Helping Developers Use Open Source Security Tools & Improving Defense With AI - Mackenzie Jackson

The Security Repo

Player FM - Internet Radio Done Right

הוסף לפני two שנים

תוכן מסופק על ידי Mackenzie Jackson & Dwayne McDaniel, Mackenzie Jackson, and Dwayne McDaniel. כל תוכן הפודקאסטים כולל פרקים, גרפיקה ותיאורי פודקאסטים מועלים ומסופקים ישירות על ידי Mackenzie Jackson & Dwayne McDaniel, Mackenzie Jackson, and Dwayne McDaniel או שותף פלטפורמת הפודקאסט שלהם. אם אתה מאמין שמישהו משתמש ביצירה שלך המוגנת בזכויות יוצרים ללא רשותך, אתה יכול לעקוב אחר התהליך המתואר כאן https://he.player.fm/legal.

World of Secrets

1
The Killing Call: 1. The death of a star 35:12

לפני 9 ימים35:12

הפעל מאוחר יותר

רשימות

לייק

אהבתי

35:12

Sidhu Moose Wala explodes onto the Canadian music scene. His sound is a fusion of two worlds - hip-hop with the poetic language of rural Punjab, where he is from. After years of struggle he’s making it. But with the spotlight comes a dark side. As his fame grows, so do the threats. "We will kill you." Presented by broadcaster and DJ Bobby Friction and investigative journalist Ishleen Kaur. Season 8 of World of Secrets, The Killing Call, is a BBC Eye investigation for the BBC World Service. Archive audio credits: Lovepreet Waraich, Malwa TV, BritAsia TV, MPHONE Canteeni Mandeer, GK Digital, Thakur Media, Capital Extra, Famous Punjab TV, ModernSings, Dheeth.jeha, RealRohitBlogs, Mirror Now, India Today. Here’s a link to the BBC Eye two-part documentary films, which we recommend you watch after listening to this podcast: https://bit.ly/thekillingcall If you are in the UK, you can watch on iPlayer: https://www.bbc.co.uk/programmes/m002f18y…

לפני שנה 24:19

MP3•בית הפרקים

In this episode of the Security Repo Podcast, we welcome back Mackenzie Jackson, security researcher and founder of this very show, to discuss the evolving landscape of AI in cybersecurity. Mackenzie dives deep into how AI is reshaping open-source security, revealing research that uncovered 600 unreported vulnerabilities in popular packages. We also explore the growing risks of AI-generated package hallucinations, how attackers might exploit them, and why security tools must be made more accessible to developers.https://www.linkedin.com/in/advocatemack/https://www.aikido.dev/Mackenzie is a security researcher and advocate with a passion for code security. He is the former CTO and founder of Conpago, where he learned firsthand the importance of building secure applications. Today, Mackenzie works for Aikido Security to help developers and DevOps engineers build secure systems.

98 פרקים

#Tech #Mackenzie Jackson & Dwayne McDaniel #Dwayne McDaniel #Mackenzie Jackson

Helping Developers Use Open Source Security Tools & Improving Defense With AI - Mackenzie Jackson

The Security Repo

published לפני שנה

שתפו

MP3•בית הפרקים

98 פרקים

#Tech #Mackenzie Jackson & Dwayne McDaniel #Dwayne McDaniel #Mackenzie Jackson

All episodes

The Security Repo

1
AI, Zero Trust, And The Future Of DevSecOps In A Cloud-First World – Nivathan Athiganoor Somasundharam 19:35

לפני 1 day19:35

19:35

In this episode of the Security Repo Podcast, we dive deep into the evolving role of DevSecOps with Nivathan Athiganoor Somasundharam, a technical account manager at Teleport. He shares his journey from cloud engineering to becoming a DevSecOps practitioner, emphasizing proactive security, the elimination of secrets, and the future of identity-based infrastructure access. We also explore how AI can enhance DevSecOps practices and the cultural shift needed to embed security across development and operations. https://www.linkedin.com/in/nivathan/ https://goteleport.com/ Nivathan Athiganoor Somasundharam is a technical account manager at Gravitational Inc. DBA Teleport. He specializes in Zero-Trust implementation, identity security, and DevSecOps. He has a unique blend of experience in the cloud, working on Hyperscalers like AWS, GCP, Azure, and Security for them, which makes him an actual DevSecOps Practitioner. An active contributor to the cybersecurity community, Somasundharam shares his expertise through blogs, webinars, and conferences focused on cloud infrastructure security. He is also a key contributor to the open-source VMware Carbon Black Harbor Adapter project. Beyond that, Nivathan enjoys cooking and snowboarding on the slopes.…

