Podcast appearances and mentions of Ken Johnson

In this episode, sponsored by GuardSquare (guardsquare.com), Ken Johnson and Seth Law discuss OpenAI's reported Hugging Face security incident, questioning whether the model demonstrated genuinely novel offensive capability or mostly chained known vulnerability patterns at high inference cost, while also considering the defense-contract and marketing angles around "dangerous" frontier models. The main technical discussion returns to AppSec fundamentals through an article on preventing IDOR, emphasizing authorization as a core control, the difficulty of role and tenant isolation in complex systems, and the need for framework-level patterns, typed IDs, tenant checks, and thorough authorization testing. They also cover Krebs' reporting on LG banning residential proxy SDKs from smart TV apps, explaining how free TV apps can turn consumer devices into proxy infrastructure and why IoT app ecosystems need stronger review. The episode closes with DEF CON logistics, Hacker Tracker updates, and upcoming guest plans.

In episode 327 of Absolute AppSec, co-hosts Ken Johnson and Seth Law present a highly anticipated quarterly crossover episode with Cameron and Kurt from the Coffee, Chaos, and ProdSec podcast. Sponsored by GuardSquare, the group begins with lighthearted banter about their personal footwear choices before tackling heavy architectural debates. The primary focus shifts to Application Security Posture Management (ASPM) consolidation. Cameron strongly advocates for utilizing ASPM as a distinct, single pane of glass dashboard to deduplicate vulnerabilities and streamline executive reporting by product suite. However, the hosts contrast this ideal against the messy reality of organizations dealing with a "Frankenstein" mix of loosely bootstrapped open-source scanning tools and competing vendor plugins. The discussion deepens into prioritization strategies amid a massive, AI-driven surge in vulnerability research that threatens to double annual CVE counts. Cameron and Kurt stress the necessity of shifting away from abstract CVSS scores toward custom, runtime-informed risk appetites and impact analysis—prioritizing the hardening of high-risk corporate assets over low-reachability internal flaws. They also examine the critical line separating standard software bugs from intentionally malicious open-source packages that target developer endpoint systems. Ultimately, the panel laments that AppSec teams are effectively functioning as corporate incident responders because Security Operations Center (SOC) analysts lack product-level insight. The episode concludes with a review of automated agent statistics and a fun look ahead to the future emergence of meta OWASP top-ten risk lists.

In episode 325 of Absolute AppSec, co-hosts Ken Johnson and Seth Law first break down an informal guide to threat modeling, arguing that overly prescriptive frameworks like STRIDE induce a heavy cognitive load on developers. Instead, they advocate for simplified, creative questions to expose architectural gaps, citing a historical GitHub planning flaw where private repository images were left exposed on S3 by relying solely on URL obfuscation. They warn that while rapid development in 2026 pushes toward automated lifecycles, human oversight, critical logging, and constructive friction remain essential. Next, they dissect a research paper exploring the philosophical definition of a vulnerability, framing it as a system disposition arising from a fault that manifests as a failure only when environmental and attacker conditions are jointly met. This definition sparks a debate on whether a flaw must carry immediate risk to qualify as a vulnerability, particularly when evaluating modern AI challenges like system prompt disclosures or exposed deprecated API paths.

Newly elected Illinois FFA major state officers--Reporter Haven Cash, Sentinel Levi German and Secretary Owen Rigg.  Illinois Farm Bureau Enivonmental Program Manager Bena Pegg highlights Nutrient Stewardship Field Days this summer.  Tick and mosquito awareness from Ken Johnson with the University of Illinois Extension.  

In episode 324 of Absolute AppSec, co-hosts Ken Johnson and Seth Law share a mix of security model critiques. Starting with industry dynamics, Ken recaps his recent presentation at OWASP Nova regarding the limits of human-scale AppSec, recounting a dramatic storm during the talk where patio chairs pelted the high-rise glass. The conversation pivots sharply to Anthropic being forced to pull its "Fable" and "Mythos" cybersecurity models offline due to government sanctions and fears surrounding unpreventable universal jailbreaks. Ken and Seth criticize the company's disingenuous "FUD-based" marketing, which falsely suggested that AI could entirely replace security practitioners. Seth reviews his own blog post regarding the "three-week demo trap", detailing critical, ignored requirements for AI products—such as evaluation, statistical reproducibility, and token cost economics—noting that executing enterprise testing via frontier models can easily exceed $5,000 a day. Transitioning back to fundamental baseline defense, the hosts dissect an article on bypassing Visual Studio Code extension blocks. They emphasize that since modern CDNs pull zipped extensions from distinct domains, blocking the main marketplace URL is completely ineffective. Consequently, they advocate for rigorous data classification, layered on-premise model hosting, and stricter boundary controls on developer endpoints to combat fast-evolving supply chain threats.

