エピソード

  • S5EP5 - Drinksgiving, words of the year and Security Audits with Mark Spears
    2024/11/28

    Colin Bell, Rob Cuddy and Kris Duer from HCL Software bring you another insightful application paranoia session.

    In this episode our special guest is Mark Spears.

    Mark is currently a Principal Security Consultant at Solis Security. Having fulfilled significant time as a network defender and vCISO dealing with writing and testing InfoSec Programs and dealing with auditors and endless reporting, he has now re-focused his time on Penetration Testing to get his fill of offensive security operations. So Red Pill or Blue Pill?

    A lot of his most recent education and skill focus has been on helping companies with their Web Application security through Secure-SDLC practices including configuration of Web Application Firewalls and Zero Trust solutions. When not enjoying his work at Solis Security, he can be found practicing physical security, lock picking, social engineering, or hardware hacking. Or, out on a Harley Davidson!

    続きを読む 一部表示
    58 分
  • S5EP4 - Upside down Pineapples and a Panel interview on AI by David Rubinstein
    2024/10/09

    Colin Bell, Rob Cuddy and Kris Duer from HCL Software bring you another insightful application paranoia session.

    In this episode the interviewvers be come the interviewd as David Rubinstien interviews Colin, Rob and Kris for his recent SD times articale on Discerning reality from the hype around AI. You can read his article here at the following link

    https://sdtimes.com/ai/discerning-reality-from-the-hype-around-ai/


    David is the Publishing Director and Editor-in-Chief, SD Times and ITOps Times
    Conference Chairman, VSMcon; Improve: Test and Productivity
    and Co-founder and Chief Operating Officer, D2Emerge LLC

    続きを読む 一部表示
    55 分
  • S5EP3 - Security in the Developer Experience with Tanya Janca and New Words for 2024.
    2024/05/24

    Colin Bell, Rob Cuddy and Kris Duer from HCL Software bring you another insightful application paranoia session.

    In this weeks episode our special guest is Tanya Janca who is helping the team discuss all things Security in the Devlopment space.

    Tanya Janca, also known as SheHacksPurple, is the author of ‘Alice and Bob Learn Application Security’. She is also the head of education and community at Semgrep! As the founder of We Hack Purple, Tanya is bringing her security training to Semgrep customers and beyond. Tanya has been coding and working in IT for over twenty years, won numerous awards, and has been everywhere from startups to public service to tech giants (Microsoft, Adobe, & Nokia). She has worn many hats; startup founder, pentester, CISO, AppSec Engineer, and software developer. She is an Advisor for NordSec and Katilyst and the Founder of We Hack Purple, OWASP DevSlop, WoSECShe and the very popular #CyberMentoringMonday. She is an award-winning public speaker, active blogger & streamer and has delivered hundreds of talks and trainings on 6 continents. She values diversity, inclusion and kindness, which shines through in her countless initiatives.

    続きを読む 一部表示
    1 時間 7 分
  • S5EP2 - Application Security Posture Management with guest Ray [Redacted]
    2024/04/15

    Colin Bell, Rob Cuddy and Kris Duer from HCL Software bring you another insightful application paranoia session.

    In this weeks episode our special guest is Ray [Redacted] who is helping the team discuss all things Posture Management.

    Ray is a Technologist & researcher for a Fortune 50 corporation and Associate Producer Emeritus of Jack Rhysider’s critically acclaimed hacker podcast “Darknet Diaries.” “Ray is particularly interested in researching nation state APT activities, and he is known online for being passionate about Mental Health Care issues as it relates to information and cybersecurity.

    https://twitter.com/RayRedacted
    https://twitter.com/DarknetDiaries

    続きを読む 一部表示
    58 分
  • S5EP1 - 2024 Security Trends and the merits of land lines with guest Mike Khusid
    2024/03/01

    Hey everyone, welcome back to Application Paranoia! Colin Bell, Rob Cuddy, and Kris Duer are excited to kick off season 5!

    For our first episode of 2024, we're joined by a special guest: Mike Khusid! Mike is the new Head of Product Management for HCL AppScan, and he brings a wealth of experience from companies like Codacy, Contrast, Red Hat, Akamai, Veracode, and Zerto. We're thrilled to have him on the show!

    In this episode, we're diving deep into the hottest application security trends for 2024. Get ready for insights from a seasoned pro and buckle up for a season packed with valuable information!

    続きを読む 一部表示
    55 分
  • S4EP7 - Holiday Cheer, Words of the year and guest Ken Fanger outlines how to best "humanize security".
    2023/12/20

    Colin Bell, Rob Cuddy and Kris Duer from HCL Software bring you another insightful application paranoia session.

    In this weeks episode our special guest is Ken Fanger who is an acclaimed speaker, author, and cyber security expert, who is focused on making a better world with less fear and more function.

    Ken's current campaign is to "humanize security," a fundamental change toward a more holistic approach to cyber resilience and recovery. Ken is also one of fewer than 2,000 people to hold the designation of CMMC-RP (Cybersecurity Maturity Model Certification Registered Practitioner), helping businesses with federal contracts to meet the new Department of Defense cybersecurity standards.

    Ken also has a new book that was released this past summer called Relax A Guide to True Cybersecurity which is available through Amazon.

    The team also outline the Words of 2023.

    続きを読む 一部表示
    59 分
  • S4EP6- Football, Rugby, U2 and Software Supply Chain best practices with Pete Morgan
    2023/10/04

    Colin Bell, Rob Cuddy and Kris Duer from HCL Software bring you another insightful application paranoia session.

    In this weeks episode our special guest is Pete Morgan who is a leading expert in cloud security and compliance. He is the co-founder and CSO of Phylum (https://www.phylum.io/), a cloud security company that helps organizations to protect their cloud environments and achieve compliance with industry regulations.

    Pete helps unpack some best practices around software supply chain security and outlines how his company Phylum helps organizations contextualize the associated risks from open source.

    The team also discuss College Football, the Rugby World Cup, U2 in Las Vegas, room temperature semiconductors and the invention of starlite https://en.wikipedia.org/wiki/Starlite in the 1980's.

    続きを読む 一部表示
    52 分
  • S4EP5 - Generative AI, GPS art and new capabilities with Startup Co-founder Stephanie Sylvestre
    2023/09/08

    If you are interested in generative AI, we have got a real treat in store for you!. In this episode we are thrilled to be joined by startup co-founder, self-proclaimed tech geek and corporate, nonprofit and government executive Stephanie Sylvestre. Stephanie is a Harvard's Advanced Leadership (ALI) fellow and her company, Avatar Buddy, uses generative AI to close the achievement gap and address vexing social justice issues. You can learn more about the awesome work Stephanie is doing to help promote black professionals and places where people can be free to be vulnerable in their journey to wealth by going to https://www.avatarbuddy.ai/products

    We also take a few minutes to discuss some of the great new capabilities in the latest versions of AppScan AND you won't want to miss the discussion on some of the most amazing story of "GPS art meets love story" that we have ever heard about

    So join us as we dive into Season 4, Episode 5 of Application Paranoia—your ultimate guide to application security, DevSecOps, and the HCL AppScan family. Let's embark on this transformative journey together!

    続きを読む 一部表示
    1 時間 2 分