Buu Lam and Jason Rahm talk about show updates and some recent news in our weekly flagship community show.

DevCentral Connects Ep. 102

The Deepest of Deepfakes - DevCentral Connects - Ep. 102

Episode 103: Buu Lam and Aubrey King talk with Steve Gorman and Matt Mabis about the extreme performance capabilities of BIG-IP VE running on Dell Server hardware.

We also talked about ChatGPT, hacking cars through the SiriusXM connectivity platform.

Show notes and further news to be discussed can be found here: https://community.f5.com/t5/dcc-forum/devcentral-connects-episode-103-december-6-2022/m-p/305401

⬇️⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️

DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems - together.

Find all our platform links ⬇️ and follow our Community Evangelists! 👋

➡️ DEVCENTRAL: https://community.f5.com 
➡️ YOUTUBE: https://youtube.com/devcentral 
➡️ LINKEDIN: https://www.linkedin.com/showcase/f5-devcentral/ 
➡️ TWITTER: https://twitter.com/devcentral 

Your Community Evangelists: 
👋 Jason Rahm: https://www.linkedin.com/in/jrahm/ | https://twitter.com/jasonrahm 
👋 Peter Silva: https://www.linkedin.com/in/psilvas/ | https://twitter.com/psilvas 
👋 Buu Lam: https://www.linkedin.com/in/buulam/ | https://twitter.com/buulam
👋 Aubrey King: https://www.linkedin.com/in/aubreyking | https://twitter.com/aubreykingf5

DevCentral Connects Ep. 103

Dude You Got a Dell w/Steve Gorman, Matt Mabis - DevCentral Connects - Ep. 103

If you're still running TMOS 13.1, it's time to move forward. Tom Atkins joins Buu Lam to discuss F5's software lifecycle policy and where in the lifecycle we are at with TMOS 13.1. He'll also be sticking around to talk about the latest in industry news!

Show notes and further discussion: https://community.f5.com/t5/dcc-forum/devcentral-connects-episode-104-december-13-2022/m-p/305898

⬇️⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️

DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems - together.

Find all our platform links ⬇️ and follow our Community Evangelists! 👋

➡️ DEVCENTRAL: community.f5.com
➡️ YOUTUBE: youtube.com/devcentral
➡️ LINKEDIN: www.linkedin.com/showcase/f5-devcentral/
➡️ TWITTER: twitter.com/devcentral

Your Community Evangelists:
👋 Jason Rahm: www.linkedin.com/in/jrahm/ | twitter.com/jasonrahm
👋 Peter Silva: www.linkedin.com/in/psilvas/ | twitter.com/psilvas
👋 Buu Lam: www.linkedin.com/in/buulam/ | twitter.com/buulam
👋 Aubrey King: www.linkedin.com/in/aubreyking | twitter.com/aubreykingf5

DevCentral Connects Ep. 104

Your TMOS 13.1 Must Go w/Tom Atkins - DevCentral Connects - Ep. 104

If you've been wondering what the rest of the industry is thinking when it comes to their technology choices, dev environments and tool usage, the team at SlashData teamed up with us to research this and publish the NGINX 2022 State of App and API Delivery Report! Jenn Gile, Head of Product Marketing within NGINX will join Buu Lam to discuss the results and then chat about the industry!

NGINX Report: https://www.nginx.com/blog/2022-nginx...

DevCentral is F5's global technical User Community. DevCentral Connects is our weekly live stream and podcast where we discuss the latest happenings within the F5 Community as well as the broader IT industry!

⬇️⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️

DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems - together.

Find all our platform links ⬇️ and follow our Community Evangelists! 👋

➡️ DEVCENTRAL: https://community.f5.com 
➡️ YOUTUBE: https://youtube.com/devcentral 
➡️ LINKEDIN: https://www.linkedin.com/showcase/f5-... 
➡️ TWITTER: https://twitter.com/devcentral 

Your Community Evangelists: 
👋 Jason Rahm: https://www.linkedin.com/in/jrahm/ | https://twitter.com/jasonrahm 
👋 Peter Silva: https://www.linkedin.com/in/psilvas/ | https://twitter.com/psilvas 
👋 Buu Lam: https://www.linkedin.com/in/buulam/ | https://twitter.com/buulam
👋 Aubrey King: https://www.linkedin.com/in/aubreyking | https://twitter.com/aubreykingf5

DevCentral Connects Ep. 105

The State of App and API Delivery w/Jenn Gile - DevCentral Connects - Ep. 105

As we close out 2022, Buu Lam takes you through the journey that DevCentral went through as we sparked excitement throughout the Community with our new platform, ventured to conferences and launched new ways to connect with you all.

