Best Paul Fagan Podcasts (2024)

1
Carol Mithers rethinks rescue with L.A.'s "Dog Lady" 26:50

3h ago26:50

26:50

Los Angeles author Carol Mithers discusses her new book, "Rethinking Rescue," which explores a groundbreaking approach to animal welfare pioneered by Lori Weise, the founder of L.A.’s Downtown Dog Rescue. Known as the "Dog Lady," Weiss focuses on preventing pets from entering shelters by addressing the root causes of surrender, particularly in unde…

1
Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW Vault 37:48

8h ago37:48

37:48

Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on May 9, 2023. What does software resilience mean? Why is status quo application security unfit for the modern era of software? How can we move from security theater to security chaos engineering? This segment answers these quest…

1
Patt Morrison takes the pulse of Los Angeles 41:55

2h ago41:55

41:55

Patt Morrison, a veteran Los Angeles journalist and Pulitzer Prize winner, takes us on a journey through the city's ever-evolving landscape. With over five decades of experience chronicling L.A. across print, television, and radio, Morrison shares unique insights into the city's transformation, from its complex power structures to its diverse commu…

1
Episode 87: Can ‘Advertising’ Do Good? Exploring a data-driven way to do good and align ESG - The Goodnet 35:16

2h ago35:16

35:16

In the final episode of our ‘greening your marketing activity’ mini-series, we caught up with some of our original guests to the podcast, Ollie Deane and Guy Jones from The GoodNet, the ethical intelligence company, focusing on helping ethical brands and products grow. The Goodnet firmly believe that advertising can do good in the world and, we agr…

1
Apache HTTPD Vulns, Hacking IoT Speakers, Use Cases for WASM, Slack AI Leak - ASW #297 27:08

3h ago27:08

27:08

Research by Orange Tsai into Apache HTTPD's architecture reveals several vulns, NCC Group shows techniques for hacking IoT devices with Sonos speakers, finding use cases for WebAssembly, Slack's AI leaks data, DARPA wants a future of Rust, and more! Show Notes: https://securityweekly.com/asw-297

1
Changing the Course of IoT's Future from Its Insecure Past - Paddy Harrington - ASW #297 37:21

8h ago37:21

37:21

IoT devices are notorious for weak designs, insecure implementations, and a lifecycle that mostly ignores patching. We look at external factors that might lead to change, like the FCC's cybersecurity labeling for IoT. We explore the constraints that often influence poor security on these devices, whether those constraints are as consequential given…

1
121 - Karuna Rawal on How Nature’s Fynd Marketed NASA’s Incredible Yellowstone Fungus 1:10:35

13d ago1:10:35

1:10:35

Karuna, an entrepreneurial brand builder, shares her journey with Nature’s Fynd, a company that developed a new protein source from a unique fungus discovered in Yellowstone National Park.1. From Outer Space to Your Plate: The Unlikely Origin of Nature’s FyndNature’s Fynd’s story began with a NASA research project aimed at understanding how life co…

1
Roger BelAir and Dan Ostroff on pickleball in prison 34:05

4d ago34:05

34:05

Roger BelAir and Dan Ostroff are bringing hope to California's toughest prisons through an unlikely source: pickleball. Their upcoming documentary, "Pickleball in Prison," explores how the simple paddle sport is transforming life behind bars, bridging gaps between inmates and staff, and fostering teamwork in high-security environments. From San Que…

1
Navigating the Path to Maturity & AI is helping combat cyber threats - Shimon Modi, Boaz Barzel - ASW #296 39:21

15d ago39:21

39:21

As development cycles shorten and more responsibilities shift to developers, application security (AppSec) is rapidly evolving. Organizations are increasingly building mature programs that automate and enhance AppSec, moving beyond manual processes. In this discussion, we explore how organizations are adapting their AppSec practices, highlighting t…

1
The Fallout and Lessons Learned from the CrowdStrike Fiasco - Allie Mellen, Jeff Pollard - ASW #296 42:38

17d ago42:38

42:38

This week, Jeff Pollard and Allie Mellen join us to discuss the fallout and lessons learned from the CrowdStrike fiasco. They explore the reasons behind running in the kernel, the challenges of software quality, and the distinction between a security incident and an IT incident. They also touch on the need to reduce the attack surface and the impor…

1
Episode 86: Can ‘Events’ be Sustainable? with Matilde Riley, Sustainability Consultant at From Now 32:11

14d ago32:11

32:11

“When it comes to including sustainability in events - we’re finding the focus on sustainability is increasingly part of the client brief.” As we continue with our greening your marketing activity mini-series, we wanted to turn our attention to events. Events can be fun, they allow us to learn and connect, but they also come with a considerable foo…

