AppSec Now

AppSec Now is a podcast aimed at delivering the top stories from the latest (mosttly application) security news and interesting guests from the application security community.

AppSec Now is a technology podcast hosted by DevCentral, with 41 episodes on record and a Required Pod Score of 80. PitchCentric scores this show on Booking Probability, Listen Score, and live audience signals refreshed every 24 hours.

DevCentral hosts AppSec Now, a technology show with 41 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #35

  Tackling CVE Chaos, Parquet Tool Insights, and EU Cyber Resilience Act Unpacked

  Apr 28, 202531 minS0

  <p>🔒 Welcome to this week’s episode of AppSecNow, the DevCentral podcast dedicated to all things application security! 🚨 This week, we unpack critical updates including:</p><p><br>💥 A zero-day SAP CVE with a CVSS score of 10—what it means, how it's being exploited, and what you can do to defend against it.<br>🛠️ A groundbreaking Parquet tool from F5 Labs that simplifies vulnerability testing for critical supply chain security issues.</p><p>Link: https://github.com/F5-Labs/parquet-canary-exploit-rce-poc-CVE-2025-30065<br>🌍 The EU Cyber Resilience Act—what it means for manufacturers, open-source stewards, and secure-by-design initiatives.</p><p>Learn how AppSec professional...

  ListenShow Notes
• 

  Episode #34

  EV Car Hacking, AI-Generated Passports, & Japan’s Active Cyber Defense Bill

  Apr 21, 202536 minS0

  <p>Join Merlyn Chase, MegaZone, and Aubrey on this week’s AppSec Now podcast as they dive into the latest topics in application security! 🚀 From the recent B-Sides Seattle conference to critical discussions on EV car hacking, cybersecurity quandaries, AI-generated passports bypassing KYC, and Japan’s groundbreaking Active Cyber Defense Bill—you don’t want to miss this one. Plus, learn how AppSecNow is keeping you ahead with insights by F5 Labs and the F5 Security Incident Response Team.Stay informed, stay secure—like, subscribe, and follow for all things AppSec!00:00 Introduction03:10 EV Car Hacking12:25 AI Generated Passports21:35 LLMs Do Not Trust Hum...

  ListenShow Notes
• 

  Episode #33

  Amazon EC2 SSRF Breach, Oracle Cloud Breach & Malicious NPM Packages Exposed

  Apr 14, 202535 minS0

  <p>Join our AppSec experts—Merlyn, Malcolm, MegaZone, and host Chase Abbott—as they dig into some of the latest stories shaking up the cybersecurity world. This week's AppSec Now explores an active campaign targeting Amazon EC2 instance metadata via SSRF vulnerabilities, and why that's a wider-reaching problem than you might think. We discuss Oracle's controversial handling of their cloud breach and the impact of trust in the disclosure process. </p><p>Also in the mix: malicious NPM packages deployed by North Korean hackers, a sneaky Golang malware employing "click-fix" tactics for crypto theft, and a critical Apache Parquet remote code...

  ListenShow Notes
• 

  Episode #32

  NGINX Kubernetes IngressNightmare, Critical Next.js CVE, Chrome Zero Day - Ep.32

  Apr 7, 202531 minS0

  <p>Dive into the latest episode of AppSecNow, where we break down the Ingress Nightmare vulnerability impacting NGINX and Kubernetes environments, plus the implications of a critical CVE in Next.js, one of the most widely-used JavaScript frameworks with 9 million weekly downloads.</p><p>Join Aubrey, Chase, and Merlyn for expert analysis on the security landscape, from Chromium Zero Day concerns to ransomware gangs getting pwned. Stay informed on the front lines of application security with actionable advice from DevCentral's experts.</p>00:00 Introduction01:45 IngressNightmare08:39 Next.js Critical CVE12:07 Chrome Zero Day16:22 New Agents For Security Copilot24:57 HaveIBeenPwned Mail List Leak27:10...

  ListenShow Notes
• 

  Episode #31

  Vibe Coding, F5 Labs Bot Report, Google Buys Wiz And More | AppSec Now Ep 31

  Mar 31, 202545 minS0

  <p>Welcome to the 31st episode of AppSec Now! This week, our hosts Aubrey, David Warburton, Chase Abbott, and MegaZone get into some hot topics in the world of application security. Our focus is on the latest F5 Labs Advanced Persistent Bots report, highlighting the ever-evolving landscape of bot attacks and the importance of robust mitigation strategies. We analyze Google's hefty $32 million acquisition of Wiz, exploring what this move means for the tech giant's security posture and its potential impact on the cloud security market.We also tackle the sensitive topic of personal data with a focus on 23andMe's bankruptcy...

  ListenShow Notes

Recent guests on AppSec Now. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.