Show thread: https://community.f5.com/t5/dcc-forum...

DevCentral is F5's global technical User Community. DevCentral Connects is our weekly live stream and podcast where we discuss the latest happenings within the F5 Community as well as the broader IT industry!

DevCentral Connects Ep. 106

Our Journey Through 2022 - DevCenral Connects - Ep. 106

Buu Lam welcomes Aubrey King to talk about what's new in the world of Information Security. As we kick off 2023, you can look forward to staying up to date on infosec with all of Aubrey's content.

We also touched on the LastPass breach, Southwest's IT issues, and Samsung's Android app-signing keys being exposed.

Show thread: https://community.f5.com/t5/dcc-forum/devcentral-connects-episode-107-january-3-2023/m-p/307270

DevCentral is F5's global technical User Community. DevCentral Connects is our weekly live stream and podcast where we discuss the latest happenings within the F5 Community as well as the broader IT industry!

⬇️⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️

DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems - together.

Find all our platform links ⬇️ and follow our Community Evangelists! 👋

➡️ DEVCENTRAL: https://community.f5.com 
➡️ YOUTUBE: https://youtube.com/devcentral 
➡️ LINKEDIN: https://www.linkedin.com/showcase/f5-devcentral/ 
➡️ TWITTER: https://twitter.com/devcentral 

Your Community Evangelists: 
👋 Jason Rahm: https://www.linkedin.com/in/jrahm/ | https://twitter.com/jasonrahm 
👋 Peter Silva: https://www.linkedin.com/in/psilvas/ | https://twitter.com/psilvas 
👋 Buu Lam: https://www.linkedin.com/in/buulam/ | https://twitter.com/buulam
👋 Aubrey King: https://www.linkedin.com/in/aubreyking | https://twitter.com/aubreykingf5

DevCentral Connects Ep. 107

We Need a Family Cybersecurity Day w/Aubrey King - DevCentral Connects - Ep. 107

Independant Cloud Analyst, Sarbjeet Johal, joins Buu Lam, to share key highlights from his recent trip to CES, the Consumer Electronics Show. We'll see how upcoming consumer technology is intersecting with the enterprise cloud technology that we're building today.

Connect with Sarbjeet

Twitter: https://twitter.com/sarbjeetjohal
LinkedIn: https://www.linkedin.com/in/sarbjeetjohal/
Web: https://www.sjohal.com/

Show thread: https://community.f5.com/t5/dcc-forum/ces-highlights-consumer-tech-meets-cloud-compute-w-sarbjeet/m-p/307990#M183

DevCentral is F5's global technical User Community. DevCentral Connects is our weekly live stream and podcast where we discuss the latest happenings within the F5 Community as well as the broader IT industry!

⬇️⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️

DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems - together.

Find all our platform links ⬇️ and follow our Community Evangelists! 👋

➡️ DEVCENTRAL: https://community.f5.com 
➡️ YOUTUBE: https://youtube.com/devcentral 
➡️ LINKEDIN: https://www.linkedin.com/showcase/f5-devcentral/ 
➡️ TWITTER: https://twitter.com/devcentral 

Your Community Evangelists: 
👋 Jason Rahm: https://www.linkedin.com/in/jrahm/ | https://twitter.com/jasonrahm 
👋 Peter Silva: https://www.linkedin.com/in/psilvas/ | https://twitter.com/psilvas 
👋 Buu Lam: https://www.linkedin.com/in/buulam/ | https://twitter.com/buulam
👋 Aubrey King: https://www.linkedin.com/in/aubreyking | https://twitter.com/aubreykingf5

Consumer Tech Meets Cloud Compute at CES w/Sarbjeet Johal - DevCentral Connects - Ep 109

A theme song for the forthcoming podcast called, "The Local Loop," for Service Provider Awareness. It's meant for voice-overs, so don't expect anything too complex. Surprisingly ear-wormy.

The Local Loop

The Local Loop Theme Song

With Gartner predicting a rise in zero-trust implementations over the coming years, authentication becomes the cornerstone of making applications available for all. Yet, authentication is not always easy. Buu Lam will be joined by Dan Moore, Head of Developer Relations at FusionAuth to have a chat about how developers can take control of authentication.

https://community.f5.com/t5/dcc-forum/apis-and-access-tokens-like-peanut-butter-and-jelly-devcentral/m-p/308950#M187

DevCentral is F5's global technical User Community. DevCentral Connects is our weekly live stream and podcast where we discuss the latest happenings within the F5 Community as well as the broader IT industry!