1
Reducing Supply Chain Risk & What’s lurking in your phone? - Danny Jenkins, Nikos Kiourtis - ASW #295 34:30

20d ago34:30

34:30

In complex software ecosystems, individual application risks are compounded. When it comes to mitigating supply chain risk, identifying backdoors or unintended vulnerabilities that can be exploited in your environment is just as critical as staying current with the latest hacking intel. Understand how to spot and reduce the risk to your environment…

1
When Appsec Needs to Start Small - Kalyani Pawar - ASW #295 34:22

4h ago34:22

34:22

Startups and small orgs don't have the luxury of massive budgets and large teams. How do you choose an appsec approach that complements a startup's needs while keeping it secure. Kalyani Pawar shares her experience at different ends of an appsec maturity spectrum. Show Notes: https://securityweekly.com/asw-295…

1
Zoë Bernard on El Segundo's hard tech patriots 20:00

19d ago20:00

20:00

Zoë Bernard's recent story in Vanity Fair looks at El Segundo, California's emerging tech scene, where young entrepreneurs are rejecting Silicon Valley's software focus in favor of hard tech and defense tech. These predominantly male founders emphasize bro culture, patriotism, religion, and traditional values while developing drones, nuclear reacto…

1
Dead Code, CrowdStrike's Kernel Lessons, VMs & Security Boundaries, SLUBStick Attack - ASW #294 33:55

29d ago33:55

33:55

The code curation considerations of removing abandoned protocols in OpenSSL, kernel driver lessons from CrowdStrike's crash, choosing isolation primitives, cross-cache attacks made possible by SLUBStick, and more! Show Notes: https://securityweekly.com/asw-294

1
Building Successful Security Champions Programs - Marisa Fagan - ASW #294 36:24

1M ago36:24

36:24

Even though Security Champions programs look very different across organizations and maturity levels, they share core principles for becoming successful. Marisa shares her experience in building these programs to foster a positive security culture within companies. She explains the incentives and rewards that lead to more engagement from champions …

1
Kevin Fagan on the front lines of California's homelessness crisis 31:38

12d ago31:38

31:38

Kevin Fagan, a veteran San Francisco Chronicle reporter, discusses the state's evolving homelessness crisis. After the Supreme Court's recent Grants Pass decision, cities are taking more aggressive action on encampment sweeps. Fagan explores these sweeps, the state of homelessness, and the political implications as elections approach. With decades …

1
Episode 85: Purpose driven digital - optimising your web presence with Sepas Seraj, Founder - Pixeled Eggs 32:53

1M ago32:53

32:53

“There's something like 7.5 million data centers around the world now, and most of them are still powered by coal and gas. One of the easiest things you can do is move your hosting.” Welcome back to the second part in our mini-series on ‘greening your marketing activities’ and this episode we explored smarter, greener websites with Sepas Seraj, Fou…

1
A CISO's Perspective on AI, Appsec, and Changing Behaviors - Paul Davis - ASW #293 45:18

1M ago45:18

45:18

Modern appsec isn't modern because security tools got shifted in one direction or another, or because teams are finding and fixing more vulns. It's modern because appsec is meeting developer needs and supporting the business. Paul Davis talks about how AI is (and isn't) changing appsec, the KPIs that reflect outcomes rather than being busy, and the…

1
Caroline Paul on empowerment through outdoor adventure 26:33

26d ago26:33

26:33

Caroline Paul's youthful adventures began as one of the first women to join the San Francisco Fire Department back in 1989, a story she recounts in her bestselling memoir, "Fighting Fire." In her latest book, "Tough Broad: From Boogie Boarding to Wing Walking — How Outdoor Adventure Improves Our Lives as We Age," Paul demonstrates how a lifelong re…

1
SAPwned, Squarespace Domain Hijacks, AIs Fixing Code, Infosec Investments - ASW #292 28:57

1M ago28:57

28:57

SAPwned demonstrates tenets of tenant isolation, a weak login flow puts Squarespace domains at risk, how AIs might (or might not) be useful for fixing code, getting buy-in for infosec investments, and more! Show Notes: https://securityweekly.com/asw-292

1
Where Generative AI Can Actually Help Security (And Where It Doesn't) - Allie Mellen, Farshad Abasi - ASW #292 36:04

1M ago36:04

36:04

Generative AI has produced impressive chatbots and content generation, but however fun or impressive those might be, they don't always translate to value for appsec. Allie brings some realistic expectations to how genAI is used by attackers and can be useful to defenders. Segment resources: https://www.forrester.com/blogs/generative-ai-will-not-ful…