The Security Repo

1
Reducing Developer Toil, Shifting Security Left, And Using Caution With AI – Andy Dennis 20:41

לפני 9 ימים20:41

20:41

In this episode of the Security Repo Podcast, Andy Dennis, VP at Modus Create, joins Dwayne McDaniel to unpack what "shifting left" really means for security and engineering teams. They explore the impact of hands-on security training at B-Sides events, the concept of developer toil, and the role AI tools like GitHub Copilot AutoFix are starting to play in secure coding workflows. Andy also shares candid advice for aspiring security engineers and insights on measuring the true value of AI in developer environments.https://docs.horusec.io/docs/overview/moduscreate.comhttps://www.linkedin.com/in/andy-d-b43a17b/Andy Dennis is VP of the Platform and Cloud Practice at Modus Create, a Digital Transformation consulting agency. He is responsible for overseeing engineering teams across Cybersecurity, Cloud/DevOps, Build Systems, Functional Programming and Tooling.Andy has 22+ years experience in the technology industry and has worked in the UK, Canada and US. He’s had 5 books published on a variety of topics including IoT and the Raspberry Pi and spoken at multiple events around the country. Previously Andy tutored undergraduates at Goldsmith’s College, University of London’s online degree program and is currently studying with HEC in Paris.…

The Security Repo

1
Educate, Empower, Prepare: Building Inclusive Cybersecurity With Rebekah Skeete 23:26

לפני 16 ימים23:26

23:26

In this episode of the Security Repo Podcast, we sit down with Rebekah Skeete, COO of BlackGirlsHack, to explore how her organization is increasing diversity and accessibility in cybersecurity through hands-on training, mentorship, and inclusive community building. Rebekah shares the origin story of BlackGirlsHack, their evolving programs including SquadCon and Friday Night Labs, and the core values driving their mission. https://www.blackgirlshack.org/https://squadcon.me/https://www.linkedin.com/in/rebekah-skeete-01270192/Rebekah Skeete is a dynamic and accomplished leader in the technology and cybersecurity space, bringing a wealth of expertise and passion to her multifaceted career. As the Chief Operating Officer at BlackGirlsHack, Rebekah plays a pivotal role in empowering underrepresented groups in cybersecurity by fostering education, mentorship, and career development opportunities. Her dedication to diversity and inclusion has made her a trailblazer and a mentor to aspiring tech professionals worldwide.In addition to her COO role, Rebekah served as a Senior Security Engineer, leveraging her deep technical knowledge to design, implement, and manage robust security solutions that protect organizations from ever-evolving cyber threats. Her technical prowess is matched by her ability to communicate complex concepts to diverse audiences, which has positioned her as a sought-after speaker and podcaster. She shares insights on topics ranging from cybersecurity trends to personal growth, inspiring others to excel in their careers.Rebekah's creative talents also extend to the arts as a voice-over artist, where her engaging and versatile voice brings stories and brands to life. Her ability to connect with audiences in a variety of formats reflects her broad skill set and unique perspective.A recipient of the prestigious 2024 Dallas Business Journal 40 Under 40 award, Rebekah has been recognized for her exceptional leadership, innovation, and impact within her industry and community. Her commitment to excellence and advocacy for diversity make her a beacon of inspiration for the next generation of leaders in technology and beyond.…

The Security Repo

1
Bridging the Gap Between Dev and Sec: Tools, Culture, and Careers - Thomas Jost 24:49

לפני 23 ימים24:49

24:49

In this episode of the Security Repo Podcast, Thomas Jost shares his journey from software development to becoming a Senior Application Security Engineer, offering insights into the value of diverse tech backgrounds in AppSec. He discusses the real-world friction between security practices and developer workflows, especially around static analysis and CI/CD slowdowns. Thomas also emphasizes the importance of soft skills, mentorship, and community networking for success in the cybersecurity space.Passionate about breaking things and helping teams fix those things. After a solid career in software development, Thomas Jost is now fully devoted to application security and DevSecOps as a Sr. Applications Security Engineer.https://www.linkedin.com/in/mmtjost/…