⬇️⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️

DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems - together.

Find all our platform links ⬇️ and follow our Community Evangelists! 👋

➡️ DEVCENTRAL: https://community.f5.com 
➡️ YOUTUBE: https://youtube.com/devcentral 
➡️ LINKEDIN: https://www.linkedin.com/showcase/f5-devcentral/ 
➡️ TWITTER: https://twitter.com/devcentral 

Your Community Evangelists: 
👋 Jason Rahm: https://www.linkedin.com/in/jrahm/ | https://twitter.com/jasonrahm 
👋 Peter Silva: https://www.linkedin.com/in/psilvas/ | https://twitter.com/psilvas 
👋 Buu Lam: https://www.linkedin.com/in/buulam/ | https://twitter.com/buulam
👋 Aubrey King: https://www.linkedin.com/in/aubreyking | https://twitter.com/aubreykingf5

APIs and Access Tokens, Like Peanut Butter and Jelly - DevCentral Connects - Ep111 - 01.31.23

Want to automate the management of your TLS certificates on your F5 BIG-IP deployments? Buu Lam will be joined by Sebastian Maniak to go over how you can do that using a combination of GitHub Actions and Terraform on this week's DevCentral Connects!

Manage TLS certs on F5 BIG-IP with GitHub Actions & Terraform - DevCentral Connects Ep113 Feb 14 '23

Are you looking to pass the Certified Kubernetes Administrator exam? Well, Jason Rahm just passed it and he's going to share with you exactly how he went about doing so on his first attempt! Buu and Jason will also be joined by Michael O'Leary to discuss how effective study groups can be and also how you can get involved in one. Join live on Tuesday, April 4 if you want to ask any questions of these two certified gentlemen.

How to Pass the CKA Exam w/Michael O'Leary - DevCentral Connects - Ep120 - April 4, 2023

AI is making its way into use cases everywhere. We've seen it generate its own content but can we use it to diagnose and repair technology for us? Kyle Forster and Shea Stewart will be joining Buu to discuss ways they're seeing AI being applied to troubleshooting complex systems. Join them live, Tuesday May 9th at 8:30AM Pacific.

Can AI assist you in troubleshooting? Kyle Forster, Shea Stewart - DevCentral Connects - May 9, 23

App modernization sounds like a great idea but when the project starts, you'll undoubtedly run into some stumbling blocks. JJ Asghar has seen it first hand and will join Buu to share those stumbling blocks and the lessons learned. Tune in Tuesday morning at 8:30AM Pacific on May 30 to hear all about it!

Stumbling Blocks in App Modernization w JJ Asghar - DevCentral Connects 128 - May 30, 2023

In this episode our hosts dive into what’s going on in the WebAssembly community following Wasm.IO and KubeCon before they are joined by Tim Hinrichs and Torin Sandall of Styra to discuss Open Policy Agent (OPA) and WebAssembly. Listen in to find out updates regarding the WebAssembly registry, get a rundown on Open Policy Agent and what led it to Wasm, the WebAssembly integration challenges OPA’s faced, interesting applications of OPA and Wasm, and so much more!

**SPECIAL NOTE: Since this podcast recording, Linux Foundation has announced that WasmCon is being moved to November.

Dive into our previous episode on Warg with Danny Macovei: https://www.youtube.com/watch?v=bH66SCfAw1I&list=PLyqga7AXMtPNV1zr2aTWEegep0FQU6Qvj&index=5

Chapters:
1:19 – What’s going on in the world of WebAssembly?
2:16 – Developments from Wasm.IO and KubeCon
3:10 – WA.dev and the Warg Protocol
5:42 –What is Open Policy Agent and why is it important?
6:44 – OPA implications for end users
10:51 – State of OPA community
12:40 – What led OPA to WebAssembly
17:00 – From a modular approach, why run Rego policies in other language contexts?
19:52 – How do you compile OPA down to Wasm?
21:42 – How self-contained is OPA and the Wasm models?
25:31 – Integration challenges with Wasm
30:12 – Styra and what it adds on top of Open Policy Agent
 
For more from F5's Office of the CTO visit the following sites: 

Blogs - https://www.f5.com/company/octo
Reports - https://www.f5.com/services/resources/reports

Meet Your Hosts:
Joel Moses | https://www.linkedin.com/in/joelmoses/ | https://community.f5.com/t5/user/viewprofilepage/user-id/398372
Oscar Spencer | https://twitter.com/oscar_spen | https://www.linkedin.com/in/oscarspen/
Matthew Yacobucci | https://www.linkedin.com/in/matthew-yacobucci-323b4b2/

⬇️⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️

DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems - together.

