Modern Cyber with Jeremy Snyder27 Jun 2024

Tanya Janca of Semgrep

In this episode of Modern Cyber, Jeremy Snyder chats with Tanya Janca, the head of education and community at Semgrep. They delve into the concept of secure guardrails in application security, emphasizing how these mechanisms guide developers towards secure coding practices without disrupting their workflow. Tanya shares insights from her extensive experience, highlighting the balance between nudging developers with guardrails and enforcing critical controls to ensure security. The conversation covers real-world scenarios, including Tanya's adventures with guardrails at Microsoft and the importance of contextualizing security alerts to avoid alert fatigue among developers.

About Tanya Janca

Tanya Janca, also known as SheHacksPurple, is a renowned figure in cybersecurity with over 25 years of experience in IT and coding. She is the bestselling author of "Alice and Bob Learn Application Security" and an award-winning public speaker who has delivered hundreds of talks across six continents. As the head of education and community at Semgrep, Tanya focuses on creating and sharing content and training to promote secure software development. She is also an active blogger and a strong advocate for diversity, inclusion, and kindness in the tech community.

https://semgrep.dev/

https://shehackspurple.ca/

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(127)

David Kerber of Act Security

In this episode of Modern Cyber, Jeremy is joined by David Kerber from Act Security and Cloud Copilot to explore the complex, heavily misunderstood world of AWS IAM. David dismantles common misconcept...

18 Aug 37min

This Week in AI Security - 13th August 2026

Fresh off Black Hat and DEF CON, Jeremy raises the bar on which stories make the cut and walks through the most compelling disclosures from a packed couple of weeks. The dominant theme: agents pursuin...

13 Aug 15min

This Week in AI Security - 6th August 2026

Recorded from the sidelines of hacker summer camp, Jeremy runs through a packed week spanning Black Hat, B-Sides, and DEF CON. The theme keeps repeating: prompt injection is always possible, and it is...

6 Aug 21min

This Week in AI Security - 30th July 2026

The final episode before Black Hat, and Jeremy keeps it tight with a few quick hits before settling into the week's biggest theme: identity, visibility, and the open-versus-closed model debate. This w...

30 Jul 17min

This Week in AI Security - 23rd July 2026

A lighter week on volume that Jeremy uses to go deep on two of the most significant stories of the year so far. The episode opens with quick hits on export-control pressure spreading to OpenAI's model...

23 Jul 23min

This Week in AI Security - 16th July 2026

Another lighter week that lets Jeremy slow down and dig into the stories that matter most. The theme running through this episode: the tooling and plumbing around AI keep proving to be the real attack...

16 Jul 15min

This Week in AI Security - 9th July 2026

A quieter summer week on the news front, which gives Jeremy room to dig deeper into a handful of stories that all circle the same theme: the tooling and infrastructure around AI keep proving to be the...

16 Jul 12min

This Week in AI Security - 2nd July 2026

A lighter week on volume, which gives Jeremy room to go deeper on a set of stories that all reinforce trends we've been tracking for months. The through-line: prompts keep showing up in places nobody ...

2 Jul 12min