Free Daily Podcast Summary
The DevSecOps Talks Podcast: Daily Summaries Delivered
by Mattias Hemmingsson, Julien Bisconti and Andrey Devyatkin
This is the show by and for DevSecOps practitioners who are trying to survive information overload, get through marketing nonsense, do the right technology bets, help their organizations to deliver value, and last but not the least to have some fun. Tune in for talks about technology, ways of working, and news from DevSecOps. This show is not sponsored by any technology vendor and trying to be as unbiased as possible. We talk like no one is listening! For good or bad :)
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- 1 weeks ago29 min
#115 - Julien Bisconti on Node2Shell, PHP and Patch Panic
A merged security fix does nothing for a service still running the vulnerable build. A week of Node2Shell, PHP and GitLab vulnerabilities puts deployment speed, container contents and public exposure under scrutiny. Andrey Devyatkin, Mattias Hemmingsson and returning co-host Julien Bisconti discuss patch delivery, minimal containers, private GitLab access, PHP maintenance and the certificate trust stores that browser updates do not reach. What you will learn Why patching main and patching production are different milestones Why removing a shell does not eliminate interpreter-based attacks How mesh networks can restrict access to self-hosted GitLab When static HTML and CSS can replace a small PHP site Why browser certificate updates leave server trust stores to maintain Full article and show notes: https://devsecops.fm/episodes/115/ Discuss the episode on LinkedIn DevSecOps Talks on YouTube
- 2 weeks ago19 min
#114 - Fridge Hacks and Security by Obscurity
A fridge controller exposed to the internet can put a supermarket's stock at risk. A password that changes every day offers little reassurance if anyone can calculate it. Andrey Devyatkin and Mattias Hemmingsson discuss refrigeration attacks, predictable passwords, AI-assisted reverse engineering, regex-based security checks and concerns about remote access to solar inverters. What you will learn Why hiding a password algorithm leaves predictable credentials exposed How VPN access and patching reduce risks to refrigeration controllers Why the hosts expect AI to help bypass regex-based checks How contractor-installed equipment can fall between security responsibilities Why remote access to solar inverters raises wider infrastructure concerns Full article and show notes: https://devsecops.fm/episodes/114/ Discuss the episode on LinkedIn DevSecOps Talks on YouTube
- 3 weeks ago40 min
#113 - Books, Juniors and Mattias’s Dark Factories
When AI handles implementation, a junior's first assignment might be approving code headed straight to production. Does that teach enough, or should learning start with the problem and the specification? Andrey Devyatkin, Paulina Dubas and Mattias Hemmingsson debate junior learning in Mattias's dark factory, scope control before AI implementation, practical education and the vocabulary engineers gain from books. What you will learn How Mattias connects GitHub workflows, Kubernetes and Berget AI Why senior oversight and release impact matter for junior reviewers How scope checks before planning help limit oversized changes How answering before asking Claude can indicate an intern's progress Why shared vocabulary helps engineers describe problems to AI Full article and show notes: https://devsecops.fm/episodes/113/ Discuss the episode on LinkedIn DevSecOps Talks on YouTube
- Oct 5, 202631 min
#112 - DevOps Careers: What Should You Learn Now?
What is worth learning when agents can handle more of the implementation? Deep knowledge of one vendor still has value, but incident experience, industry constraints and clear communication change what an engineer can contribute. Andrey Devyatkin and Mattias Hemmingsson discuss DevOps careers, failure knowledge, cloud specialization, business understanding and the maintenance burden of replacing SaaS with internal tools. What you will learn Why knowing failure modes remains valuable beyond learning service manuals How project risk changes the review needed for agent output What business understanding means beyond keeping Docker containers running How clear technical language helps agents understand requirements and constraints Why rebuilding SaaS can turn engineers into internal vendors Full article and show notes: https://devsecops.fm/episodes/112/ Discuss the episode on LinkedIn DevSecOps Talks on YouTube
- Sep 28, 202629 min
#111 - AI Agents: When Helpful Becomes Harmful
An agent asked to build a service found an Argo CD repository and deployed it to a cluster. Helpful automation gets harder to trust when a request leaves room for actions nobody intended. Mattias Hemmingsson and Paulina Dubas discuss AI-assisted compliance checks, unexpected deployments, evolving guardrails, company AI bans and whether regulation improves transparency or prices smaller competitors out. What you will learn How Claude turned AWS database checks into reusable audit evidence How an agent found a deployment path through Argo CD Why vague instructions and guardrail edge cases cause unwanted actions Why approving a hosted assistant does not make it local Where the hosts see benefits and competitive risks in regulation Full article and show notes: https://devsecops.fm/episodes/111/ Discuss the episode on LinkedIn DevSecOps Talks on YouTube
- Sep 14, 202620 min
#110 - Can Broken GitHub Actions Get Your AWS Account Blocked?