Find all our platform links ⬇️ and follow our Community Evangelists! 👋

➡️ DEVCENTRAL: https://community.f5.com 
➡️ YOUTUBE: https://youtube.com/devcentral 
➡️ LINKEDIN: https://www.linkedin.com/showcase/f5-devcentral/ 
➡️ TWITTER: https://twitter.com/devcentral 

Your Community Evangelists: 
👋 Jason Rahm: https://www.linkedin.com/in/jrahm/ | https://twitter.com/jasonrahm 
👋 Buu Lam: https://www.linkedin.com/in/buulam/ | https://twitter.com/buulam
👋 Aubrey King: https://www.linkedin.com/in/aubreyking | https://twitter.com/aubreykingf5

Wasm & Open Policy Agent with Styra – Ep 7 – WebAssembly Unleashed

Welcome to our special year-end episode of AppSec Monthly, a DevCentral podcast! In this exciting edition, we join forces with the experts at F5 Labs to bring you our highly anticipated cybersecurity predictions for the year ahead. Our panel, including David Warburton, Aubrey King, and Megazone, dives deep into the trends and emerging threats that are set to shape the cybersecurity landscape in 2025. Whether you're an IT professional, a security enthusiast, or just curious about the future of application security, this episode is packed with insights you won't want to miss.

During this episode, we cover a wide range of topics, from the increasing sophistication of cyberattacks to the evolving role of AI in security. We reflect on the accuracy of last year’s predictions and discuss the implications of new technologies and geopolitical shifts on the security environment. With engaging discussions, expert analyses, and a bit of holiday cheer, this episode is the perfect way to stay informed and prepared for the challenges and opportunities of the coming year. So grab your earbuds, get comfortable, and join us for an insightful journey into the future of cybersecurity with AppSec Monthly. Don’t forget to like, subscribe, and leave a review on your favorite platform to stay updated with our latest episodes!

Cybersecurity Predictions 2025: Insights from F5 Labs  | December Special AppSec Monthly Ep.26

Welcome to AI Friday! In this week's episode, we're diving deep into the fascinating and sometimes controversial world of agentic AI. We'll explore the concept of AI having the ability to make autonomous decisions and how this could impact various fields, from aligning AI ethics to the potential for AI to demonstrate both beneficial and malevolent behaviors. Our discussion includes insights on AI alignment, red teaming, and the latest advancements in quantum computing, all aimed at bringing the next level of intelligence to AI systems.

Join Aubrey King and Byron McNaught as they host an engaging conversation with a panel of experts including Ken Arora, Chuck Herrin, Pete Scheffler, and Joel Moses. We'll also touch on the importance of community feedback, the role of ethical considerations in AI development, and the intriguing possibilities that lie ahead. Remember to like, subscribe, and share your thoughts with us in the comments. Happy holidays and see you next year!

Check DevCentral for the articles:
https://community.f5.com/kb/technicalarticles/exploring-agentic-ai-ethics-quantum-computing-and-the-future-of-ai---ai-friday-p/338686

00:00 Introduction
04:46 Agentic AI In The Workplace
13:20 AI Alignment Faking
21:21 Chatbot !=Therapist
30:09 Red Teaming AI
37:41 Google Quantum Willow Chip
47:36 12 Days of OpenAI
49:47 Model Context Protocol
53:19 Outro

Exploring Agentic AI: Ethics, Quantum Computing, and the Future of AI | AI Friday Podcast

In this enlightening episode, Aubrey catches up with Austin Geraci and Josh Brooks from WorldTech IT. They delve into the latest advancements in AI Gateway technology and its implications for AI security. The discussion covers a broad range of topics, from the practical applications of AI in various industries to the challenges organizations face in managing AI security. The guests share their experiences and insights from the field, highlighting the importance of understanding and implementing AI safely and effectively.

