To celebrate our 404th episode we discuss what's not found in modern appsec and what still exists that should become not found. The conversation starts with a classic problem of appsec -- looking for a reliable vuln prioritization methodology. But we expand from there to challenge whether a focus on vulns and patches is even the right choice for an appsec program. Then it's on to incentives, the role of agents in writing and securing software, and what we should be looking for to bring new appsec practitioners into the industry.
Podden och tillhörande omslagsbild på den här sidan tillhör
Mike Shema. Innehållet i podden är skapat av Mike Shema och inte av,
eller tillsammans med, Poddtoppen.
