Applications are the most preferred vectors for cybercriminals. Yet no single team or process can assure the rollout of safe cloud applications. From code design to unit testing to deployment, teams and tools have to work together to detect risks early while keeping the pipeline of digital products moving.   Alex Rice, CTO at HackerOne and Johnathan Hunt, VP of Security at GitLab, help development teams evolve their processes to build security directly into their workflows for smooth and safe cloud app rollouts.  They dropped by the Threatpost podcast recently to share tips on DevSecOps, including:   How to build a continual testing, monitoring, and feedback processes to drive down application risk. Developing a continuous approach to application security and DevOps security tools. Why collaboration and continual feedback is essential across development, cloud and security teams.   …as well as how to deal with the boatload of animosity between development and security teams. One tip: Assume positive intent!

The Threatpost Podcast

Killing Cloud Risk by Bulletproofing App Security: Podcast

Threatpost editor Lindsey O'Donnell discusses security threats, attacks, vulnerability research and trends with a variety of industry executives, researchers and experts.

Former FBI Gumshoe Nabs Cybercrooks Using Proven Behavioral Clues

Threatpost podcast: Cybereason CTO Yonatan Striem-Amit shares details about the company's vaccine: a fast shot in the arm released within hours of the Apache Log4j zero-day horror show having been disclosed.

How to Buy Precious Patching Time as Log4j Exploits Fly

Attackers Will Flock to Crypto Wallets, Linux in 2022: Podcast

Podcast: Could the Zoho Flaw Trigger the Next SolarWinds?

Podcast: 67% of Orgs Have Been Hit by Ransomware at Least Once

Imperva’s Peter Klimek visited Threatpost podcast to discuss the evolution of DDoS attacks: They started out as inconveniences but evolved to the point where attackers can disrupt businesses for as little as the price of a cup of coffee,

DDoS Attacks Are a Flourishing Business for Cybercrooks – Podcast

Imperva's Elad Erez discusses findings that 46% of on-prem databases are sitting ducks, unpatched and vulnerable to attack, each with an average of 26 flaws.

Databases Pockmarked With an Average of 26 Vulnerabilities Globally – Podcast

Bryce Webster-Jacobsen – director of intelligence operations at digital risk protection/ransomware negotiators GroupSense – dropped by the Threatpost podcast to tell us what percentage of Ragnar Locker’s warning that victims shouldn't call the FBI/police/negotiators is a bluff and what, if anything, security teams should take seriously. 

What Ragnar Locker Got Wrong About Ransomware Negotiators – Podcast

Verizon DBIR Marries MITRE ATT&CK – Podcast

‘Pay Ransom’ Screen=Too Late, Humpty Dumpty – Podcast

Podcast: Ransomware Up x10; Telecoms Uber Walloped

Interos CEO Jennifer Bisceglie drops by the Threatpost podcast to talk about avoiding the mess a T-Mobile size breach can lead to, with the damage it can do to a business's brand, reputation, customer loyalty and revenue stream. 

What’s Next for T-Mobile and Its Customers? – Podcast

Trillions of dollars in notional value are controlled by hedge funds and private equity firms, many of which have no cybersecurity protection to speak of. The calamitous, widespread SolarWinds attacks was a wakeup call: Another attack of that ilk could lead to the next 2008-esque financial meltdown. Agio CEO Bart McDonough says AI-enabled service platform could maybe, just maybe, help avert it.

SolarWinds 2.0 Could Set Off the Next Financial Crisis – Podcast

FuzzCon panelists Damilare D. Fagbemi of Resilience Software Security and Anmol Misra of Autodesk say join the party as they share fuzzing wins & fuzzing fails when building a security testing program

Fuzz Off: How to Shake Up Code to Get It Right – Podcast

Threatpost writers Mike Mimoso and Chris Brook discuss security threats, attacks, vulnerability research and trends with a variety of industry executives, researchers and experts.

hubhopper

The Threatpost Podcast

hubhopper