Securing Software at AI Speed with Varun Badhwar

Securing Software at AI Speed with Varun Badhwar

The biggest security threat isn’t in the cloud, it’s hidden in the code you trust the most.

In this episode, Ron sits down with Varun Badhwar, Co-Founder & CEO of Endor Labs, who shares why research shows that nearly 80–90% of application code comes from open source and third-party libraries, not your own developers. Varun discusses the unseen risks of AI-generated software, how attackers can now weaponize vulnerabilities in hours, and why precision in security matters more than ever. He also reveals how AI can be both the ultimate accelerator and the ultimate weakness in modern development.

Impactful Moments: 00:00 - Introduction 02:00 - Varun’s journey from RedLock to Endor Labs 04:00 - Why the software supply chain is broken 07:00 - AI coding assistants and insecure code risks 10:00 - The NPM self-replicating worm discovery 13:00 - Simple controls to enforce Zero Trust in code 16:00 - Pairing AI with security to prevent slop 19:00 - AI-powered security code reviews explained 22:00 - Why 88% of code goes unused 26:00 - Developer efficiency as the new security metric 29:00 - The next wave of AI-driven software threats

Links: Connect with our Endor on LinkedIn: https://www.linkedin.com/in/vbadhwar/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional: https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(431)

We Shipped a Tool That Acts Like You. Meet Interceptor.

We Shipped a Tool That Acts Like You. Meet Interceptor.

Think about everything you could accomplish if you don’t have to be the one driving your browser. In this solo episode, Ron Eddings introduces Interceptor, Hacker Valley Media's first piece of softwar...

14 Heinä 30min

How to Turn Cybersecurity Customers into Lifelong Advocates with Antu Buck

How to Turn Cybersecurity Customers into Lifelong Advocates with Antu Buck

What if the same psychology that threat actors use to manipulate their targets is the same psychology that marketers use to earn your trust?  In this episode, Ron sits down with Antu Buck, Senior Dir...

7 Heinä 30min

What's Really Stopping AI From Running Your SOC with Aqsa Taylor

What's Really Stopping AI From Running Your SOC with Aqsa Taylor

In 2025, out of all 70+ guests we had on our show, not one of them said they’d trust AI to run their SOC. Now in 2026, that mindset is shifting. In this episode, Ron sits down with Aqsa Taylor, Chief ...

23 Kesä 31min

Feed Your Brain: What Cybersecurity Veterans Are Getting Wrong with Johnny Xmas

Feed Your Brain: What Cybersecurity Veterans Are Getting Wrong with Johnny Xmas

Is AI really coming for your red teaming job? What does it actually take to build a team that thinks like the adversary, and what happens when that team stops caring? And what do you do when you've be...

16 Kesä 28min

Fighting Smarter: What Combat Sports Teaches Us About Cyber Defense with Robin Black

Fighting Smarter: What Combat Sports Teaches Us About Cyber Defense with Robin Black

What does a calf kick have to do with vulnerability management? What can a fighter's mindset teach a security practitioner about operating against an adversary they've never faced?  Ron Eddings bring...

9 Kesä 25min

Is Vibe Coding Breaking the Internet? with Tanya Janca

Is Vibe Coding Breaking the Internet? with Tanya Janca

What happens when AI writes all the code and nobody reads it? What if the security prompt you trusted still produced software designed to leak your secrets? And who exactly is on the hook when an AI-g...

2 Kesä 35min

Why Smart People Fall for Deepfakes with Perry Carpenter

Why Smart People Fall for Deepfakes with Perry Carpenter

What if the most sophisticated attack has nothing to do with your firewall? In a world where AI can clone voices, re-lip-sync politicians, and spread a fake newscast to 200,000 people in days, the rea...

26 Touko 35min

Who Owns Your AI Security Policy? with Chris Cochran

Who Owns Your AI Security Policy? with Chris Cochran

Right now, someone in your organization is probably feeding sensitive data into an AI system that nobody approved. So when something goes wrong, who's responsible? And more critically, do you even hav...

18 Touko 35min

Suosittua kategoriassa Koulutus

rss-murhan-anatomia
psykopodiaa-podcast
voi-hyvin-meditaatiot-2
rss-niinku-asia-on
adhd-podi
kesken
ihminen-tavattavissa-tommy-hellsten-instituutti
rss-liian-kuuma-peruna
rss-arkea-ja-aurinkoa-podcast-espanjasta
rahapuhetta
rss-perho-rajoilla
rss-koira-haudattuna
rss-narsisti
rss-rahataito-podcast
rss-ai-mita-siskopodcast
rss-tietoinen-yhteys-podcast-2
rss-hereilla
salainen-paivakirja
rss-valo-minussa-2
rss-ihana-elamani