))
Welcome to Security Breaks, the go-to podcast for professionals, enthusiasts, and anyone interested in the intersection of automotive technology and security. In an era where vehicles are not just modes of transportation but sophisticated networks on wheels, understanding and safeguarding against potential threats is more critical than ever. In each episode, we dive deep into the latest trends, technologies, and challenges facing the automotive security industry. From cybersecurity measures ...
…
continue reading
Join Matias Madou for the interview series that brings the world's leading cybersecurity experts, educators, and academics to your living room. Chatting about all things software security, secure coding and the industry at large, it's the podcast for security enthusiasts everywhere.
…
continue reading
1
Digging deeper into the VicOne Threat Landscape Report: The Story Behind the Numbers
49:32
49:32
Play later
Play later
Lists
Like
Liked
49:32
Episode Summary: In this episode, John speaks with a cybersecurity expert Karl Schlaugh about the rising cyber threats in the automotive industry, the challenges of securing vehicles, and the impact of regulations on automotive cybersecurity. They discuss various attack vectors, the importance of patch management, and the role of regulations in enh…
…
continue reading
1
Exploring Upstream's Cybersecurity Report with Giuseppe Serio
47:10
47:10
Play later
Play later
Lists
Like
Liked
47:10
In this episode of the Security Breaks podcast, host John Heldreth welcomes Giuseppe Serio from Upstream Cybersecurity, a leading expert in automotive cybersecurity. The episode explores the latest developments in automotive cybersecurity, focusing on the Upstream Cybersecurity Threat Report for 2024. Key Takeaways: Upstream Cybersecurity Threat Re…
…
continue reading
1
Navigating Automotive Security Growth with Slava Bronfman
45:38
45:38
Play later
Play later
Lists
Like
Liked
45:38
Welcome to Security Breaks Podcast! In this pillar episode, John Heldreth and Slava Bronfman discuss the evolution and challenges of automotive cybersecurity. They delve into the differences between functional safety and product security, highlighting the importance of understanding the dynamic nature of security in contrast to the relatively stati…
…
continue reading
1
Embedded systems software development, automotive security, and ASRG's global enthusiasts with Sven Schran
29:22
29:22
Play later
Play later
Lists
Like
Liked
29:22
In episode 26 of Software Security Gurus, Matias Madou chats to Sven Schran, Program Manager Security Engineering, at Robert Bosch. They discuss the rapidly growing embedded systems software industry, including the general security considerations during the development lifecycle. They also go in-depth on automotive security, where technological adv…
…
continue reading
1
#25: Secure by design, threat modeling, and diversity of thought in security teams with Simon Cole
28:30
28:30
Play later
Play later
Lists
Like
Liked
28:30
In episode 25 of Software Security Gurus, Matias Madou chats to Simon Cole, Global Security Architecture & Engineering Director at dentsu. They discuss his multi-faceted experience in security architecture, including his views on what constitutes "secure by design". They also discuss threat modeling and empathy with developers, in addition to welco…
…
continue reading
1
#24: Self-driving cars, automotive security modeling and integrated software with John Heldreth
34:52
34:52
Play later
Play later
Lists
Like
Liked
34:52
In episode 24 of Software Security Gurus, Matias Madou chats to John Heldreth, founder of the automotive security organization, ASRG. They discuss taking the plunge with self-driving cars, the complexities of automotive security modeling, digital twins, and integrated software. Want to nominate a guru? Get in touch with us! www.softwaresecurityguru…
…
continue reading
1
#23: Five steps to a better security culture, with Tanvi Bali
25:59
25:59
Play later
Play later
Lists
Like
Liked
25:59
In episode 23 of the Software Security Gurus webcast, Matias sits down with Tanvi Bali, a security expert and DevSecOps specialist. They discuss her background in engineering, and the state of DevSecOps in the APAC region (including why it trails behind Europe and US). She also treats us to her personal five steps to building a positive security cu…
…
continue reading
1
#22: Implementing the right internal security structure, with Julie Tsai
25:48
25:48
Play later
Play later
Lists
Like
Liked
25:48
In episode 22 of Software Security Gurus, Matias Madou chats to Julie Tsai, Head of Information Security at Roblox. They discuss how to implement the right internal security structure, how to measure its success and quantify security risk, as well as how DevOps has evolved tactically to expand beyond tooling. Want to nominate a Guru? Get in touch: …
…
continue reading
1
#21: Security culture and adding security champions to enhance your program, with Brian Levine
25:46
25:46
Play later
Play later
Lists
Like
Liked
25:46
