DevelopSec: Developing Security Awareness

Jardine Software Inc.

Curious about application security? Want to learn how to detect security vulnerabilities and protect your application. We discuss different topics and provide valuable insights into the world of application security.

  1. -5 J

    Ep. 128: OWASP Top 10 2025

    In this episode James gives an overview of the new OWASP Top 10 2025. He shares some insights into the history, changes, and additional thoughts on the top 10.  Do you have any thoughts on the OWASP Top 10? Let us know.  References: Medium article of history of top 10 - https://medium.com/@dramkumar/history-of-all-owasp-top-10-over-the-years-9470c0adf43d OWASP Top 10 2025 - https://owasp.org/Top10/2025/ Top 10 -> CWE Breakdown - https://drive.google.com/file/d/1SmzWyg_ar1PaMFT0FxYelEAJuGMA690B/view?usp=sharing Send us a text For more info go to https://www.developsec.com or follow us on X (@developsec). The DevelopSec podcast is brought to you by Jardine Software Inc.

    31 min

  2. 14 JANV.

    Ep. 127: Importance of Terminology

    In this episode, James talks about the difference between end-to-end encryption and the standard encryption in transit most web applications implement. There is an interesting story (referenced below) that was using end-to-end encryption outside of the standard understanding.  Check out what the differences are and what you can do to make sure you are thinking about how terms are used. References: Link to Article: https://www.esecurityplanet.com/threats/kohlers-smart-toilet-camera-isnt-actually-end-to-end-encrypted/ Send us a text For more info go to https://www.developsec.com or follow us on X (@developsec). The DevelopSec podcast is brought to you by Jardine Software Inc.

    13 min

  3. 6 JANV.

    Ep. 126: Avoiding Panic and Misunderstandings with Proper Authentication Failure Reporting

    Have you ever felt that feeling of thinking your account has been compromised?  It can be a scary feeling. But what about when it didn't really happen? Instead it was just confusing messaging.    That is what I talk about in this episode. The importance of proper messaging in the right context. Even the smallest thing can turn out to be a larger issue. References: Link to Article: https://www.bleepingcomputer.com/news/security/coinbase-to-fix-2fa-account-activity-entry-freaking-out-users/ Send us a text For more info go to https://www.developsec.com or follow us on X (@developsec). The DevelopSec podcast is brought to you by Jardine Software Inc.

    16 min

  4. 31/12/2025

    Ep. 125: From Flat Tires to AppSec: The Power of Tools and Process

    In this episode, James shares a story about fixing a flat tire on an E-Scooter and how it relates to security. He shows how the combination of tools, process, and knowledge can lead to a successful outcome. Can you be successful without all three components? Maybe, but it might be more effort that is needed. Tune in to learn how these 3 components work together to create efficient solutions. Send us a text For more info go to https://www.developsec.com or follow us on X (@developsec). The DevelopSec podcast is brought to you by Jardine Software Inc.

    21 min

  5. 24/02/2025

    Ep. 124: Double-ClickJacking

    In this episode, I go over what Double-ClickJacking is and what you can potentially do about it to reduce the risk to your applications.  Will this be the new finding on everyone's pen tests this year? Paulos Yibelo first described Double-ClickJacking and you can read more from him at his post referenced below. References: Paulos Yibelo Blog: https://www.paulosyibelo.com/2024/12/doubleclickjacking-what.html Send us a text For more info go to https://www.developsec.com or follow us on X (@developsec). The DevelopSec podcast is brought to you by Jardine Software Inc.

    21 min

  6. 18/02/2025

    Ep. 123: Goals of Security Culture - Sort of?

    In this episode, I talk about how security is a part of everyone's role and the labeling of "Security Culture". I share some ideas on how to improve on role based security awareness and building stronger relationships between security and the rest of the organization. For more info go to https://www.developsec.com or follow us on X (@developsec). Send us a text For more info go to https://www.developsec.com or follow us on X (@developsec). The DevelopSec podcast is brought to you by Jardine Software Inc.

    8 min

  7. 10/02/2025

    Ep. 122: Integrating Security Responsibilities into Development

    In this episode I talk about assigning responsibility for secure development and how the dev and security teams should be working together to accomplish a common goal.  I also discuss the importance of updating developer job descriptions and creating an expectation around developers having secure development experience. For more info go to https://www.developsec.com or follow us on X (@developsec). Send us a text For more info go to https://www.developsec.com or follow us on X (@developsec). The DevelopSec podcast is brought to you by Jardine Software Inc.

    18 min
  8. Ep. 121 - Evolving Ransomware: Unique Tactics for Payment

    07/05/2024

    Ep. 121 - Evolving Ransomware: Unique Tactics for Payment

    In this episode I talk about the evolving world of ransomware. I discuss a few examples of unique tactics the malicious actors are using to put pressure on organizations to pay the ransom.     Referenced Articles:  https://www.theregister.com/AMP/2024/04/30/finnish_psychotherapy_center_crook_sentenced/  https://www.darkreading.com/cyber-risk/hackers-weaponize-sec-disclosure-rules-against-corporate-targets  https://www.theregister.com/2024/01/05/swatting_extorion_tactics/     For more info go to https://www.developsec.com or follow us on X (@developsec).     DevelopSec provides application security consulting and training to add value to your application security program. Contact us today to see how we can help. Send us a text For more info go to https://www.developsec.com or follow us on X (@developsec). The DevelopSec podcast is brought to you by Jardine Software Inc.

    18 min
Tout afficher (132)

Notes et avis

4
sur 5
3 notes

À propos

Curious about application security? Want to learn how to detect security vulnerabilities and protect your application. We discuss different topics and provide valuable insights into the world of application security.

Informations