Austin and Josh emphasize the significance of the AI Gateway, a specialized API gateway designed to handle generative AI traffic. They explain how this technology can help organizations secure their AI applications by providing robust governance and visibility, ensuring compliance with internal policies. The conversation also touches on the development of their innovative solution, ChatGPT in a Box, which aims to simplify AI deployment for businesses. With a focus on making AI accessible and secure, this episode offers valuable insights for anyone interested in the future of AI technology and its integration into everyday business operations.

How WorldTech IT Works With F5 To Deliver Complete AI Solutions

Welcome to the latest episode of AppSec Now, a DevCentral podcast dedicated to the ever-evolving world of application security. In this episode, Chase takes the reins while Aubrey is away, joined by Malcolm Heath, a principal researcher at F5 Labs, and the illustrious MegaZone, a principal security engineer on the SIRT team.

We dive deep into the recent Apache Camel remote code execution vulnerability, discussing the initial panic and the eventual revelation that it was a medium-severity CVE with narrow impact. We also explore the ongoing debate on government backdoors in end-to-end encryption, with insights on the recent stances of Signal and Apple. Finally, we shed light on the recent DDoS attack on X (formerly Twitter), attributed to Dark Storm, and discuss the complexities of attributing such attacks. Stay informed and up-to-date with the latest trends and threats in the AppSec world!

References:
https://community.f5.com/kb/security-insights/appsec-camels-typhoons-and-backdoors/340217

00:00 Introduction
00:59 Apache Camel RCE
10:09 Silk Typhoon
16:11 Government Encryption Backdoors
25:51 X (Twitter) DDoS
30:25 VulnCon Comin' Up!
32:16 Outro

Latest in AppSec: Apache Camel RCE, X DDoS, Silk Typhoon and Encryption Debates

Welcome to AI Friday! In this episode, we dive into the latest developments in Generative AI Security, discussing the implications and challenges of this emerging technology. Join Aubrey from DevCentral and the OWASP GenAI Security Project, along with an expert panel including Byron, Ken, Lori, and special guest Steve Wilson, as they explore the complexities of AI in the news and the evolving landscape of AI security.

We also take a closer look at the fascinating topic of vibe coding, its impact on software development, and the transformative potential of AI-assisted coding practices. Whether you're a developer, security professional, or an AI enthusiast, this episode is packed with insights and expert opinions that you won't want to miss. Don't forget to like, subscribe, and join the conversation!

00:00 Introduction
02:16 Agentic Risks vs. Rewards
04:19 Steve Wilson & OWASP GenAI Security Project
18:25 DeepSeek & Inference Performance
28:41 Vibe Coding 
51:01 Outro

AI Friday LIVE w/ Steve Wilson - Vibe Coding, Agentic AI Security And More

Welcome to the 31st episode of AppSec Now! This week, our hosts Aubrey, David Warburton, Chase Abbott, and MegaZone get into some hot topics in the world of application security. Our focus is on the latest F5 Labs Advanced Persistent Bots report, highlighting the ever-evolving landscape of bot attacks and the importance of robust mitigation strategies. We analyze Google's hefty $32 million acquisition of Wiz, exploring what this move means for the tech giant's security posture and its potential impact on the cloud security market.

We also tackle the sensitive topic of personal data with a focus on 23andMe's bankruptcy and the critical steps you should take to safeguard your genetic information. Finally, we explore the emerging trend of "vibe coding" and its implications for both seasoned developers and novices. Join us for these engaging discussions and more, and don't forget to like, subscribe, and leave a comment with your thoughts!

00:00 Introduction
01:08 Google / Wiz Deal
04:57 Electrical Fire Closes Heathrow
12:39 23andMe Bankrupt! Delete data. 
19:10 Advance Persistent Bots Report
32:06 Vibe Coding Roundtable
42:37 Outro

Vibe Coding, F5 Labs Bot Report, Google Buys Wiz And More | AppSec Now Ep 31

Join Joel Moses, Oscar Spencer, and Matt Yacobucci as they discuss the latest news and recent developments in WebAssembly, such as Zig 0.140 and projects like running Linux inside a PDF file. This episode features special guest Nick Fitzgerald, a notable contributor to WasmTime and CraneLift, who explains the concept of garbage collection in programming. The discussion covers  garbage collection in the context of WebAssembly, diving into algorithms, their implications, and challenges in implementation. They also touch upon the future of WebAssembly in embedded systems and the broader applications of these technologies in various programming languages like Java and Python. Don't miss this engaging and informative episode!
	
