Some production issues caused this one to slip to December so the intro is a bit off but this is still a great episode. So, learn some lessons on creating secure code from one of my favorite guests: Tanya Janca. It was hard to keep this one to its current length as Tanya is such a great person to talk to for any reason. Enjoy and happy holidays!

Show Links:

Get your copy of Alice and Bob Learn Secure Coding! (and more):
https://shehackspurple.ca/books/
Also the newsletter so that you can join the free online streams:
https://newsletter.shehackspurple.ca/

owasp podcast

ep2024-12 Tanya Janca: Happy Holidays are Secure Code

Enhance security & efficiency with expert DevSecOps managed services. Automate, monitor, & secure your development pipeline for seamless operations.

Secure & Scalable DevSecOps Managed Services for Your Business

The HEAL Security Dispatch Daily Digest is a comprehensive cybersecurity podcast hosted by Richard Simmons from London, providing timely updates and expert insights at the intersection of healthcare and digital security. Each episode delivers a curated briefing on the latest cyber threats, industry responses, and technological developments. In one installment, the podcast covers a range of pressing issues, including credential stuffing attacks targeting The North Face, efforts by Microsoft and CrowdStrike to unify threat actor naming conventions, the emergence of a dangerous Android malware dubbed Crocodilus, and ongoing cybersecurity incidents affecting hospitals across Maine. Additional segments highlight risks posed by malicious AI-generated video ads on social media, a new caregiving feature debuting in Amazon Pharmacy's Medicare services, and the infiltration of counterfeit RubyGems packages threatening software developers. With its focus on real-world threats and proactive solutions, the podcast serves as a trusted daily digest for professionals navigating the evolving cybersecurity landscape. 
https://healsecurity.com/

Credential Stuffing Hits The North Face, and Amazon Pharmacy Expands Medicare Access

Most teams start with the default VPC—but it lacks proper gateways, subnet isolation, and scalability. A well-structured 3-tier VPC (Public, Private, Restricted) with smart CIDR planning ensures security, scalability, and performance from day one. Avoid future tech debt by designing your cloud architecture the right way.

Power your infrastructure with DevSecCops ai — the AI DevOps platform delivering secure, scalable cloud environments with built-in security scanning solutions.

👉 Start building smarter: https://devseccops.ai

Understanding VPC (Virtual Private Cloud) Architecture

As cloud operations scale, how do you gain visibility across all clouds? We uncover the top cloud security trends and challenges in Asia Pacific with Sanjay Yadave. We’ll also explore the role of cloud disaster recovery in minimizing risks and ways to cut its associated costs and complexities.

Nutanix Enterprise Cloud Index www.nutanix.com/enterprise-cloud-index
Nutanix Cloud Interlock: Ask Us Anything event.nutanix.com/cloudinterlock-liveqa/podcast

Securing the cloud as it scales with Sanjay Yadave

Google’s “Big Sleep” AI agent has redefined cybersecurity by spotting a critical SQLite zero-day days before it could be exploited. We’ll glimpse how this autonomous hunter teams up with Sec-Gemini’s AI forensics to slice through mountains of log data in seconds. Then, discover why Google’s FACADE system is the new sentinel for insider-threat detection, catching anomalous behavior with uncanny precision. Join us to find out how sleepless AI guardians are reshaping the front lines of defense.

Bit & Being - Historical First Zero Day Stopped by AI: Meet Big Sleep, Sec-Gemini, Google’s FACADE

In episode 43 of Generationship, Rachel explores the frontier of AI-driven cybersecurity with John Amaral, co-founder of Root.io. Together they unpack the promise and challenges of agentic systems that detect, patch, and remediate vulnerabilities automatically. This installment offers a mix of technical deep dives, AI optimism, and a vision of security that works more like an immune system than a fire alarm.

Subscribe

Generationship - Ep. #43, Security Woven In with John Amaral

In episode 22 of Open Source Ready, Brian and John sit down with Benji Kalman, co-founder of Root, to explore the intersection of AI, software development, and security. They unpack "vibe coding," its impact on API proliferation, and the hidden costs of increased technical debt. Learn why a security vulnerability is just a bug with a purpose, and discover how AI agents can be used not just to write code, but to automatically find and remediate vulnerabilities in open-source containers.

Open Source Ready - Ep. #22, AI and Container Security with Benji Kalman of Root

Today’s episode breaks down the latest wave of high-impact cybersecurity stories — from AI-driven espionage campaigns and critical zero-day flaws to new threats targeting developers and identity systems. We cover active exploits, major vulnerabilities, and emerging attack techniques shaping the security landscape right now. Stay informed, stay ahead.

AI-Powered Espionage, and New Developer Threats: Today’s Cybersecurity Wake-Up Call

In today’s episode, we break down major cybersecurity developments across tech, mobile, government, and healthcare. Windows 11 users are reporting a new File Explorer bug triggered by the latest update, while India’s mandated Sanchar Saathi app raises significant privacy concerns. A widespread npm supply-chain attack has exposed hundreds of thousands of developer secrets, and Android’s latest patch fixes multiple high-risk zero-days actively exploited in the wild. We also look at a healthcare data breach impacting ChristianaCare patients, a new AI-evading malicious npm package targeting environment variables, and fresh advances in AI-driven imaging and cybersecurity tools across the medical tech sector.

Cybersecurity Flashpoints: Windows Glitch, Android Zero-Days, NPM Attacks & Healthcare Breaches

The Nutanix Community Podcast is a weekly podcast. It is an informal and technical look at topics around Nutanix, Cloud and the online IT community. It will serve as a campfire and coffee shop for the extended Nutanix community.

Heavybit is the leading early-stage investor in enterprise infrastructure. Since 2013, we've helped launch and scale visionary technical startups—from DevSecOps and feature flagging to AI code generation and beyond. We go hands-on from day 0, backing founders as they turn code into companies and build the future of software from the bottom up to the top down.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Empowering businesses with innovative cloud strategies. Transforming digital landscapes. Join us on the journey to harnessing the power of the cloud. #CloudStrategy

DevSecCops ai simplifies cloud onboarding with Kubernetes in 90 mins—no expertise needed. Get IaC, app modernization, CI/CD automation, & AI-powered security fixes.

The OWASP Podcast Series is a recorded series of discussions with thought leaders and practitioners who are working on securing the future for coming generations.

New tracks tagged #devsecops