.png)
DevSec Station
DevSec Station is a security focused podcast for software developers who want to create amazing applications. Hosted by Tanya Janca, also known as SheHacksPurple, these short lessons will help you level up.
DevSec Station
Latest Episodes
Special Bulletin: PHP2Shell, Critical PHP Vulnerabilities Developers Need to Know About
Two critical PHP vulnerabilities have been disclosed, and even applications written with secure coding practices may be affected.In this special bulletin of DevSec Station, Tanya Janca (SheHacksPurple) explains PHP2Shell, why vulnerabili...
What Can Your AI Agent Actually Do?
I asked Claude to build me a little application that would greet me every morning.Nothing complicated. Just say hello, call me a Queen, give me a compliment, and share an inspirational quote. Cute, right?Except Claude di...
Your AI Worked 59 Times. What About the 60th?
What happens when your AI assistant does exactly what you expect 59 times... and then does something completely bananas on the 60th?While teaching a secure coding class, I watched nearly 60 students use the same AI assistant, programmin...
Security Requirements: What They Are and How to Add Them to Your Project
Security problems don't generally happen because developers 'don't care' or lack skill. They happen because no one clearly defined what "secure" meant in the first place. When security expectations are left implicit, developers are forced to gu...
Threat Modeling for Developers (How To)
Threat modeling has a reputation for being complicated, full of diagrams, and requiring long meetings. In reality, most developers already do it, they just don't realize it. The difference is that doing it intentionally helps you catch...
