Episode 158 - More Supply Chains, 2021 Top Ten, CORS + CSRF

18/01/2022
Episode 158 - More Supply Chains, 2021 Top Ten, CORS + CSRF

Listen "Episode 158 - More Supply Chains, 2021 Top Ten, CORS + CSRF"

Episode Synopsis

Yet another episode. Always something to discuss. Ken and Seth talk about a recent article covering *theoretical* software supply chain exploits and how this will be a big thing this year. A review of Portswigger's nominations for Top Ten Web Hacking techniques of 2021. Finally, a discussion on the upcoming Chrome changes to do pre-flight requests for non-routable IP address CSRF requests.

More episodes of the podcast Absolute AppSec