In episode 323 of Absolute AppSec, co-hosts Ken Johnson and Seth Law focus heavily on core application security vulnerabilities, legacy operational struggles, and the challenges of generative AI systems. After briefly discussing Seth's recent trip to BSides Vancouver and confirming upcoming conference training logistics for Black Hat and DEF CON, the duo dives into the persistent problem of secrets and sensitive data leaking into log files. Referencing an article and talk by Alan Reyes, they unpack the compounding nature of logging failures, noting how system-level integrations and production error conditions often dump entire object blocks or environment variables into third-party tools. They caution that while pattern-based scanners exist, they remain too brittle to capture complex edge cases, and utilizing expensive AI agents to screen every real-time log line is economically impractical. Transitioning to AI security, Seth explores a multi-page research paper analyzing prompt injection. The paper establishes that because large language models mathematically process data through tokenization without any physical or architectural separation between instructions and data contexts, prompt injection cannot be completely solved at the model level. Likening prompt injection to automated social engineering, they argue that the onus currently falls entirely on developers to implement deterministic validation, guardrails, and secure application-level harnesses.

Drs. Ken Johnson, Jaideep J. Pandit and Peter Goldstein discuss the article "Are "GABAergic" Agents Really So Selective for GABA? Implications for Single- versus Multi-Site Hypotheses From Promiscuous Behavior of Anesthetics and Their Molecular Targets In Vitro" published in the June 2026 issue of Anesthesia & Analgesia.

I enjoy doing Q&A episodes of the podcast. Once again, Ken Johnson provided some great questions. He asked about everything from TV news to AI to social media.  Listen now and join the conversation.  Leave a review and send a screenshot. Your feedback helps us grow! Follow us on social:Facebook | Instagram | Twitter: @my123cents Join the My 1-2-3 … Continue reading My 1-2-3 Cents Episode 603: Q&A → The post My 1-2-3 Cents Episode 603: Q&A appeared first on Jittery Monkey Podcasting Network.

I enjoy doing Q&A episodes of the podcast. Once again, Ken Johnson provided some great questions. He asked about everything from TV news to AI to social media.  Listen now and join the conversation.  Leave a review and send a screenshot. Your feedback helps us grow! Follow us on social:Facebook | Instagram | Twitter: @my123cents Join the My 1-2-3 … Continue reading My 1-2-3 Cents Episode 603: Q&A → The post My 1-2-3 Cents Episode 603: Q&A appeared first on Jittery Monkey Podcasting Network » My 1-2-3 Cents.

WEEI presents a collection of discussions surrounding Jaylen Brown's comments about his "favorite season," the subsequent fallout, and his escalating public feud with Stephen A. Smith and Nick Wright. Hear what The Greg Hill Show, Jones & Keefe, and Rich & Ted with Ken Johnson have to say about Brown's choice of words, the trade rumors swirling around Giannis, and whether Brown is actually just helping Stephen A.'s brand. That and more this week on Best Of Celtics on WEEI!

WEEI presents a collection of discussions surrounding Jaylen Brown's comments about his "favorite season," the subsequent fallout, and his escalating public feud with Stephen A. Smith and Nick Wright. Hear what The Greg Hill Show, Jones & Keefe, and Rich & Ted with Ken Johnson have to say about Brown's choice of words, the trade rumors swirling around Giannis, and whether Brown is actually just helping Stephen A.'s brand. That and more this week on Best Of Celtics on WEEI!

WEEI presents a collection of discussions surrounding Jaylen Brown's comments about his "favorite season," the subsequent fallout, and his escalating public feud with Stephen A. Smith and Nick Wright. Hear what The Greg Hill Show, Jones & Keefe, and Rich & Ted with Ken Johnson have to say about Brown's choice of words, the trade rumors swirling around Giannis, and whether Brown is actually just helping Stephen A.'s brand. That and more this week on Best Of Celtics on WEEI!

