAIR Approach to Vulnerability Patch Prioritization

In this episode of AppSec Unlocked, we dive into the fascinating topic of using a FAIR approach to Vulnerability Patch prioritization, where we explore how organizations can better prioritize vulnerabilities in their open-source software using the FAIR model and EPSS. And we have Denny Wan, an expert on FAIR analysis sharing his insights on this innovative approach.

Season 1: Open Source Security Episode 9: Open-Source Vulnerability Management Policy: A Balanced Approach

In today's rapidly evolving cybersecurity landscape, managing vulnerabilities in open-source components has become increasingly complex. While traditional approaches relying solely on CVSS scores have their merits, they may not be sufficient to address the exponential growth in discovered vulnerabilities. A more nuanced and scalable approach is needed, one that considers not only severity but also exploitability and potential impact.

Season 1: Open Source Security Episode 8: A Cautionary Tale on Supply Chain Attacks: My Recent Encounter with a Compromised NPM Library

This is a rebroadcast from the CyberBites podcast as it is related to application security and open source supply chain.

Season 1: Open Source Security Episode 7: Introduction to StakeholderSpecific Vulnerability Categorization (SSVC)

Introduction to a transformative risk-based approach to vulnerability management

• Why SSVC, especially when we already have CVSS
• How SSVC works and how to use it
• Challenges and considerations
• Real-world example