Making the OWASP top ten in the vibe code era

Making the OWASP top ten in the vibe code era

Ryan welcomes back Tanya Janca, now part of the OWASP Top 10 team, to discuss what changed in the latest OWASP Top 10 release, how the list shifted from “outdated components” to a broader software supply chain focus, and why they added memory safety and vibe-coding as awareness items.

Episode notes:

The OWASP Top 10 for 2025 is the latest standard awareness document for developers and web application security that represents a broad consensus about the most critical security risks to web applications.

Learn more about Tanya’s work at her website and her new podcast DevSec Station. You can learn how to prompt your AI for secure code with her prompt library.

Read Tanya’s articles on our blog.

Congrats to Populist badge winner Rob Kielty for winning the badge on their answer to How can I tell IntelliJ's "Find in Files" to ignore generated files?.

TRANSCRIPT

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(972)

Solving integration woes with a hackathon

Solving integration woes with a hackathon

Ryan welcomes Meryll Blanchet,  Director of Engineering for Adobe Brand Visibility, to chat about Adobe’s recent acquisition of Semrush, how Adobe Brand Visibility was born from Semrush’s AI visibilit...

14 Aug 28min

Your tokenmaxxing is not valuemaxxing

Your tokenmaxxing is not valuemaxxing

Ryan is joined by Coder’s Rob Whiteley to chat about why tokenmaxxing isn’t proving real value and just triggering Goodhart’s Law, how release speed and PR merges can help you measure agentic outcomes...

11 Aug 29min

How to be fearlessly AI native

How to be fearlessly AI native

Ryan welcomes McLaren Stanley, Senior Principal Engineer for Amazon Stores, to discuss what it actually takes to make teams AI native, why agentic engineering is shifting code bottlenecks downstream t...

7 Aug 40min

Your MVP doesn’t need a Kubernetes cluster

Your MVP doesn’t need a Kubernetes cluster

Ryan welcomes Anurag Goel, CEO and co-founder of Render, to discuss why most startups shouldn’t start by managing their Kubernetes and cloud infrastructure. They discuss how frustration with spinning ...

4 Aug 31min

What happens to the internet when robots act like humans?

What happens to the internet when robots act like humans?

Ryan welcomes WPEngine CTO Ramadass Prabakar to the show to chat about what happens—and what we should do—when agents start acting like humans online, how our internet is evolving to serve both human ...

31 Juli 30min

You need reliable AI context for your site reliability

You need reliable AI context for your site reliability

Ryan is joined by Asaf Savich, Komodor’s AI Engineering Group Manager, to discuss why modern reliability work requires navigating massive cross-service context, what good context engineering actually ...

28 Juli 26min

Partnerships can keep open source sustainable

Partnerships can keep open source sustainable

Ryan welcomes VoidZero’s Evan You and Cloudflare’s Dane Knecht back to the show to discuss Cloudflare’s recent acquisition of VoidZero and what it means for JavaScript development, how partnerships li...

24 Juli 26min

The future of development is full-stack

The future of development is full-stack

Live from Snowflake Summit, Ryan talks with Snowflake’s Head of Developer Experience Umesh Unnikrishnan about the industry-wide shift from “vibe coding” for quick prototypes to agentic engineering for...

21 Juli 25min

Populärt inom Business & ekonomi

framgangspodden
badfluence
varvet
dynastin
uppgang-och-fall
rss-borsens-finest
avanzapodden
svd-tech-brief
rss-inga-dumma-fragor-om-pengar
fill-or-kill
tabberaset
borsmorgon
lastbilspodden
rikatillsammans-om-privatekonomi-rikedom-i-livet
rss-dagen-med-di
rss-hos-psykologen
borslunch-2
rss-kort-lang-analyspodden-fran-di
rss-veckans-trade
rss-borslunch