The Security Repo

1
What Tools Miss and Why Humans Matter in AppSec - Yash Shahani 18:02

לפני 30 ימים18:02

18:02

In this episode of the Security Repo Podcast, Dwayne McDaniel sits down with Yash Shahani, a seasoned AppSec engineer and vulnerability hunter, to dive into the nuances of manual code review and the limitations of automated security tools. They explore the evolving role of AI in AppSec, its promise and pitfalls, and why human intuition still plays a vital role in catching complex logic flaws. Yash also shares practical tips for exploring unfamiliar codebases and emphasizes the importance of treating security as a shared responsibility across teams.Yash Shahani is a security researcher and AppSec engineer with a background in building and breaking applications. He holds a Master’s in Information Security from Carnegie Mellon and focuses on finding the vulnerabilities that tools miss. Yash is an active member of the security community and an organizer for BSides San Francisco. He’s passionate about making security easier to adopt - something teams naturally build into software development, not bolt on later.…

The Security Repo

1
Visualizing Data Poisoning and Rethinking Threat Detection Through Graphs – Maria Khodak 21:05

לפני 5 weeks21:05

21:05

In this episode of the Security Repo Podcast, Maria Khodak explores how graph theory and data visualization can be used to uncover machine learning vulnerabilities like data poisoning. She explains how her work as a penetration tester intersects with research on threat detection and the importance of making abstract security concepts more human-readable. The conversation also covers her journey into cybersecurity, the value of visualization tools like Gephi, and her call to make the field more inclusive and curious-driven.Maria Khodak is a security engineer and penetration tester at a large company focusing on web application, API, and network testing. She also researches machine learning vulnerabilities, threat detection, and graph theory in her free time. https://www.linkedin.com/in/maria-khodak-10b26a192/https://gephi.org/…

The Security Repo

1
Building Human-Centric Security and Hacker Communities in Argentina - Ailin Castellucci 23:04

לפני 7 weeks23:04

23:04

In this episode of the Security Repo Podcast, Ailin Castellucci shares her inspiring journey from selling shoes to building cybersecurity teams and leading human-centric education projects. She discusses the unique challenges and perspectives of cybersecurity education in Argentina, emphasizing the importance of empathy, communication, and passion in the industry. Ailin also delves into her current work fostering hacker communities and promoting accessible security education across South America. https://www.linkedin.com/in/acastellucci/ Ailin is an Information Security specialist and Hacking Community Builder at Strike. She previously worked at Mercado Libre, Lemon, and Galicia bank, and now leads Hécate, a project that combines creative solutions with human-centered education.…

The Security Repo

1
From SOCs to Threat Detection Engineering: Crafting Better Security Responses - Chris Kulakowski 20:03

לפני 8 weeks20:03

20:03

In this episode of the Security Repo Podcast, Chris Kulakowski, a seasoned detection engineer from IBM, delves into the complexities of threat detection, from writing detection rules to collaborating with red teams for proactive security strategies. He shares insights on prioritizing security risks, the evolving role of AI in cybersecurity, and the importance of adaptability in the ever-changing threat landscape. Chris also offers advice for aspiring security professionals and reflects on the positive trends in global cybersecurity efforts. https://www.linkedin.com/in/ckulakowski/ Chris Kulakowski is a driven technologist, innovator, and tinkerer of all things. His career spans across 15 years of Digital Media, Information Technology, Security Operations, Threat Intelligence and Digital Forensics roles. He is currently a senior technical staff member specializing in threat detection at IBM, supporting IBM internal businesses. Prior to IBM he held various roles at General Motors and Optiv. He is seasoned in responding to incidents, developing new threat detection content, and an expert in EDR technology. Chris holds a Computer Criminology degree from Florida State University and several industry leading cyber security and digital forensics certifications including CISSP, EnCE, GCFE, GREM, and Security+. Chris is also accredited with a Stanford University Advanced Computer Security Certificate.…

