{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Cyber Smokehouse","title":"Agentic Development and the Evolution of DevSecOps - Ken Toler - Cyber Smokehouse - Episode #28","html":"<iframe width=\"100%\" height=\"180\" frameborder=\"no\" scrolling=\"no\" seamless src=\"https://share.transistor.fm/e/be0da90a\"></iframe>","width":"100%","height":180,"duration":3020,"description":"Take your application security strategy to the next level with powerful insights on securing fast-paced agentic development, navigating abstracted SaaS platforms, and bridging the gap between engineers and security teams. It’s time to move past rigid no-saying, embrace \"vibe coding\" as a shared collaborative workspace, and build resilient security systems that stand the test of time. Who better to guide you through it than DevSecOps podcast host, blockchain application security expert, and Founder & Managing Principal Consultant at Asgard Security, Ken Toler?\nYou will learn how AI-driven tools are accelerating threat modeling and supply chain management, why abstracted \"squishy middle\" infrastructure presents new attack vectors, and how to foster a curious, error-friendly engineering culture. Get motivated to enable your developers, simplify system abstractions, and build collaborative bridges across your entire organization!\nTakeaways:\nThe Pace of Agentic Development: AI tools and agentic development aren't changing core security fundamentals; rather, they are accelerating execution and making practices like threat modeling and supply chain fixes faster to implement.\nPreserving Systems Thinking: While AI lowers barriers to coding, engineers and security teams must still maintain deep reading and architectural comprehension to diagnose complex system vulnerabilities.\nThe Danger of the \"Squishy Middle\": Modern abstracted platforms (like Replit or Lovable) consolidate credentials and environment variables into shared SaaS infrastructure, creating lucrative targets for attackers.\nEmbracing Citizen Developers & \"Vibe Coding\": When non-technical departments prototype apps using AI, security and engineering teams should engage collaboratively rather than dismissively to build organizational alignment.\nEnabling Over Blocking: Security leaders thrive by finding creative, positive ways to enable business goals securely instead of being the transactional \"no guy\".\nQuote of...","thumbnail_url":"https://img.transistorcdn.com/OzVByYrVZ7pJIeb4cJ2-aoOkjC_j5Q1oz9lj1NhJqsk/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS80OTlh/YTdiNmUxMDU5OWY1/NWM4NTAxODM1NGNm/YTBiZi5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}