ASW #204 - Larry Maccherone

<p>0-day vulnerabilities pose a high risk because cybercriminals race to exploit them and vulnerable systems are exposed until a patch is issued & installed. These types of software vulnerabilities can be found through continuous detection but even then may not always have a patch available. It’s important for software teams to set up tools that continually look for these types of flaws, as well as defenses that let software adapt itself to an evolving threat landscape. In this episode, we will discuss the ins and outs of 0-day vulnerabilities and what the future of managing them looks like.</p> <p>Segment Resources:</p> <p>Recent 0-day blog: <a href= "https://www.contrastsecurity.com/security-influencers/contrast-protect-eliminates-another-zero-day-headache"> https://www.contrastsecurity.com/security-influencers/contrast-protect-eliminates-another-zero-day-headache</a></p> <p>What is Contrast Security video: <a href= "https://www.youtube.com/watch?v=8FwY6zJX1ms">https://www.youtube.com/watch?v=8FwY6zJX1ms</a></p> <p>The Contrast Secure Code Platform video: <a href= "https://www.youtube.com/watch?v=k5CycR4R6bg">https://www.youtube.com/watch?v=k5CycR4R6bg</a></p> <p> </p> <p>This segment is sponsored by Contrast Security. Visit <a href= "https://securityweekly.com/contrast">https://securityweekly.com/contrast</a> to learn more about them!</p> <p> </p> <p>This week in the AppSec News: speculative execution attack with retbleed, CSRB's report on log4j, one-line lowercase action leads to a vuln, approaching SOC2 with secure engineering principles, free online Mac Malware book</p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/asw">https://www.securityweekly.com/asw</a> for all the latest episodes!</p> <p>Follow us on Twitter: <a href= "https://www.twitter.com/secweekly">https://www.twitter.com/secweekly</a></p> <p>Like us on Facebook: <a href= "https://www.facebook.com/secweekly">https://www.facebook.com/secweekly</a></p> <p> </p> <p>Show Notes: <a href= "https://securityweekly.com/asw204">https://securit