All the News - Just Six Months Later - ASW #265

Security Weekly Podcast Network (Audio) · Dec 5, 2023 · 1h 10m

We cover appsec news on a weekly basis, but sometimes that news is merely about the start of a new project, sometimes it's yet another example of a vuln class, and sometimes it's a topic we hope doesn't become a trend.

So, what themes have we seen and where do we see them going? Here are a few headline topics that have alternately generated yays and yawns.

CISA's Secure by Design and Secure by Default

CVSS 4.0

Generative AI

MFA mandates

Microsoft, Rust, and Memory Safety

New TLDs

OAuth

OpenSSF and OWASP

In the news, repetition extracts data from ChatGPT, more vulns in the software that…