Chapters: 
00:00 Welcome to WebAssembly Unleashed
00:57 What's interesting this week in WebAssembly? 
02:12 Linux PDF: A WebAssembly Feat
03:29 Understanding Garbage Collection with guest Nick Fitzgerald
05:20 Reference Counting vs Tracing Garbage Collection
	A Unified Theory of Garbage Collection paper: https://courses.cs.washington.edu/courses/cse590p/05au/p50-bacon.pdf
7:22 What's driving the push to get GC into WebAssembly right now?
10:25 What makes Garbage Collection implementation so difficult?
12:09 Challenges in Garbage Collection Implementation
15:19 Are you bound by the language runtime GC or by the Wasm runtime?
19:32 Challenges in Type Systems Implementation
22:59 Object-Oriented Hierarchies and Python
24:34 Garbage Collection Proposal Insights
31:35 Will the end users have extra work?
32:50 Can GC help with Ahead of time Compiling?
35:11 Fuzz Testing and Bug Fixing
36:05 Custom Page Size Proposal
38:03 Future of Garbage Collection Algorithms
	
Did you miss the WebAssembly Unleashed episode with Gilad Bracha? Check it out here:
What WebAssembly can learn from JAVA’s history | Ep5 | WebAssembly Unleashed https://youtu.be/BQjTShpa8VM?si=S4sHWZeRqVIbCdn_
	
For more from F5's Office of the CTO visit the following sites: 
Blogs -  https://www.f5.com/company/octo
Reports -  https://www.f5.com/services/resources/reports
	
Meet Your Hosts: 
Joel Moses | https://www.linkedin.com/in/joelmoses/ | https://community.f5.com/users/joel_moses/398372 
Oscar Spencer | https://twitter.com/oscar_spen | https://www.linkedin.com/in/oscarspen/ 
Matthew Yacobucci | https://www.linkedin.com/in/matthew-yacobucci-323b4b2/


The Future of WebAssembly Garbage Collection | Ep 17 | WebAssembly Unleashed

Gear up for another deep dive! In this episode of AI Friday, we've got the crew—Aubrey, Joel, Byron, and Pete—ready to unpack the latest in AI technology and hardware. Join us as we break down Google's groundbreaking Ironwood TPU, exploring its impressive potential and the math behind AI acceleration. We'll also examine OpenAI's brand-new Agent, Operator, discussing how effectively it can handle real-world tasks and possible security implications. As we look ahead, we dissect the cybersecurity threats anticipated for 2025, from ransomware to AI-powered attacks, and explore how defenders might keep pace with rapidly evolving threats. Grab your thinking caps and coffee—it's time for another deep dive into the world of AI.

00:00 Introduction
02:15 AI hardware fundamentals explained
13:28 Ironwood TPU
21:29 NVIDIA's Dynamo
31:05 OpenAI Operator
40:37 CyberSec challenges for 2025
53:02 Outro

Google Ironwood TPU, OpenAI Operator and Cybersecurity Challenges for 2025 Ep.15

Join our AppSec experts—Merlyn, Malcolm, MegaZone, and host Chase Abbott—as they dig into some of the latest stories shaking up the cybersecurity world. This week's AppSec Now explores an active campaign targeting Amazon EC2 instance metadata via SSRF vulnerabilities, and why that's a wider-reaching problem than you might think. We discuss Oracle's controversial handling of their cloud breach and the impact of trust in the disclosure process. 
Also in the mix: malicious NPM packages deployed by North Korean hackers, a sneaky Golang malware employing "click-fix" tactics for crypto theft, and a critical Apache Parquet remote code execution bug rated CVSS 10.0—but how worried should we really be?

🔗 Relevant Links Here:
https://community.f5.com/kb/security-insights/oracle-hack-north-korean-hackers-critical-flaw-in-apache/340708

00:00 Introduction
04:01 F5 Labs: AWS EC2 SSRF
10:44 Oracle Cloud Breach
16:44 Verizon iOS App Exposure
20:23 BeaverTail Malware via NPM
24:43 Golang Ghost Malware
28:34 Apache Parquet RCE - CVSS 10 !!!
34:12 Outro


Amazon EC2 SSRF Breach, Oracle Cloud Breach & Malicious NPM Packages Exposed

It's AI Friday! This week, we unpack the latest AI news and trends, including the top AI use cases for 2025, intriguing new developments from OpenAI, AI in nuclear safety with PG&E (what could possibly go wrong?), novel defenses against prompt injection attacks with CaMeL, and even LLM-powered conversations with dolphins. Join Aubrey, Joel, Ken, and Byron as they blend in-depth insights with good-natured humor. Don't miss out—like and subscribe for your weekly infusion of AI amazement!