The Security Repo

1
Quarantine Policies and Cloud Security Strategies for AWS – Bleon Proko 23:06

לפני 9 weeks23:06

23:06

In this episode of the Security Repo Podcast, Bleon Proko dives into the intricacies of AWS security, focusing on the role and impact of quarantine policies in mitigating the risks of compromised credentials. He explains how AWS policies prioritize denial to prevent privilege escalation, lateral movement, and financial fraud, offering practical strategies for securing sensitive identities. Additionally, Bleon shares insights on essential tools for penetration testing and gives candid advice about navigating cloud security challenges.Bleon is an Info-sec passionate about Infrastructure Penetration Testing and Security, including Active Directory, Cloud (AWS, Azure, GCP, Digital Ocean), Hybrid Infrastructures, as well as Defense, Detection and Thread Hunting. He has presented topics related to Cloud Penetration Testing and Security in conferences like BlackHat USA, Europe and Sector, DEF CON, SANS Pentest Hackfest Hollywood and Amsterdam, as well as several BSides on USA and Europe.His research include Nebula, a Cloud Penetration Testing Framework (https://github.com/gl4ssesbo1/Nebula) and other blogs, which you can also find on his blog (blog.pepperclipp.com). He is also the author of YetiHunter and DetentionDodger (https://github.com/Permiso-io-tools/[DetentionDodger | YetiHunter]).He is also the author of the upcoming book "Deep Dive into Clouded Waters: An overview in Digital Ocean's Pentest and Security" (https://leanpub.com/deep-dive-into-clouded-waters-an-overview-in-digitaloceans-pentest-and-security)…

The Security Repo

לפני 15 weeks22:45

22:45

In this episode of the Security Repo Podcast, we sit down with Edna Jonnson, a cybersecurity engineer and SOC analyst, to discuss their journey from web development to security operations. Edna shares insights on the value of Capture the Flag (CTF) competitions for skill development, recounting their recent victory at Wild West Hacking Fest. We also dive into their day-to-day work in a SOC, the importance of credit freezes for personal security, and their involvement in cybersecurity communities like DEF CON and B-Sides Orlando.Edna Jonsson (they/them) is a cybersecurity engineer and SOC analyst with a strong foundation in web development and technical education. Their journey began as a web developer and coding bootcamp instructor, equipping them with a unique blend of technical expertise and a passion for mentorship.Edna is an active leader in the cybersecurity community, serving as the Volunteer Coordinator for BSides Orlando and an organizer for Career Village and Social Engineering Adventure Village. They also play a pivotal role in DEATHCon, both as the main conference organizer and Orlando site lead. They also help organize meetings for the local DC407 chapter.Previously, Edna hosted Security Chipmunks, a podcast dedicated to guiding early-career cybersecurity professionals. They were also instrumental in the launch and rapid growth of the WGU Cybersecurity Club, helping expand its membership to over 8,000 students. Edna coined the club’s motto, “No Owl Left Behind,” emphasizing their commitment to ensuring every student—whether in academics or competitions—received the support they needed to succeed.With a deep passion for cybersecurity, education, and community building, Edna continues to empower the next generation of security professionals.https://www.linkedin.com/in/ednajonsson/https://bsky.app/profile/ednas.bsky.social https://x.com/ednashttps://dc407.com/https://deathcon.io/https://bsidesorlando.org/…

ברוכים הבאים אל Player FM!

Player FM סורק את האינטרנט עבור פודקאסטים באיכות גבוהה בשבילכם כדי שתהנו מהם כרגע. זה יישום הפודקאסט הטוב ביותר והוא עובד על אנדרואיד, iPhone ואינטרנט. הירשמו לסנכרון מנויים במכשירים שונים.

תקשיבו ל-500+ נושאים

דומה לThe Security Repo

Mini Mic Pro Wireless Microphone for iPhone, iPad, Android, Lavalier Microphone for Video Recording - 2 Pack iPhone Mic Crystal Clear Recording with USB-C for Podcast, ASMR

TurboTax Deluxe 2024 Tax Software, Federal & State Tax Return [PC/MAC Download]

Amazon eGift Card - Amazon Logo (Animated)

פודקאסטים ששווה להאזין

The Security Repo « » Helping Developers Use Open Source Security Tools & Improving Defense With AI - Mackenzie Jackson

Helping Developers Use Open Source Security Tools & Improving Defense With AI - Mackenzie Jackson

פודקאסטים ששווה להאזין

ברוכים הבאים אל Player FM!

2024 Topps Baseball Complete Set Factory Sealed Box Set - Baseball Complete Sets

Apple AirTag. Keep Track of and find Your Keys, Wallet, Luggage, Backpack, and More. Simple one-tap Set up with iPhone or iPad

2025 Topps Series 1 Baseball Trading Card MLB Jumbo Fat Pack

Clean Skin Club Clean Towels XL™, 100% USDA Biobased Face Towel, Disposable Face Towelette, Eczema Association Accepted, Makeup Remover Dry Wipes, Ultra Soft, 50 Ct, 1 Pack

דומה לThe Security Repo

מדריך עזר מהיר

The Security Repo « »
Helping Developers Use Open Source Security Tools & Improving Defense With AI - Mackenzie Jackson