Rephonic
Artwork for Application Security Weekly

Application Security Weekly (Audio)

Mike Shema
Application Security
Cybersecurity
Generative AI
Devops
Open Source Software
Threat Modeling
Llms
Vulnerability Management
Zero Trust
Artificial Intelligence
Software Development
Supply Chain Security
Software Supply Chain Security
OWASP Genai Security Project
Large Language Models
Appsec
Cloud Security
Bug Bounty Programs
Vulnerabilities
API Security

About all things AppSec, DevOps, and DevSecOps. Hosted by Mike Shema and John Kinsella, the podcast focuses on helping its audience find and fix software flaws effectively.

PublishesWeeklyEpisodes417Founded9 years ago
Number of ListenersCategories
TechnologyNewsTech News

Listen to this Podcast

Artwork for Application Security Weekly

Latest Episodes

The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to m... more

Finding flaws with LLMs and agents is changing bug bounty programs. But it's not necessarily changing how orgs fix those flaws. Shlomie Liberow shares his experience across a decade of bounty programs and how they have changed for researchers and org... more

Prompt injection demonstrates one of the major challenges in securing LLMs and agents -- how do you ensure an agent ignores attackers and only does what you instructed it to do. The flaw highlights how LLMs mix inputs, context, and outputs without an... more

While agents and LLMs haven't fundamentally changed core mobile vulnerability types, they have supercharged speed, scale, and accessibility—democratizing threats like automated phishing, synthetic identity fraud, and easier identification of hard-cod... more

Key Facts

Accepts Guests
Accepts Sponsors
Contact Information
Podcast Host
Number of Listeners
Find out how many people listen to this podcast per episode and each month.

Similar Podcasts

People also subscribe to these shows.

Recent Guests

Alex Olivier
Co-founder and CPO at Cerbos; co-chair of the OpenID AuthZen Working Group
Cerbos
Episode: Getting Granular with Access, Attributes, and Intent - Alex Olivier - ASW #403
Shlomie Liberow
Founder and CEO of AZ, former hacker and head of hacker R&D at HackerOne
AZ
Episode: Going From Bug Bounty Bugs to More Secure Systems - Shlomie Liberow - ASW #402
Julie Brunias
AI security architect, independent researcher with 14 years in critical infrastructure security
Independent researcher / AI security
Episode: Understanding Prompt Injection In Order to Contain It - Julie Brunias - ASW #401
Jason Cortlund
Mobile application security evangelist at Guardsquare
Guardsquare
Episode: The AI Threat Multiplier: Securing Mobile Apps in the Automated Era - Ryan Lloyd, Jason Cortlund - ASW #400
Michael Leland
VP and Field CTO at Island
Island
Episode: Security Conversations on AI, Agents, and Emerging Threats from Black Hat 2026 - Michael Leland, Ido Geffen, Sean Murphy, Idan Plotnik - ASW #399
Sean Murphy
Field CISO for North America at F5
F5
Episode: Security Conversations on AI, Agents, and Emerging Threats from Black Hat 2026 - Michael Leland, Ido Geffen, Sean Murphy, Idan Plotnik - ASW #399
Nidhi Aggarwal
Chief Product Officer at HackerOne
HackerOne
Episode: Fixing Software Weaknesses Rather Than Just Finding More Flaws - Gil Geron, Nidhi Aggarwal, Braden Russell - ASW #398
Braden Russell
CTO at Bugcrowd
Bugcrowd
Episode: Fixing Software Weaknesses Rather Than Just Finding More Flaws - Gil Geron, Nidhi Aggarwal, Braden Russell - ASW #398
Gil Geron
CEO of Orca Security
Orca Security
Episode: Fixing Software Weaknesses Rather Than Just Finding More Flaws - Gil Geron, Nidhi Aggarwal, Braden Russell - ASW #398

Hosts

Mike Shema
Host of the show with focus on Application Security Weekly and broader security coverage.
John Kinsella
Co-host providing security and podcasting leadership across episodes.
Tyler Shields
Co-host and news segment host contributing current security coverage.

Reviews

4.7 out of 5 stars from 23 ratings
  • Yes

    It’s the best.

    Apple Podcasts
    5
    Alpha Gay
    United Statesa year ago
  • Great show

    Amazing show with great news and tips on making sure you code is secure.

    Apple Podcasts
    5
    DMLou
    United States4 years ago
  • One of the best podcast on planet 👍

    One of the best podcast on planet 👍

    Mike and john are the best and most funny host I had the pleasure dealing with.

    Also level of knowledge and precision is unbeatable

    Apple Podcasts
    5
    Fracipo
    United Kingdom4 years ago
  • Great show

    Best show I’ve found so far related to AppSec

    Apple Podcasts
    5
    jrod d
    United States6 years ago
  • Keith fails again

    Clearly doesn’t know or understand java but still keeps yapping regardless. And don’t get me started on the gdpr episode... so much misinformation and stupidity in one location is rare.

    Apple Podcasts
    1
    quasi42
    Denmark8 years ago

Listeners Say

Key themes from listener reviews, highlighting what works and what could be improved about the show.

A minority of listeners feel there's misinformation in a specific episode.
Guests and hosts bring strong domain expertise and real-world experience.
Listeners praise practical, actionable security tips and depth on AppSec topics.

Top Technology Podcasts

Tomorrow, Today
Tomorrow, TodayShekhar Natarajan
Acquired
AcquiredBen Gilbert and David Rosenthal
Hard Fork
Hard ForkThe New York Times
The Room Podcast
The Room PodcastClaudia Laurie and Madison McIlwain

Talking Points

Recent interactions between the hosts and their guests.