In episode 21 of Software Security Gurus, Matias Madou chats to Brian Levine, Senior Director, Product & Cloud Security at Axway. They discuss scaling a positive security culture and getting executive buy-in, adding security champions to enhance a program, as well as navigating an SSDLC the right way. Want to nominate a guru? Get in touch! www.soft…
…
continue reading
1
#20: Why most security tools are not a cure-all for vulnerabilities, with Larry Maccherone
27:57
27:57
Play later
Play later
Lists
Like
Liked
27:57
In episode 20 of the Software Security Gurus webcast, Matias chats to Larry Maccherone, distinguished engineer and DevSecOps transformation lead at Comcast. They discuss the impact of people and culture on a successful DevSecOps adoption, why more security tools aren't a cure-all for finding and fixing vulnerabilities, as well as a deep dive into L…
…
continue reading
1
#19: Experiencing a big data breach, with Bankim Tejani
31:47
31:47
Play later
Play later
Lists
Like
Liked
31:47
Welcome to Software Security Gurus with Matias Madou. In episode 19, he chats to Bankim Tejani, Chief Security Architect and Distinguished Engineer at the Charles Schwab Corporation. They discuss his experience with big data breaches, as well as how secure coding can speed up remediation, and drive quality, performance, and scalability. Want to nom…
…
continue reading
1
#18: Distributed security culture, with Brad Senetza
21:30
21:30
Play later
Play later
Lists
Like
Liked
21:30
Welcome to Software Security Gurus with Matias Madou. In episode 18, he chats with Brad Senetza, Security Assurance Architect at Oracle. They discuss his distributed security culture strategy, why it works, and how everyone in the SDLC can and should own security. Want to nominate a guru? Head to www.softwaresecuritygurus.com. --- Send in a voice m…
…
continue reading
1
#17: The secret ingredient to a successful "shift left", with Mike Shema
22:20
22:20
Play later
Play later
Lists
Like
Liked
22:20
Welcome to episode 17 of the Software Security Gurus webcast. In this interview, he chats with Mike Shema, Product Security at Square. They discuss his take on proactive security, and the how the relationship between deveopers and the security team impacts this approach. They also unpack the collaborative role these teams can play, and the secret i…
…
continue reading
1
#14: The OWASP AppSensor Project, with John Melton
33:54
33:54
Play later
Play later
Lists
Like
Liked
33:54
Welcome to episode 14 of Software Security Gurus, with Matias Madou. This episode features a discussion with John Melton, Director of Product Security at NetSuite. He is also the co-leader of the visionary OWASP AppSensor Project. For more information, or to nominate a guest, please visit www.softwaresecuritygurus.com. --- Send in a voice message: …
…
continue reading
1
#16: The "people over tools" approach to security, with Leif Dreizler
21:18
21:18
Play later
Play later
Lists
Like
Liked
21:18
Welcome to episode 16 of the Software Security Gurus podcast. In this interview, he chats with Leif Dreizler, Product Security Manager at Segment. They discuss his "people over tools" security approach, his team structure, as well as the fact that at Segment, cross-site scripting and SQL injection are extinct. Want to nominate a guru? Check out www…
…
continue reading
1
#15: Self-service and reducing cyber risk with Astha Singhal
16:44
16:44
Play later
Play later
Lists
Like
Liked
16:44
Welcome to episode 15 of the Software Security Gurus webcast. In this episode, Matias chats to Astha Singhal, Director of AppSec at Netflix. They discuss Netflix's enviable culture of freedom and responsibility, and what this means for application security in her team. They also dive into the world of self-service, and the impact this can have on r…
…
continue reading
1
#13: Four CISO tribes, and the changing approach to security training with Florence Mottay
19:28
19:28
Play later
Play later
Lists
Like
Liked
19:28
Welcome to episode 13 of Software Security Gurus, with Matias Madou. In this interview, he chats with Florence Mottay, security expert and Global CISO at Ahold Delhaize. They discuss her recent win of a prestigious industry award, and how this could positively influence cybersecurity transparency at the company level, as well as her experience in s…
…
continue reading
1
#12: Inspiring security awareness in developers, with Tanya Janca
17:24
17:24
Play later
Play later
Lists
Like
Liked
17:24
In this interview, Matias chats to Tanya Janca, security rockstar and CEO of We Hack Purple. They talk about how to inspire security awareness in developers, the complexities of the AppSec space, and how we could do a tech industry detox. For more information, visit www.softwaresecuritygurus.com. We Hack Purple: https://wehackpurple.com/ --- Send i…
…
continue reading
1
#11: Patrick Debois, the Godfather of DevOps
27:58
27:58
Play later
Play later
Lists
Like
Liked
27:58
In episode 11 of Software Security Gurus, Matias chats to Patrick Debois, affectionately referred to as, "the Godfather of DevOps". He is also the creator of the global conference series, DevOpsDays. For more information, visit www.softwaresecuritygurus.com. Visit DevOpsDays: https://devopsdays.org/about/ --- Send in a voice message: https://podcas…
