Cross-site Scripting, DevOps, OAuth 2.0, GitLab Packages, and more

Security Journey's hi/5

Content provided by Security Journey. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Security Journey or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

3+ y ago 6:59

MP3•Episode home

Archived series ("Inactive feed" status)

When? This feed was archived on January 06, 2023 10:52 (1+ y ago). Last successful fetch was on August 31, 2022 14:09 (2y ago)

Why? Inactive feed status. Our servers were unable to retrieve a valid podcast feed for a sustained period.

What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.

1. Cross-site scripting (XSS) cheat sheet
Learn XSS at a depth that you can explain it to anyone, and understand the diversity of attack that exists across the set of XSS vectors.
2. Why DevOps Will Cease to Exist
Just like DevOps is integrated into every developer’s job, so is security.
3. OAuth 2.0 Threat Model Pentesting Checklist

OAuth 2.0 is used everywhere, and many developers and security people aren’t aware of the depth of threat that exists.
4. A deep dive into how we investigate and secure GitLab packages
Solving the software supply chain security issues requires a coordinated and organizationally wide approach.
5. Modern Static Analysis: how the best tools empower creativity
If you haven’t evaluated semgrep as a tool for inclusion in your application security program, it’s time.

43 episodes

#Tech #Security Journeys #Application Security #Security News