security
Related Tags
AI cybersecurity is a cat and mouse game
From the floor of the Ai4 conference, Ryan chats with Sam Curry, CSO at Zscaler, about where human intelligence sits in the new security landscape with AI, why shifting security protections closer to applications helps limit probes for vulnerabilities, and why building more resilient code infrastructure is the best way to address the vulnerabilities AI does discover.
How to build a secure-by-default AI coding agent
From the floor of the Ai4 conference, Ryan chats with Greg Jennings, VP of Engineering for AI Products at Anaconda, about what it takes to build a secure-by-default AI coding agent, why prompts shouldn't be treated as strict security guardrails, and how Anaconda is using strategic acquisitions to secure the AI software supply chain.
You don’t understand DNS like you think you do
Ryan welcomes Cricket Liu, DNS expert and Chief Evangelist at Infoblox, to the show to talk all things DNS. They cover the evolution of one of the oldest DNS server implementations, BIND, and what the future holds for protected DNS configurations; the realities of security threats like DDoS and DNS spoofing; and why outages often trace back to a lack of understanding of DNS’s fundamental role.
AI agents are a confused deputy with the keys to your kingdom
How attackers took twenty thousand Instagram accounts by asking Meta's AI politely, and why that failure is about to become common.
Making the OWASP top ten in the vibe code era
Ryan welcomes back Tanya Janca, now part of the OWASP Top 10 team, to discuss what changed in the latest OWASP Top 10 release, how the list shifted from “outdated components” to a broader software supply chain focus, and why they added memory safety and vibe-coding as awareness items.
The find out stage of AI is just supply chain and password protection
In this two-for-one special recorded at HumanX, Ryan is joined by Dataiku’s Florian Douetteau to chat about the governance, orchestration, and data requirements for serious agentic systems and 1Password’s Nancy Wang for a conversation on making agent swarms secure.
Your fridge could be a threat to national security
On the floor of HumanX, Ryan is joined by Adam Meyers, Senior VP of Counter Adversary Operations at Crowdstrike, for a deep dive on their latest Global Threat Report that tracks over 281 adversaries across nation states, e-crime, and hacktivist organizations.
Prevent agentic identity theft
Ryan is joined by Nancy Wang, CTO of 1Password, to discuss the security challenges local agents present, how enterprises can create robust governance of credentials through zero-knowledge architecture, and the implications of agent intent and misuse in a world where AI agents are becoming more and more integrated into everyday applications.
Multi-stage attacks are the Final Fantasy bosses of security
Ryan welcomes Gee Rittenhouse, VP of Security at AWS, to the show to discuss the complexities of multi-stage attacks in cybersecurity and how these attacks unfold, the challenges in detecting them, and the evolving role of AI in both enhancing security and creating new vulnerabilities.
Defense against uploads: Q&A with OSS file scanner, pompelmi
API and network traffic get all the press, but some folks are still trying to build a better upload scanner.
Automate your security whack-a-mole: Q&A with Exaforce
Security controls can be a bit of a cat and mouse game—you block one attack, new ones spring up.
AI is a crystal ball into your codebase
Ryan is joined by Kayvon Beykpour, CEO and founder of Macroscope, to dive into AI-powered code review’s potential for managing large codebases, the need for humans-in-the-loop for PR reviews so AI tools can efficiently and effectively debug, and how AI can increase visibility through summarization at the abstract syntax tree level and high signal-to-noise ratio code reviews.
Only you can stop AI database drops
Ryan is joined by David Hsu, CEO and founder of Retool, to explore how AI is transforming the role of a software developer into a software architect, the increasing accessibility of coding for non-engineers, and the importance of placing guardrails and higher-level programming primitives on AI coding assistants.
To write secure code, be less gullible than your AI
Ryan is joined by Greg Foster, CTO of Graphite, to explore how much we should trust AI-generated code to be secure, the importance of tooling in ensuring code security whether it’s AI-assisted or not, and the need for context and readability for humans in AI code.
Secure coding in JavaScript
JavaScript is the front-end of the entire internet. Because JavaScript is so prolific, it’s a prime target for attackers.
Context is king for secure, AI-generated code
Ryan sits down with Dimitri Stiliadis, CTO and co-founder of Endor Labs, to talk about how AppSec is evolving to address AI’s use cases. They discuss the implications of AI-generated code on security practices, the importance of human oversight in managing vulnerabilities, and how organizations should be balancing security and efficiency with AI.
Defending the realm: Trust and safety at Stack Overflow
In this special episode, Ryan is joined by our Senior VP of Communities, Philippe Beaudette, and the Trust and Safety team at Stack Overflow to discuss maintaining platform integrity and managing user safety, handling complex issues like harassment, and how their team balances transparency and privacy online.
If an attacker can edit your mobile code, how do you defend your app?
Ryan is joined by Jan Seredynski, Mobile Security Researcher and Pentester at Guardsquare, to talk about how you protect your app when the attackers control the code and the device it runs on.
Without foundational governance, every AI deployment is a liability in disguise: Q&A with Jack Berkowitz of Securiti
Avoiding bad data is just as important in AI; it can open you to fines, lawsuits, and lost customers.
Secure coding beyond just memory safety
Software security expert Tanya Janca, author of Alice and Bob Learn Secure Coding and Staff DevRel at AppSec company Semgrep, joins Ryan to talk about secure coding practices.
Shifting left without slowing down: Q&A with Moti Gindi of Apiiro
Can an org automate security, change its culture to up their dev velocity, and stave off burnout?
In Rust we trust? White House Office urges memory safety
Is your preferred programming language a matter of national security?
“You don’t want to be that person”: What security teams need to understand about developers
The home team is joined by Kinnaird McQuaid, founder and CTO of NightVision, which offers developer-friendly API and web app security testing. Kinnaird talks about his path from school-age hacker to white-hat security expert, why it’s important to build security practices into the software development lifecycle, how GenAI is changing security testing, and what security teams need to understand about developers’ working lives.