Security Conversations on AI, Agents, and Emerging Threats from Black Hat 2026 - Michael Leland, Ido Geffen, Sean Murphy, Idan Plotnik - ASW #399
Q: What is the core shift you're seeing with frontier AI in security?
Frontier AI accelerates both attack and defense; it reduces the window between vulnerability identification and exploitation to hours, enables daisy-chaining of vulnerabilities, and necessitates a unified, governance-driven guardrail system across multiple agents and environments.
MacOS Security Design Features, Flaws, And Futures - Patrick Wardle - ASW #392
Q: How do Apple's design choices impact malware development and defense?
Apple's notarization, kernel-space decisions, and privacy focus shape both attacker techniques and defender tools. Notarization acts as a gatekeeper, but complex inter-team handoffs can create blind spots; hardware and memory protection features also enable more secure defenses and encourage safer development practices.
MacOS Security Design Features, Flaws, And Futures - Patrick Wardle - ASW #392
Q: What attracted you to Mac OS malware research and what makes macOS malware unique compared to Windows?
Wardle explains that attackers target platforms with growing market share; macOS malware is evolving with both ported Windows techniques and new Mac-native capabilities, especially as macOS gains enterprise prominence. He notes the diversification of payloads and the need to understand platform-specific defenses.
Defense-in-depth strategies for securing mobile applications - Ryan Lloyd - ASW #390
Q: How do attackers exploit reverse engineering, and what defense does Guardsquare emphasize?
Attackers exploit exposed business logic via reverse engineering, so defense centers on obfuscation, runtime threat signals, and polymorphic checks that evolve with each app build to maintain the attacker's cost and reduce attack surface.
Defense-in-depth strategies for securing mobile applications - Ryan Lloyd - ASW #390
Q: What is the key approach to balancing security with user experience in mobile apps?
Adopt a layered, risk-based strategy that applies the most rigorous protections only to the most security-sensitive areas, while leveraging server-side attestation to reduce exposure and preserve performance and UX.

Audience Metrics

Listeners, social reach, demographics and more for this podcast.

Listeners per Episode
Gender Skew
Location
Interests
Professions
Age Range
Household Income
Social Media Reach

Frequently Asked Questions About Application Security Weekly

What is Application Security Weekly about and what kind of topics does it cover?

:[

Where can I find podcast stats for Application Security Weekly?

Rephonic provides a wide range of podcast stats for Application Security Weekly. We scanned the web and collated all of the information that we could find in our comprehensive podcast database. See how many people listen to Application Security Weekly and access YouTube viewership numbers, download stats, audience demographics, chart rankings, ratings, reviews and more.

How many listeners does Application Security Weekly get?

Rephonic provides a full set of podcast information for four million podcasts, including the number of listeners. View further listenership figures for Application Security Weekly, including podcast download numbers and subscriber numbers, so you can make better decisions about which podcasts to sponsor or be a guest on. You will need to upgrade your account to access this premium data.

What are the audience demographics for Application Security Weekly?

Rephonic provides comprehensive predictive audience data for Application Security Weekly, including gender skew, age, country, political leaning, income, professions, education level, and interests. You can access these listener demographics by upgrading your account.

How many subscribers and views does Application Security Weekly have?

To see how many followers or subscribers Application Security Weekly has on Spotify and other platforms such as Castbox and Podcast Addict, simply upgrade your account. You'll also find viewership figures for their YouTube channel if they have one.

Which podcasts are similar to Application Security Weekly?

These podcasts share a similar audience with Application Security Weekly:

1. The Application Security Podcast
2. SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
3. Risky Bulletin
4. CyberWire Daily
5. Security Now (Audio)

How many episodes of Application Security Weekly are there?

Application Security Weekly launched 9 years ago and published 417 episodes to date. You can find more information about this podcast including rankings, audience demographics and engagement in our podcast database.

How do I contact Application Security Weekly?

Our systems regularly scour the web to find email addresses and social media links for this podcast. We scanned the web and collated all of the contact information that we could find in our podcast database. But in the unlikely event that you can't find what you're looking for, our concierge service lets you request our research team to source better contacts for you.

Where can I see ratings and reviews for Application Security Weekly?

Rephonic pulls ratings and reviews for Application Security Weekly from multiple sources, including Spotify, Apple Podcasts, Castbox, and Podcast Addict.

View all the reviews in one place instead of visiting each platform individually and use this information to decide if a show is worth pitching or not.

How do I access podcast episode transcripts for Application Security Weekly?

Rephonic provides full transcripts for episodes of Application Security Weekly. Search within each transcript for your keywords, whether they be topics, brands or people, and figure out if it's worth pitching as a guest or sponsor. You can even set-up alerts to get notified when your keywords are mentioned.

What guests have appeared on Application Security Weekly?

Recent guests on Application Security Weekly include:

1. Alex Olivier
2. Shlomie Liberow
3. Julie Brunias
4. Jason Cortlund
5. Michael Leland
6. Sean Murphy
7. Nidhi Aggarwal
8. Braden Russell

To view more recent guests and their details, simply upgrade your Rephonic account. You'll also get access to a typical guest profile to help you decide if the show is worth pitching.

Find and pitch the right podcasts

We help savvy brands, marketers and PR professionals to find the right podcasts for any topic or niche. Get the data and contacts you need to pitch podcasts at scale and turn listeners into customers.
Try it free for 7 days