{"podcast":{"title":"Security Weekly Podcast Network (Audio)","slug":"security-weekly-podcast-network-audio-319755","podcast_index_feed_id":319755,"rss_url":"https://sites.libsyn.com/18678/rss","website_url":"http://securityweekly.com/","image_url":"https://static.libsyn.com/p/assets/3/4/f/d/34fd06c8777349ba27a2322813b393ee/SW_Cover_1920x1920.png","author":"Security Weekly Productions","episode_count":1000,"summary":"Welcome to the Security Weekly Podcast Network, your all-in-one source for the latest in cybersecurity! This feed features a diverse lineup of shows, including Application Security Weekly, Business Security Weekly, Paul's Security Weekly, Enterprise Security Weekly, and Security Weekly News. Whether you're a cybersecurity professional, business leader, or tech enthusiast, we cover all angles of the cybersecurity landscape. Tune in for in-depth panel discussions, expert guest interviews, and breaking news on the latest hacking techniques, vulnerabilities, and industry trends. Stay informed and secure with the most trusted voices in cybersecurity!","last_synced_at":"2026-07-29T18:17:17.151725+00:00","page_url":"https://stenobird.com/podcast/security-weekly-podcast-network-audio-319755"},"episode":{"title":"Securing Software's Journey with the OWASP SPVS - Ido Geffen, Rohan Ravindranath, Cameron W., Farshad Abasi - ASW #378","slug":"securing-software-s-journey-with-the-owasp-spvs-ido-geffen-rohan-ravindranath-cameron-w-farshad-abasi-asw-378","published_at":"2026-04-14T09:00:00+00:00","page_url":"https://stenobird.com/podcast/security-weekly-podcast-network-audio-319755/securing-software-s-journey-with-the-owasp-spvs-ido-geffen-rohan-ravindranath-cameron-w-farshad-abasi-asw-378","show_page_url":"https://stenobird.com/podcast/security-weekly-podcast-network-audio-319755","url":"http://sites.libsyn.com/18678/securing-softwares-journey-with-the-owasp-spvs-ido-geffen-rohan-ravindranath-cameron-w-farshad-abasi-asw-378","audio_url":"https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/pauldotcom/ASW_378_1--446e2fae-1a3b-4d52-ac39-c1d97cd2fe9d--audio-converted--25604727-e795-4baf-973c-6832125b96ac.mp3?dest-id=13427","summary":"It's one thing to write secure code, it's another to release it into the wild. That code needs to be designed, built, tested, released, and maintained. Farshad Abasi and Cameron Walters explain how the OWASP Secure Pipeline Verification Standard picks up from where ASVS left off, how it complements other supply chain security efforts like SLSA, and why they updated it with explicit coverage for AI. They show what goes into making a project relevant and -- most importantly -- successful at defending how supply chains are attacked. They're also looking for more feedback and participation! If you build software packages, consume software packages, or have an interest in helping organizations stay secure, check it out! Resources https://owasp.org/www-project-spvs/ https://github.com/OWASP/www-project-spvs/blob/main/1.5/Release Notes OWASP SPVS 1.5-AI-Pipeline-Security.md https://youtu.be/-WoqGDdivGw?si=kK5-csbnTw8Y4g2J -- The Story Behind OWASP SPVS https://slsa.dev Zero Trust That Actually Ships: Moving From Strategy Decks to Real Security Most enterprise organizations have been working at Zero Trust for years and fail to deliver truly secure environments. Rohan Ravindranath shares insights that Zappsec has gained from guiding the global teams that are succeeding at protecting their orgs. Discover the common pitfalls so you can deploy a solution that works. This segment is sponsored by Zappsec. Visit https://securityweekly.com/zappsecrsac to learn more about them! Cloning Attacker Tradecraft: Why AI Pentesting is Becoming Essential Enterprises ship code continuously, but most security validation still happens in snapshots. Novee CEO and co-founder Ido Geffen explains what “AI penetration testing” means, why it’s different from automated scanning, and why it’s becoming ess…","meta_description":"It's one thing to write secure code, it's another to release it into the wild. That code needs to be designed, built, tested, released, and maintained. Fa…","key_points":[],"chapters":[],"topics":[],"duration_seconds":4190,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/security-weekly-podcast-network-audio-319755/episodes/securing-software-s-journey-with-the-owasp-spvs-ido-geffen-rohan-ravindranath-cameron-w-farshad-abasi-asw-378/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/security-weekly-podcast-network-audio-319755/securing-software-s-journey-with-the-owasp-spvs-ido-geffen-rohan-ravindranath-cameron-w-farshad-abasi-asw-378.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}