00:00 Introduction
01:37 2025 Top AI Use Cases
09:55 Models Thinking With Images
10:47 Break Glass In Case Of SkyNet
15:14 PG&E - AI In Nuclear Reactor
21:48 Can A CaMeL Fix Prompt Injection?
29:16 DolphinGemma LLM??
35:39 Outro

2025 Top AI Use Cases, AI For Nuclear Safety & CaMeL Prompt Injection Fixes

Join Merlyn Chase, MegaZone, and Aubrey on this week’s AppSec Now podcast as they dive into the latest topics in application security! 🚀 

From the recent B-Sides Seattle conference to critical discussions on EV car hacking, cybersecurity quandaries, AI-generated passports bypassing KYC, and Japan’s groundbreaking Active Cyber Defense Bill—you don’t want to miss this one. Plus, learn how AppSecNow is keeping you ahead with insights  by F5 Labs and the F5 Security Incident Response Team.

Stay informed, stay secure—like, subscribe, and follow for all things AppSec!

00:00 Introduction
03:10 EV Car Hacking
12:25 AI Generated Passports
21:35 LLMs Do Not Trust Humans
28:31 Japan's Active Cyber Defense Bill
34:19 Outro

EV Car Hacking, AI-Generated Passports, & Japan’s Active Cyber Defense Bill

It's AI Friday and we're diving into the world of artificial intelligence like never before! 🎩 On this Hat Day edition (featuring NFL draft banter), we discuss fascinating topics like LLMs (Large Language Models) and their trust—or lack thereof—in humanity, Google's innovative Agent-to-Agent (A2A) protocol, and how politeness towards AI incurs millions in operational costs. We also touch on pivotal AI conversations around zero trust, agentic AI, and the dynamic collapse of traditional control and data planes.

Join us as we dissect how AI shapes the future of human interaction, enterprise-level security, and even animal communication. Don't miss out on this engaging, informative, and slightly chaotic conversation about cutting-edge advancements in AI. Remember to like, subscribe, and share with your community to ensure you never miss an episode of AI Friday!

00:00 Introduction
02:23 What Do LLMs Think Of Us?
15:26 At What Cost, Politeness?
25:33 Google Agent2Agent Protocol
35:57 Outro

LLMs And Trust, Google A2A Protocol And The Cost Of Politeness In AI: AI Friday

🔒 Welcome to this week’s episode of AppSecNow, the DevCentral podcast dedicated to all things application security! 🚨 This week, we unpack critical updates including:

💥 A zero-day SAP CVE with a CVSS score of 10—what it means, how it's being exploited, and what you can do to defend against it.
🛠️ A groundbreaking Parquet tool from F5 Labs that simplifies vulnerability testing for critical supply chain security issues.
Link: https://github.com/F5-Labs/parquet-canary-exploit-rce-poc-CVE-2025-30065
🌍 The EU Cyber Resilience Act—what it means for manufacturers, open-source stewards, and secure-by-design initiatives.

Learn how AppSec professionals leverage cutting-edge tools and protocols to tackle some of the biggest challenges in software security today. Whether you're prepping for RSA or managing zero trust architectures, this episode is packed with actionable insights!

✅ Like, subscribe, and follow to keep up with the latest in application security.

00:00 Introduction
02:20 Parquet Tool
06:30 VulnCon 2025
09:09 EU Cyber Resilience Act
16:45 CVE Program Chaos
20:29 Pay Your Tolls!
27:17 SAP Critical Vulnerability
29:18 Outro

Tackling CVE Chaos, Parquet Tool Insights, and EU Cyber Resilience Act Unpacked

Joins hosts Joel Moses and Oscar Spencer as they delve into the world of WebAssembly with special guest Andreas Rossberg, co-designer of the WebAssembly specification. Andreas shares insights on SpecTec, a domain-specific language designed to streamline and verify the WebAssembly specification. The discussion covers the evolution of SpecTec, its impact on WebAssembly proposals, and future possibilities for its application. Additionally, Andreas discusses his background in functional programming, challenges in compiler development, and the surprising uses of WebAssembly in the tech ecosystem. Whether you're a novice or a seasoned developer, this episode offers a comprehensive look into the future of WebAssembly and its growing influence in technology.

