Capture the Flag or NOT?
There is an overemphasis on Capture The Flag in the security world. Instead, the industry should focus more on the 'builder' perspective to develop robust systems rather than the 'breaker' mindset typ...
27 Maj 202341min
Simple Product Security Requirements
Matt, Izar, and Chris discuss the United Kingdom's new minimum security standards for all Internet-connected consumer products. They highlight three key aspects of these new standards: Banning of Uni...
19 Maj 202338min
Reasonable Software Security: Do We Really Need DAST?
In this episode of the Security Table, the gang discusses reasonable software security. They explore whether current application security tooling, such as dynamic application security testing (DAST), ...
4 Maj 202336min
The Final Take on the National Cybersecurity Strategy: Software Liability And Privacy
Chris Romeo, Izar Tarandach, and Matt Coles discuss the national cybersecurity strategy, focusing on pillar three, which aims to shape market forces to drive security and resilience. They explore the ...
27 Apr 202352min
A Convergence of AI in the World of Cybersecurity
Izar, Matt, and Chris scour the Interwebs for an article to discuss, only to find that each person has chosen an article related to the convergence of AI and cybersecurity. We discuss whether ChatGPT ...
3 Apr 202346min
The US National Cybersecurity Strategy -- Pillars One and Two
The Security Table gang continues our discussion about the United States National Cybersecurity Strategy, released in 2023. We cover pillars one and two, defend critical infrastructure, and disrupt an...
20 Mars 20231h 10min
The US National Cybersecurity Strategy - Introduction - Part One
The United States released a new National Cybersecurity Strategy. The gang gathers to discuss the new strategy and look at it from a practitioner's perspective. We discuss the impact and depth of th...
13 Mars 202346min
Application Security, Product Security, and what do we call this thing we do
The gang is back to debate and discuss the definition of application security. We start by figuring out what an application is and then layer security on top of it. We branched into how product securi...
5 Mars 202351min
