Description

Application security has never been more critical, but are we focusing on the wrong things? In this episode of AppSec.FM, Jerry Hoff sits down with Robert RSnake Hansen to explore the true relevance of AppSec in the age of CVEs, compliance, and adversaries who are evolving faster than ever.

Highlights:

• Why most security risk comes from a small subset of CVEs.
• The gap between compliance frameworks and real security outcomes.
• How adversaries actually prioritize targets (hint: money).
• The cultural factors that shape AppSec debates.
• Why vulnerability management needs more data-driven approaches.
• The impact of LLMs on modern cyber attacks.
• Practical steps for defending web applications.

Guest links:

https://www.linkedin.com/in/roberthansen3/

https://www.rootevidence.com/

AppSec.FM is the podcast for application security professionals, hosted by Jerry Hoff. Subscribe on Apple Podcasts, Spotify, or at appsec.fm.