Chapters:
00:00 Welcome to WebAssembly Unleashed
01:20 Exciting WebAssembly Developments
02:34 Special Guest: Andreas Rossberg
04:35 Functional Programming Insights
11:37 WebAssembly Specification and SpecTec
22:02 Test Matrix Generation for WebAssembly
23:49 Will SpecTec make WebAssembly proposals move any faster?
24:57 Reference Interpreter and Meta Interpreter
27:56 SpecTec's Potential Applications
30:54 Comparing SpecTec with Other Tools
32:34 Motivation and Commitment to WebAssembly and SpecTec
36:10 Surprising Uses and Future of WebAssembly
39:38 What area should the WebAssembly community work on next?

For more from F5's Office of the CTO visit the following sites: 
Blogs -  https://www.f5.com/company/octo
Reports -  https://www.f5.com/services/resources/reports

Meet Your Hosts: 
Joel Moses | https://www.linkedin.com/in/joelmoses/ | https://community.f5.com/users/joel_moses/398372 
Oscar Spencer | https://twitter.com/oscar_spen | https://www.linkedin.com/in/oscarspen/ 
Matthew Yacobucci | https://www.linkedin.com/in/matthew-yacobucci-323b4b2/

WebAssembly's SpecTec | Ep 18 | WebAssembly Unleashed

Join Aubrey and Byron at RSA Conference 2025 as they dive into transformative topics like artificial intelligence, red teaming strategies, and post-quantum cryptography. From exploring groundbreaking OWASP sessions to analyzing emerging AI threats, this episode highlights key insights that shape the future of cybersecurity. Discover the challenges in red team AI testing, the implications of APIs in multi-cloud environments, and how quantum-resistant cryptography is rising to meet AI-driven threats. Don't miss this exciting recap of RSA 2025!

00:00 Introduction
00:47 Personal Conference Highlights
03:07 PQC Meanderings
05:44 AI Red Teaming
11:21 OWASP Compass / CISO Checklist
13:03 A Prompt Injection Tale
14:03 Protect Your System Prompts
15:00 Beyond The Hype Cycle?
17:17 From The Show Floor
19:03 Dreadnode Dyana Sandbox
21:35 More From The Floor 
22:53 Deepfakes
25:38 The Allure Of Using Obvious AI
26:22 Gonna Take Crucible For A Spin
27:12 Final Conference Thoughts
30:45 Outro

AI, Red Teaming, and Post-Quantum Cryptography: Key Insights from RSA 2025

Join hosts Joel Moses, Oscar Spencer, and Matt Yacobucci as they dive deep into the world of formal verification with special guest Chris Fallin. In this episode of WebAssembly Unleashed, the team discusses the importance of formal verification in software development, particularly for WebAssembly. Chris, a co-author of the Cranelift compiler and Mozilla alum, explains the concept of formal verification, its significance, and how it can be applied to ensure software correctness and security. The conversation covers a range of topics including type safety, the use of SMT solvers, the challenges in formally verifying compilers, and the potential role of AI in generating formally verified code. Don't miss this insightful discussion if you're keen to learn about cutting-edge techniques to make software more reliable and secure.

00:00 Welcome to WebAssembly Unleashed
00:57 Community Updates
01:41 Guest Introduction: Chris Fallin
02:18 What is formal verification and why is it important?
03:10 Formal Verification in WebAssembly
06:28 Challenges and Real-World Applications
07:52 Tools and Techniques for Verification
20:22 Future Directions and Broader Implications
28:21 AI and Formal Verification
30:44 Lack of Formal Verification Consequences

Did you miss the WebAssembly Unleashed episode 16 with Bruce Gain? Check it out here: https://youtu.be/Gjd8l1Sz9qY?si=QGixwObXJgvex9DS

For more from F5's Office of the CTO visit the following sites: 
Blogs -  https://www.f5.com/company/octo
Reports -  https://www.f5.com/services/resources/reports

Meet Your Hosts: 
Joel Moses | https://www.linkedin.com/in/joelmoses/ | https://community.f5.com/users/joel_moses/398372 
Oscar Spencer | https://twitter.com/oscar_spen | https://www.linkedin.com/in/oscarspen/ 
Matthew Yacobucci | https://www.linkedin.com/in/matthew-yacobucci-323b4b2/

Unlocking the Secrets of Formal Verification in WebAssembly | Ep 19 | WebAssembly Unleashed

DevCentral is F5's online Community of Technical Peers dedicated to learning, exchanging ideas, and solving problems – Together.

We host audio podcasts created by our Community, for our Community.

Popular tracks by F5 DevCentral Community