All the News -- Just Six Months Later - ASW #265

<p>We cover appsec news on a weekly basis, but sometimes that news is merely about the start of a new project, sometimes it's yet another example of a vuln class, and sometimes it's a topic we hope doesn't become a trend.</p> <p>So, what themes have we seen and where do we see them going? Here are a few headline topics that have alternately generated yays and yawns.</p> <ul> <li>CISA's Secure by Design and Secure by Default</li> <li>CVSS 4.0</li> <li>Generative AI</li> <li>MFA mandates</li> <li>Microsoft, Rust, and Memory Safety</li> <li>New TLDs</li> <li>OAuth</li> <li>OpenSSF and OWASP</li> </ul> <p>Show Notes: <a rel="noopener" target="_blank" href= "https://securityweekly.com/asw-265">https://securityweekly.com/asw-265</a></p>