1
Episode 84: Considering the Carbon Impact of Email Marketing with James Gill, Founder at Ecosend 38:58

1M ago38:58

38:58

Have you ever considered the carbon footprint of your email activity? Welcome to the first in our ‘greening your marketing activity’ mini-series! Did you know that your digital activity has a carbon footprint? Are you aware that there are better choices you can make which mean your marketing activity is greener and more sustainable, without comprom…

1
A 2024 Appsec Report, Preparing for the AIxCC, Secure Design and Post-Quantum Crypto - ASW #291 35:58

2M ago35:58

35:58

Cloudflare's 2024 appsec report, reasoning about the Cyber Reasoning Systems for the upcoming AIxCC semifinals at DEF CON, lessons in secure design from post-quantum cryptography, and more! Show Notes: https://securityweekly.com/asw-291

1
Producing Secure Code by Leveraging AI - Stuart McClure - ASW #291 33:06

2M ago33:06

33:06

How can LLMs be valuable to developers as an assistant in finding and fixing insecure code? There are a lot of implications in trusting AI or LLMs to not only find vulns, but in producing code that fixes an underlying problem without changing an app's intended behavior. Stuart McClure explains how combining LLMs with agents and RAGs helps make AI-i…

1
120 - Dr. Paul Zak on Immersion Playbook for Customer Transformation - Attention to Impact 50:41

2M ago50:41

50:41

Dr. Zak shares his findings on how immersion can be used to create better ads, improve training and education, and even enhance personal well-being. Dr. Paul J. Zak is a Professor of economics, psychology and management at Claremont Graduate University. His newest book is Immersion: The Science of the Extraordinary and Source of Happiness. Highligh…

1
Sara Fenske Bahat navigates art, protests, and politics 47:56

1M ago47:56

47:56

Sara Fenske Bahat, the former interim chief executive of San Francisco's Yerba Buena Center for the Arts, explores the interplay between art, politics, and institutional responsibility. Bahat, who is Jewish, explains the museum's mission and history leading up to a crisis in February involving pro-Palestinian protests, questions of free speech, and…

1
State Of Application Security 2024 - Sandy Carielli, Janet Worthington - ASW #290 38:12

2M ago38:12

38:12

Sandy Carielli and Janet Worthington, authors of the State Of Application Security 2024 report, join us to discuss their findings on trends this year! Old vulns, more bots, and more targeted supply chain attacks -- we should be better at this by now. We talk about where secure design fits into all this why appsec needs to accelerate to ludicrous sp…

1
Polyfill Empties Trust, regreSSHion, CocoaPods Vulns & Secure Design, LLM Bughunters - ASW #290 34:30

2M ago34:30

34:30

Polyfill loses trust after CDN misuse, an OpenSSH flaw reappears, how to talk about secure design from some old CocoaPods vulns, using LLMs to find bugs, Burp Proxy gets more investment, and more! Show Notes: https://securityweekly.com/asw-290

1
Episode 83: The Ocean Begins in your Home, with Adam Parker, Re-Founder and CMO, OceanSaver 30:34

2M ago30:34

30:34

Every other breath you take comes from the ocean … How much thought do you give to the products you use to clean your home? We recently took a metaphorical deep dive with Amanda Horn into her love of the ocean as part of World Ocean Day and Ocean Week (in Canada), and how important the ocean and water is to our lives. Following our chat with Amanda…

1
José Vadi on skateboarding at the edge of culture and creativity 28:15

2M ago28:15

28:15

José Vadi, author of "Chipped: Writing from a Skateboarder's Lens," explores skateboarding as a unique window into California culture, both northern and southern. He discusses how skating serves as a form of self-empowerment and artistic expression, intertwining with music and writing. Vadi examines skateboarding's evolution from a rebellious subcu…

1
Shared Responsibility Models, AI in Offensive Security, Apple's Private Cloud Compute - ASW #289 24:10

2M ago24:10

24:10

Thoughts on shared responsibility models after the Snowflake credential attacks, looking at AI's current and future role in offensive security, secure by design lessons from Apple's Private Cloud Computer, and more! Show Notes: https://securityweekly.com/asw-289

1
OAuth 2.0 from Protecting APIs to Supporting Authorization & Authentication - Aaron Parecki - ASW #289 37:01

2M ago37:01

37:01

OAuth 2.0 is more than just a single spec and it's used to protect more than just APIs. We talk about challenges in maintaining a spec over a decade of changing technologies and new threat models. Not only can OAuth be challenging to secure by default, but it's not even always inter-operable. Segment Resources: https://oauth.net/2.1 https://oauth.n…

Podcasts Worth a Listen

Paul Fagan Podcasts

Podcasts Worth a Listen

Quick Reference Guide