DevSec Station
DevSec Station is a security focused podcast for software developers who want to create amazing applications. Hosted by Tanya Janca, also known as SheHacksPurple, these short lessons will help you level up.
Episodes
9 episodes
Secure Defaults Beat Secure Training
Security training has its place. But if training alone solved security problems, we wouldn't keep seeing the same vulnerabilities appear over and over again. The real problem usually isn't that developers don't know what to do; it's that the ea...
Why Current Security Tools Fail Developers
Security tools are supposed to help developers build safer software. But sometimes it seems like they create more frustration than security.This episode is sponsored by Maze.In this episode ...
Vibe Coding, Copilots, and Security Drift
AI coding assistants can help developers move incredibly fast. But this new speed comes with a new challenge: security drift.This episode is sponsored by Maze.In this episode of DevSe...
Secrets Management: Stop Playing Whack-a-Mole
If you've ever committed an API key, password, token, certificate, or other secret to a repository, you're not alone. Most secret leaks don't happen because developers don't care about security. They happen because the easiest place to put a se...
Supply Chain Is More Than Just Dependencies
Most developers think software supply chain security starts and ends with dependencies. But modern supply chain attacks don't stop there. Attackers look for paths into your software, and those paths often run through developers, CI/CD systems, ...
Malicious Dependencies Aren’t an Accident
Malicious dependencies are not accidents. They are often intentionally designed to look trustworthy so developers install them without hesitation. In this episode of DevSec Station, Tanya Janca explains how ...
NPM Supply Chain Attack: Active Worm Stealing Tokens, SSH Keys, and Credentials
🚨 Emergency DevSec Station update.There’s an active npm supply chain attack happening right now.Malicious npm packages are running install scripts that quietly steal: • SSH keys • AWS credentials ...
How Modern Supply Chain Attacks Really Happen (Step-by-Step Breakdown for Developers)
What if a supply chain attack didn’t start with a complex exploit… but something completely normal?A typo. A copy-paste. Even an AI suggestion.In this episode, Tanya Janca breaks down how modern supply ...
Developers Are Now Targets: How Supply Chain Attacks Actually Reach You
Developers are no longer just building software. They’re being targeted directly.In this episode, Tanya Janca explains how supply chain attacks reach developers through everyday tools, packages, and workflows.These...