Why would a security improvement break a working deployment? Andrey questions the operational cost of GitHub’s OIDC change, while Mattias explains how repository renames can break AWS access. The hosts share a real incident involving a blocked account and discuss how to prepare for the change. We are always happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners. DevSecOps Talks podcast LinkedIn page DevSecOps Talks podcast website DevSecOps Talks podcast YouTube channel
- Sep 11, 202633 min
#109 - Docker Got Quiet. Did You Miss Anything?
What changed in Docker while everyone was watching AI? The hosts review BuildKit, Buildx, security features, provenance, and the updates practitioners should know. We are always happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners. DevSecOps Talks podcast LinkedIn page DevSecOps Talks podcast website DevSecOps Talks podcast YouTube channel
- Sep 11, 202630 min
#108 - Assume You’re Vulnerable: Security Beyond Patching
Are AI tools making software safer, or creating an endless patching treadmill? Mattias, Andrey, and Paulina discuss Dependabot, human review, and why teams should assume their software is already vulnerable. We are always happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners. DevSecOps Talks podcast LinkedIn page DevSecOps Talks podcast website DevSecOps Talks podcast YouTube channel
Get The DevSecOps Talks Podcast summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
Cyberside Chats: Cybersecurity Insights from the Experts
Cybersecurity experts discuss emerging threats, AI-driven attacks, and defense strategies for professionals and executives.
The Peterman Pod
Career stories from a former Instagram Staff engineer to help software developers grow.
The Low Down
A podcast about hacking.
Syntax - Tasty Web Development Treats
Two full stack developers discuss JavaScript frameworks, CSS updates, and web tooling advancements.
Security Now (Audio)
A weekly deep dive into cybersecurity news, hacking trends, and digital defense strategies for professionals and individuals.
Latent Space: The AI Engineer Podcast
Conversations with AI engineers, researchers, and founders on foundation models, AI agents, infrastructure, and scientific discovery.
Daily Tech News Show
Daily tech news coverage with analysis from Tom Merritt and team.
Random Access Memories
Conversations with tech professionals reveal the personal stories behind their careers in cybersecurity, AI, startups, and leadership.
Hacked
Stories of hacking, tech scams, and digital mysteries explored by two hosts diving into how systems are built and broken.
Accidental Tech Podcast
Three nerds discuss technology, Apple, programming, and related topics.
CISSP Cyber Training Podcast - CISSP Training Program
A weekly podcast delivering practical CISSP exam preparation and cybersecurity strategies from an experienced industry professional.
Fell Into Food Podcast
Chef Jeff Fell examines how technology and innovation shape modern kitchens through interviews with industry professionals.
About The DevSecOps Talks Podcast
This is the show by and for DevSecOps practitioners who are trying to survive information overload, get through marketing nonsense, do the right technology bets, help their organizations to deliver value, and last but not the least to have some fun. Tune in for talks about technology, ways of working, and news from DevSecOps. This show is not sponsored by any technology vendor and trying to be as unbiased as possible. We talk like no one is listening! For good or bad :)
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from The DevSecOps Talks Podcast in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's The DevSecOps Talks Podcast daily summary?
It's a free AI-powered email that summarizes new episodes of The DevSecOps Talks Podcast as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the The DevSecOps Talks Podcast podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official The DevSecOps Talks Podcast product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Mattias Hemmingsson, Julien Bisconti and Andrey Devyatkin.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
How often does The DevSecOps Talks Podcast release new episodes?
The DevSecOps Talks Podcast publishes weekly. Our AI generates a summary within hours of each new episode.
What topics does The DevSecOps Talks Podcast cover?
The DevSecOps Talks Podcast covers topics including Technology. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting The DevSecOps Talks Podcast summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.