Please SUBSCRIBE & SHARE! No need to wait for the premiere, head over to http://dailyrenegade.com for a membership to view this video in full right now!Dr. Ken Johnson joins Josh Peck to discuss the Dead Sea Scrolls, nephilim, prophecy and what is soon set to occur. Storage space is expensive on the official Daily Renegade website, so we have had to move some of our older videos (usually from a couple years prior to the current date) onto this YouTube playlist in order to make room for new, great content! The good news is, you get to see a sneak peak of what great full content is offered at DailyRenegade.com so make sure you sign up and become a member today!  Also note, there might be some older donation requests and promotions that are no longer in effect included in this video, so just consult with the links that are in this video description for up to date info. Thank you!To get the audio-only podcast version of full videos and Josh Peck's blog, which includes original articles, show notes, and more, subscribe to Josh's Substack at http://joshpeck.substack.comBe Prepared for Any Emergency with My Patriot Supply:Generators - https://www.mypatriotsupply.com/colle...Survival/Emergency Food - https://www.mypatriotsupply.com/colle...My Patriot Supply Homepage - https://www.mypatriotsupply.com?_ef_t...The Rapture and the Dead Sea Scrolls: A Teaching on our Blessed Hope in Light of the Greatest Archaeological Find in History - https://renegadepublishers.com/the-ra...

What the Dead Sea Scrolls Reveal About Our Final 50 Year Jubilee. Josh Peck talks with Dr. Ken Johnson about today being the first day of the final jubilee on the Dead Sea Scroll calendar.

Monthly update from Illinois Farm Bureau Associate Director of Transportation and Infrastructure Rodney Knittel.  U of I Extension's Ken Johnson provides advice on planting a tree in honor of Arbor Day and Earth Day.  DTN ag meteorologist John Baranick discusses an active spring weather pattern.  

Ken Johnson and Seth Law reflect on the 2026 RSA Conference and BSidesSF, noting an industry-wide "awakening" regarding the high costs and engineering complexities of operationalizing AI security tools. A major focus is the recent "supply chain attack hell," specifically the compromise of the Axios HTTP client through dual-account breaches that allowed attackers to bypass legitimate OIDC deploy setups via a misconfigured NPM CLI. The malware used was particularly evasive, deleting itself and replacing its package.json with a clean version post-execution. The hosts also discuss the emergence of the "Agentic Development Lifecycle" (ADLC), where engineering teams are increasingly "committing on time" rather than features, creating a volume of code that traditional security gates cannot manage. They debate Thomas Ptacek's thesis that AI agents will soon "supplant" human vulnerability research for common bug classes, shifting the human role toward high-level governance and "context infusion". Economically, they highlight how Anthropic's security announcements contributed to nearly half a trillion dollars in market value loss for traditional security firms, as investors increasingly bet on frontier models to consume established security domains.

In episode 316 of Absolute AppSec, hosts Ken Johnson and Seth Law participate in a crossover with Kurt Hendle and Cameron Walters from the Coffee, Chaos, and ProdSec podcast to discuss the radical transformation of security roles in an AI-driven landscape. The guests share origin stories rooted in gaming and "mischievous" curiosity, which evolved into deep careers in security architecture and engineering. The primary discussion centers on the industry's shift toward an "Agentic Development Lifecycle" (ADLC), where the sheer volume of AI-generated code renders traditional manual review gates obsolete. This acceleration risks a "rubber stamp" culture where developers approve fixes in seconds rather than minutes, potentially leading to a mountain of technical debt. Consequently, the role of security is shifting from manual bug finding to high-level governance and "context infusion," requiring practitioners to manage AI agents that automate complex tasks. Economically, the group highlights how frontier model announcements have caused massive market volatility, wiping billions from traditional security stocks. Ultimately, they conclude that while older "primitive" tools are failing, professionals who lean into AI as a "superpower" for governance and oversight will be essential for navigating this new, non-deterministic reality.

