Anshuman Bhartiya

Latest

• The Boring AppSec Podcast S2E10 - Vivek Ramachandran
  March 12, 2025
• The Boring AppSec Podcast S2E09 - Ali Mesdaq
  March 3, 2025
• The Boring AppSec Podcast S2E08 - Ankita Gupta
  February 24, 2025
• The Boring AppSec Podcast S2E07 - Jonathan Cran
  February 18, 2025
• The Boring AppSec Podcast S2E06 - Vibhav Sreekanti
  February 11, 2025
• The Boring AppSec Podcast S2E05 - Drew Dennison
  February 3, 2025
• The Boring AppSec Podcast S2E04 - Varun Badhwar
  January 28, 2025
• The Boring AppSec Podcast S2E03 - Robert Wood
  January 21, 2025
• The Boring AppSec Podcast S2E02 - Dustin Lehr
  January 13, 2025
• The Boring AppSec Podcast S2E01 - Jimmy Mesta
  January 6, 2025
• How to build a defensive AI security agent with RAG
  January 3, 2025
• How to build an offensive AI security agent
  December 13, 2024
• The Future of Application Security: Integrating LLMs and AI Agents into Manual Workflows
  October 23, 2024
• The Boring AppSec Podcast S1E10 - Future Security Predictions
  May 23, 2024
• The Boring AppSec Podcast S1E09 - Incidents
  May 13, 2024
• The Boring AppSec Podcast S1E08 - Bug Bounties Part 2
  April 22, 2024
• The Boring AppSec Podcast S1E07 - Hiring in Security
  April 15, 2024
• The Boring AppSec Podcast S1E06 - Vulnerability Management
  April 8, 2024
• The Boring AppSec Podcast S1E05 - Threat Modeling
  April 1, 2024
• The Boring AppSec Podcast S1E04 - Running a lean AppSec team
  March 25, 2024
• The Boring AppSec Podcast S1E03 - Bug Bounties
  March 18, 2024
• The Boring AppSec Podcast S1E02 - First Security Hire
  March 11, 2024
• The Boring AppSec Podcast S1E01 - Asset Inventory
  March 4, 2024
• A Guide To Identify Authorization Vulnerabilities At Scale Using Semgrep
  October 5, 2022
• A Guide On Implementing An Effective SAST Workflow
  August 18, 2022
• A Lightweight Approach To Implement Secure Software Development LifeCycle (Secure SDLC)
  August 12, 2022
• Product Security Roadmap
  August 5, 2022
• Building a Product Security program from scratch
  July 25, 2022
• Ability to send payment requests inspite of being blocked by the recipient
  February 8, 2016
• A CSRF protection bypass technique
  April 30, 2015
• A bug in Facebook that violated my privacy
  December 23, 2014
• Analysis of the BrowserStack breach - A classic example of "Pivoting in the Clouds"
  November 13, 2014
• Security issues with friction-less signup flows
  July 16, 2014
• Performing code review on shell scripts
  September 26, 2013