Making the OWASP top ten in the vibe code era

Making the OWASP top ten in the vibe code era

Ryan welcomes back Tanya Janca, now part of the OWASP Top 10 team, to discuss what changed in the latest OWASP Top 10 release, how the list shifted from “outdated components” to a broader software supply chain focus, and why they added memory safety and vibe-coding as awareness items.

Episode notes:

The OWASP Top 10 for 2025 is the latest standard awareness document for developers and web application security that represents a broad consensus about the most critical security risks to web applications.

Learn more about Tanya’s work at her website and her new podcast DevSec Station. You can learn how to prompt your AI for secure code with her prompt library.

Read Tanya’s articles on our blog.

Congrats to Populist badge winner Rob Kielty for winning the badge on their answer to How can I tell IntelliJ's "Find in Files" to ignore generated files?.

TRANSCRIPT

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(965)

The future of development is full-stack

The future of development is full-stack

Live from Snowflake Summit, Ryan talks with Snowflake’s Head of Developer Experience Umesh Unnikrishnan about the industry-wide shift from “vibe coding” for quick prototypes to agentic engineering for...

21 Juli 0s

Developers who move fast still need to do it together

Developers who move fast still need to do it together

At MS Build, Ryan is joined by Cassidy Williams, Senior Director of Developer Advocacy at GitHub and former Stack Overflow Podcast host, to discuss how agentic coding is shifting dev work towards high...

17 Juli 28min

Your AI is only as responsible as you are

Your AI is only as responsible as you are

Recorded at Microsoft Build, Ryan welcomes Sarah Bird, Microsoft’s Chief Product Officer for Responsible AI, about how we can build and use AI responsibly with the NIST approach, why most irresponsibl...

14 Juli 28min

Building more than just an agent harness

Building more than just an agent harness

Live from Microsoft Build, Ryan is joined by Jay Parikh, Microsoft’s VP of AI Core, for a conversation on what enterprises need to build, deploy, and run AI agents at scale with demonstrable ROI; how ...

10 Juli 31min

What's left for infrastructure-as-code after AI moves in?

What's left for infrastructure-as-code after AI moves in?

SPONSORED BY IBMRyan is joined by Rosemary Wang, Developer Advocate at IBM, to explore what infrastructure as code looks like once AI starts writing and deploying it. They discuss why guardrails still...

8 Juli 30min

Agent orchestration is so two-years ago

Agent orchestration is so two-years ago

Ryan welcomes Saahil Jain, CTO of You.com, to discuss why building agents with a 2024 mindset is a mistake as modern models improve at long-horizon tasks, why heavy orchestration layers can hurt model...

7 Juli 31min

The good, the bad, and the AI apps

The good, the bad, and the AI apps

Ryan welcomes Benny Chen, co-founder of Fireworks AI, to the show to explore what actually makes an AI application good or not, how to balance qualitative signals with quantitative metrics when evalua...

3 Juli 25min

How do you turn AI coding chaos into a repeatable playbook?

How do you turn AI coding chaos into a repeatable playbook?

Vivek Raghunathan, SVP of engineering at Snowflake, joins Leaders of Code at Snowflake Summit to break down the five-stage framework his org used to go from "let chaos reign" to a repeatable, org-wide...

2 Juli 22min

Populärt inom Business & ekonomi

badfluence
framgangspodden
dynastin
varvet
rss-borsens-finest
uppgang-och-fall
svd-tech-brief
avanzapodden
rss-inga-dumma-fragor-om-pengar
fill-or-kill
rss-dagen-med-di
tabberaset
rikatillsammans-om-privatekonomi-rikedom-i-livet
borslunch-2
borsmorgon
rss-veckans-trade
rss-kort-lang-analyspodden-fran-di
bathina-en-podcast
rss-dominoeffekten
rss-hos-psykologen