What if the return of Christ isn't something to fear, but something that should radically change how we live today? After 30 years of avoiding end-times teaching, John Bevere explains what Scripture actually says about being ready, spiritually and practically. This episode uncovers how the fear of the Lord restores peace, resilience, and power in uncertain times. Watch The Dr. Josh Axe Show every Monday & Thursday on YouTube: https://www.youtube.com/@drjoshaxe?sub_confirmation=1  As mentioned in today's episode:  Watch my recent episode with Michael Knowles episode  →  Watch my recent episode with Kirk Cameron → https://youtu.be/OPx3-P-MpG0

Ken Johnson has a long history as a smart programmer, from his days in markets like New York, Philadelphia, and DC-- just to name a few. He's also the former VP for Urban Radio formats for Cumulus, iHeart, and the ABC Radio Networks. Now, he runs his own company, Mean Ole Lion Media, a podcast production company and content distribution network. Ken knows how to create compelling podcasts, and he shared his knowledge in February, 2026, is a special webinar hosted by Friends of Georgia Radio's Wendy Williams. This is the recording of that session.

In episode 315 of Absolute AppSec, Ken Johnson and Seth Law discuss the rapidly evolving challenges of securing software in an era of AI-assisted development. The hosts provide updates on their "Harnessing LLMs for Application Security" training, noting that the field is changing so fast that they must constantly update their exercises to include new agents and advanced tools like Claude Code. A primary concern raised is the "naivete" of many new security tools, where prompts are often automatically generated by AI rather than expertly crafted, causing a loss of essential nuance. The hosts also warn against AI companies building security products without specialized expertise, citing a zero-click exploit in the "Comet" AI browser that could exfiltrate sensitive secrets via calendar summaries. As development teams now ship code at "AI speed," the hosts argue that traditional AppSec methods are too slow, necessitating a strategic pivot toward automated design reviews, governance, and observability rather than just chasing individual vulnerabilities. Despite the inherent risks and the ongoing difficulty of managing AI reasoning drift, they remain optimistic that these tools can eventually unlock more efficient, hands-off AppSec workflows if managed with proper guardrails and deterministic oversight.

Ken Johnson and Seth Law examine the intensifying pressure on security practitioners as AI-driven development causes an unprecedented acceleration in industry velocity. A primary theme is the emergence of "shadow AI," where developers utilize unauthorized AI coding assistants and personal agents, introducing significant data classification risks and supply chain vulnerabilities. The discussion dives into technical concepts like AI agent "skills"—markdown files providing specialized directions—and the corresponding security risks found in new skill registries, such as malicious tools designed to exfiltrate credentials and crypto assets. The hosts also review 1Password's SCAM (Security Comprehension Awareness Measure), highlighting broad performance gaps in an AI's ability to detect phishing, with some models failing up to 65% of the time. To manage these unpredictable systems, the hosts advocate for a shift toward high-level validation roles, emphasizing the need for Subject Matter Expertise to combat "reasoning drift" and maintain safety through test-driven development and periodic "checkpoints". Ultimately, they conclude that while AI can simulate expertise, human oversight remains vital to secure the probabilistic nature of modern agentic workflows.

State Ag Pest Survey Coordinator Kelly Estes talks summer interns and trapping cooperators. Illinois Farm Bureau Associate Director of Transportation and Infrastructure Rodney Knittel discusses non-domiciled CDLs. University of Illinois Extension horticulture educator Ken Johnson details seed starting. 

Ken Johnson and Seth Law examine the profound transformation of the security industry as AI tooling moves from simple generative models to sophisticated agentic architectures. A primary theme is the dramatic surge in development velocity, with some organizations seeing pull request volumes increase by over 800% as developers allow AI agents to operate nearly hands-off. This shift is redefining the role of Application Security practitioners, moving experts from manual tasks like manipulating Burp Suite requests to a validation-centric role where they spot-check complex findings generated by AI in minutes. The hosts characterize older security tools as "primitive" compared to modern AI analysis, which can now identify human-level flaws like complex authorization bypasses. A major technical highlight is the introduction of agent "skills"—markdown files containing instructions that empower coding assistants—and the associated emergence of new supply chain risks. They specifically reference research on malicious skills designed to exfiltrate crypto wallets and SSH credentials, warning that registries for these skills lack adequate security responses. To manage the inherent "reasoning drift" of AI, the hosts argue that test-driven development has become a critical safety requirement. Ultimately, they warn that the industry has already shifted fundamentally, and security professionals must lean into these new technologies immediately to avoid becoming obsolete in a day-to-day evolving landscape.