…
continue reading
1
#10: Open source and who should take responsibility for security, with Rami Sass
21:27
21:27
Play later
Play later
Lists
Like
Liked
21:27
In this interview, he chats with Rami Sass, co-founder and CEO at WhiteSource. Unsurprisingly, they discuss all things open source security. They reflect on how open source has changed in the past ten years, the compliance implications of using open source components in software, and the disconnect that can often happen between the tech and legal d…
…
continue reading
1
#9: Security issues at the SVP level, with John Stewart
34:43
34:43
Play later
Play later
Lists
Like
Liked
34:43
In episode 9 of the Software Security Gurus webcast, Matias sits down with John Stewart, former SVP and Chief Trust & Safety Officer at Cisco. They discuss security issues at the SVP level of a large organization, as well as the role diversity plays in building an amazing team that drives businesses forward. For more information, or to nominate a g…
…
continue reading
1
#8: The rise of the developer in security programs, with Guy Podjarny
28:31
28:31
Play later
Play later
Lists
Like
Liked
28:31
Hello and welcome to episode 8 of Software Security Gurus, with Matias Madou. In this interview, he chats with Guy Podjarny, Co-Founder and President at Snyk Security. They discuss scanning tools, and the rise of the developer in security programs. He also reveals his experiences in startup, and what he looks for in a great company. For more inform…
…
continue reading
1
#7: Key takeaways from attending 50 (!) conference talks, with Clint Gibler
24:21
24:21
Play later
Play later
Lists
Like
Liked
24:21
Hello and welcome to episode 7 of Software Security Gurus, with Matias Madou. In this interview, he chats with Clint Gibler, security consultant, and owner of the TL;DR Sec blog. They discuss his love/hate relationship with static analysis and the available solutions, as well as what he learned from attending 50 conference talks. Also tune in for d…
…
continue reading
1
#6: Lessons learned in the SDLC with Steve Lipner
27:14
27:14
Play later
Play later
Lists
Like
Liked
27:14
Hello and welcome to episode 6 of Software Security Gurus, with Matias Madou. In this interview, he chats with Steve Lipner, software security expert, and founder of SAFEcode.org. They discuss his influential book, Security Development Lifecycle, and the changes seen in the fifteen years since its release. With diversity in programming languages a …
…
continue reading
1
#5: The pitfalls on the quest to a thriving AppSec environment, with Fredrick "Flee" Lee
31:55
31:55
Play later
Play later
Lists
Like
Liked
31:55
Welcome to the Software Security Gurus webcast with Matias Madou. In episode 5, Matias interviews Fredrick "Flee" Lee, a long-time cybersecurity expert and Chief Security Officer at Gusto. They discuss the potential pitfalls of a thriving AppSec environment, including efficient training, best practices, and the lack of focus on custom rule-writing.…
…
continue reading
1
#4: Adopting more resilient security processes with Aaron Bedra
23:59
23:59
Play later
Play later
Lists
Like
Liked
23:59
Welcome to episode 4 of Software Security Gurus with Matias Madou. In this interview, he chats with Aaron Bedra, senior software engineer and security industry expert. Aaron discusses his background in regulated industries, as well as his insights on protecting data from some overzealous regulators that attempt to legislate weakened encryption proc…
…
continue reading
1
#3: Nurturing software engineering teams, and the future of security tooling with Dr. Brian Chess
21:49
21:49
Play later
Play later
Lists
Like
Liked
21:49
In this interview, he chats with Dr. Brian Chess, cybersecurity expert and former Chief Scientist at Fortify Software. Together, they discuss industry shifts with Agile and DevOps, as well as the future of scanning tools and static analysis in the software development lifecycle. Dr. Chess also discusses his process when it comes to nurturing softwa…
…
continue reading
1
#2: Future movements and investment trends in cybersecurity, with Dr. Chenxi Wang
25:34
25:34
Play later
Play later
Lists
Like
Liked
25:34
Welcome to the Software Security Gurus webcast with Matias Madou. In this episode, Matias interviews Dr. Chenxi Wang, cybersecurity expert and founder of Rain Capital, a venture capital firm with a focus on cyber-related startups. They discuss everything from their shared academic backgrounds, to future movements in the security industry, including…
…
continue reading
1
#1: The history, present, and future of software security with Dr. Gary McGraw
27:04
27:04
Play later
Play later
Lists
Like
Liked
27:04
Welcome to the Software Security Gurus webcast with Matias Madou. In this inaugural episode, Matias interviews Dr. Gary McGraw, one of the godfathers of software security and founder of the Berryville Institute of Machine Learning. They discuss the history, present, and future of software security, as well as how these principles may apply to the n…
…
continue reading
