Application Security Weekly

The Show

The Application Security Weekly podcast delivers interviews and news from the worlds of AppSec, DevOps, and all the other ways people find and fix software flaws. But not BugOps – that’s a terrible approach.

Join hosts Mike Shema, John Kinsella, and Kalyani Pawar on a journey through modern security practices for apps, clouds, containers, and more. We search for lessons in secure designs, secure defaults, and anything better than chasing the same vulns over and over again.

Check out the most recent one – ASW Episode 326. Then catch more at the show’s official page.

We record new episodes every Monday and post them early Tuesday Pacific Time.

Please take a moment to subscribe, give a thumbs up, and share on the socials!

Read more about ASW and the unique intros I create for every episode.

The Articles

The latest post is ASW Recap for March 2025.

The rest of the blog has a bit of writing from the last decade or so. Peruse the titles in the index.

If you like trivia about XSS payloads, take a look at my HTML injection quick reference.