In this episode of Absolute AppSec, hosts Ken Johnson and Seth Law interview Mohan Kumar and Naveen K Mahavisnu, the practitioner-founders of Aira Security, to explore the critical challenges of securing autonomous AI agents in 2026. The conversation centers on the industry's shift toward "agentic workflows," where AI is delegated complex tasks that require monitoring not just for access control, but for the underlying "intent" of the agent's actions. The founders explain that agents can experience "reasoning drift," taking dangerous or unintended shortcuts to complete missions, which necessitates advanced guardrails like "trajectory analysis" and human-in-the-loop interventions to ensure safety and data integrity. A significant portion of the episode is dedicated to the security of the Model Context Protocol (MCP), highlighting how these integration servers can be vulnerable to "shadowing attacks" and indirect prompt injections—exemplified by a real-world case where private code was exfiltrated via a public GitHub pull request. To address these gaps, the guests introduce their open-source tool, MCP Checkpoint, which allows developers to baseline their agentic configurations and detect malicious changes in third-party tooling. Throughout the discussion, the group emphasizes that as AI moves into production, security must evolve into a proactive enablement layer that understands the probabilistic and unpredictable nature of LLM reasoning.

This week, we’re answering questions for a version of Ask My 1-2-3 Cents. Ken Johnson, the official My 1-2-3 Cents Superfan, has some great queries for us this week. Chad and I also discussed the upcoming Royal Rumble and, of course, the My 1-2-3 Cents 2026 Royal Rumble contest. This is a fundraiser for the My … Continue reading My 1-2-3 Cents Episode 584: Ask My 1-2-3 Cents → The post My 1-2-3 Cents Episode 584: Ask My 1-2-3 Cents appeared first on Jittery Monkey Podcasting Network.

This week, we’re answering questions for a version of Ask My 1-2-3 Cents. Ken Johnson, the official My 1-2-3 Cents Superfan, has some great queries for us this week. Chad and I also discussed the upcoming Royal Rumble and, of course, the My 1-2-3 Cents 2026 Royal Rumble contest. This is a fundraiser for the My … Continue reading My 1-2-3 Cents Episode 584: Ask My 1-2-3 Cents → The post My 1-2-3 Cents Episode 584: Ask My 1-2-3 Cents appeared first on Jittery Monkey Podcasting Network » My 1-2-3 Cents.

Episode Description: “Why is that snake still alive?”

Ken Johnson (cktricky on social media) and Seth Law are happy to announce a special episode of Absolute AppSec with Avi Douglen (sec_tigger on X), long-time OWASP Global Board of Directors member, founder and CEO of Bounce Security and co-author of the Threat Modeling Manifesto. The conversation ranges from Application Privacy related to Application Security, to participating in meetups and conferences, and finally OWASP as an Avi's experience as a board member.

Which Holidays are Pagan?Josh Peck talks with Dr. Ken Johnson about various holidays, their origins, and if they are okay to celebrate. To get the audio-only podcast version of full videos and Josh Peck's blog, which includes original articles, show notes, and more, subscribe to Josh's Substack at http://joshpeck.substack.comIt is with a heavy heart that I (Nathan's father) inform you that Nathan went home to be with the Lord on Monday, Sept. 22nd, 2025. He fought an extremely rare form of cancer bravely, but in the end, his heart couldn't keep up the fight anymore. He went fast with no prolonged suffering. We want to thank all of you who have kept him in prayer. Please know that those prayers were not in vain. Our son lives with Jesus now. We are now updating this campaign to reflect our financial need for his remaining hospital bills, funeral expenses, and housing for our family.As most men, I do not enjoy asking for help. However, as most fathers and husbands can relate to, there isn't anything I won't do for my family. In light of that, I wanted to first ask all of you to pray for us. Also, because of the overwhelming expenses that inevitably come from all these things happening at the same time, if you feel led to help us financially, there's a couple different ways you can do that:GiveSendGo: http://www.GiveSendGo.com/NathanTheBravePayPal: http://PayPal.me/JoshPeckDisclosureOr send in your donation to:P.O. Box 270123Oklahoma City, OK 73137

