Episodes: 417
Frequency: Weekly
Rating: 4.9/5.0
Estimated listeners: 100 - 1,000
Gender skew: Male
Listener location: USA
Publicly listed emails
sw_production@cyberriskalliance.com
Looking for the right person? Join Podseeker to find direct host and producer contacts and manage your podcast outreach.
Mike Shema - Application security expert focused on software flaws, secure development, DevOps, and DevSecOps.
John Kinsella - Cybersecurity practitioner focused on application security, software vulnerabilities, DevOps, and DevSecOps.
Ramin Farassat - Securing AI Agents Against Prompt Injection, Agent Attack Surfaces, Connectors, Integrations, And Runtime Security Controls.
Chris Wallis - Ai-enabled Penetration Testing, Automated Vulnerability Scanning, And Security Testing For Mid-market Teams.
Sai Kiran Uppu - Using Agents And Large Language Models For Threat-intelligence Analysis, Security Triage, Developer Engagement, And Proactive Defense.
Rishi Sharma - Using Llms For Vulnerability Discovery, Ai-assisted Code Review, Penetration Testing, And Delivering Secure Software.
Keith Hoodlet - Prompting Llms To Fix Vulnerabilities, Patch Correctness, Software Behavior Changes, And Vulnerabilities Introduced By Automated Patches.
Getting Granular with Access, Attributes, and Intent - Alex Olivier - ASW #403
October 06, 2026
The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined and correct access policies. It's a problem that predates LLMs, but also one that agents and MCPs made all the more acute. We talk about what intent means when trying to constrain agents' activities...
Going From Bug Bounty Bugs to More Secure Systems - Shlomie Liberow - ASW #402
September 29, 2026
Finding flaws with LLMs and agents is changing bug bounty programs. But it's not necessarily changing how orgs fix those flaws. Shlomie Liberow shares his experience across a decade of bounty programs and how they have changed for researchers and orgs. He explains why fixing the bug reported through a bug bounty is more about understanding interconnected systems than fixing a single piece of software. We discuss how orgs can be more effective at securing their environment and what role LLMs m...
Understanding Prompt Injection In Order to Contain It - Julie Brunias - ASW #401
September 22, 2026
Prompt injection demonstrates one of the major challenges in securing LLMs and agents -- how do you ensure an agent ignores attackers and only does what you instructed it to do. The flaw highlights how LLMs mix inputs, context, and outputs without any strict boundaries between them. Julie Brunias joins us to talk through examples of injections, why their consequences can go beyond information leaks, and why trying to mitigate them with other LLMs is insufficient. Segment resources: https://l...
Application Security Weekly (Audio) is hosted by Mike Shema and John Kinsella. Its publicly listed email is sw_production@cyberriskalliance.com. For guest bookings, the host or producer is usually the best person to reach. Podseeker helps you find direct host and producer contacts and pitch from your own inbox.
The publicly listed email for Application Security Weekly (Audio): sw_production@cyberriskalliance.com.
Podseeker estimates Application Security Weekly (Audio) reaches 100 to 1,000 listeners per episode. Only the publisher has exact numbers.
Application Security Weekly (Audio) typically books industry leaders. Typical guest background: Application-security or cybersecurity expertise, original security research, experience building security tools or products, leadership of an open-source or industry project, or deep practical experience in vulnerability discovery, penetration testing, AI security, or secure software development. Common among recent guests: Published security research; Built or led a cybersecurity product; Created security tools or open-source projects. Recent guests include Ramin Farassat, Chris Wallis, and Sai Kiran Uppu.
Medium. Guests usually need solid credentials in the topic and an idea that fits the show.
Recent episodes cover Application Security, Devsecops, Cybersecurity, Software Security, and Penetration Testing. Pitch an idea tied to one of these topics and mention a recent episode.
Publicly listed emails
sw_production@cyberriskalliance.com
Looking for the right person? Join Podseeker to find direct host and producer contacts and manage your podcast outreach.
Try us risk free with a FREE 3 days trial.
Join hundreds of PR teams using Podseeker to pitch and land bookings