Ancient Prophetic Calendar Predicts Something Huge for 2026!Dr. Ken Johnson joins Josh Peck to talk about the ancient Essene calendar which says 2026 begins the end.To get the audio-only podcast version of full videos and Josh Peck's blog, which includes original articles, show notes, and more, subscribe to Josh's Substack at http://joshpeck.substack.comIt is with a heavy heart that I (Nathan's father) inform you that Nathan went home to be with the Lord on Monday, Sept. 22nd, 2025. He fought an extremely rare form of cancer bravely, but in the end, his heart couldn't keep up the fight anymore. He went fast with no prolonged suffering. We want to thank all of you who have kept him in prayer. Please know that those prayers were not in vain. Our son lives with Jesus now. We are now updating this campaign to reflect our financial need for his remaining hospital bills, funeral expenses, and housing for our family. As most men, I do not enjoy asking for help. However, as most fathers and husbands can relate to, there isn't anything I won't do for my family. In light of that, I wanted to first ask all of you to pray for us. Also, because of the overwhelming expenses that inevitably come from all these things happening at the same time, if you feel led to help us financially, there's a couple different ways you can do that:GiveSendGo: http://www.GiveSendGo.com/NathanTheBravePayPal: http://PayPal.me/JoshPeckDisclosureOr send in your donation to:P.O. Box 270123202Oklahoma City, OK 73137

Homeownership has been baked into the American Dream for nearly a century. Politicians, parents, and banks all tell you the same thing: “Buy a house as soon as you can. It's your biggest asset.” But as a real estate guy who actually understands how wealth is created… I'm not convinced it makes sense for everyone—especially early in your career. Let me explain. Say you finally start making some real money—maybe you're a doctor fresh out of residency. The cultural script kicks in immediately: Buy a house. Build equity. Feel responsible. But here's the part most people forget: your primary home is not an asset. As Robert Kiyosaki puts it, if something takes money out of your pocket, it's not an asset—it's a liability. According to Bankrate and the Census Bureau, U.S. homeowners spend around $17,000 per year just to maintain and operate their homes—and that's before you make a single mortgage payment. That's property taxes, insurance, utilities, landscaping, repair bills, HOA fees… the list goes on. If your house is worth $1.5M, even the bare-minimum 1% annual maintenance rule hits you with $15,000 a year just to keep the place from deteriorating. Add insurance, taxes, utilities, and everything else, and you're looking at $30,000–$40,000 per year in unavoidable, non-negotiable carrying costs. And that still doesn't cover the roof that fails, the appliances that die, or the curveballs Mother Nature throws at you. None of that feels like an “asset” to me. Now, to be fair, people don't usually buy homes as investments. They buy them for stability, a place to raise kids, a sense of being “settled.” It's emotional. It's psychological. And it's real. But if you're young—and especially if you haven't hit your first million—it's worth asking yourself a tough question: Is buying a home right now the best financial move… or just the most familiar one? Because historically, U.S. home prices appreciate around 4.3% a year (Case-Shiller). Meanwhile, the S&P 500 averages closer to 10%. And if you’re in real estate investing? A solid multifamily value-add deal often targets 16–20% IRR—plus tax advantages your primary home will never give you. So if you're just getting started, it might make sense to delay that home purchase. Invest first. Build your passive income. Let your assets—not your salary—pay for your lifestyle. Then when you do buy a home, you'll be doing it from a position of strength, not strain. The irony is this: waiting often gets you to the dream home faster because your capital compounds instead of being trapped in drywall, windows, and a backyard you barely have time to enjoy. This Week on Wealth Formula Podcast, I interview expert Dr. Ken Johnson, who digs even deeper into this question—and lays out why homeownership isn't the golden ticket people think it is, especially for high earners early in their wealth-building years. Linked mentioned: Beracha and Johnson Housing Ranking Index: https://www.ares.org/page/beracha-johnson-housing-ranking-index Waller, Weeks and Johnson Rental Index: https://www.ares.org/page/waller-weeks-johnson-rental-index Price-to-Rent Ratio Report: https://therealestateinitiative.com/price-to-rent-ratios/ Top 100 Housing Markets – Inflation Adjusted: https://therealestateinitiative.com/housing-top-100/ Learn more about Dr. Ken Johnson: https://olemiss.edu/profiles/khjohns3