Calling all developers and AppSec pros!
Join Jim Manico on November 3–5 at OWASP Global AppSec USA 2025 for a 3-day, hands-on training experience.
REGISTER NOW: https://owasp.glueup.com/event/131624/register/
Ideal for beginners looking to build a strong, modern security foundation in both traditional and AI-driven environments.
Virtual-friendly Packages available Built for developers + security pros Fun, funny, and full of practical, actionable advice
DM or email me for deets! Tanya [AT] shehackspurple [DOT] ca
#CyberSecurityAwarenessMonth #SecurityAwarenessMonth #SecureCoding #appsec
3/3
With 25+ presentations to choose from, I cover everything from #securecoding and #threatmodeling to AI risks and #AppSec—always with humor, clarity, and actionable takeaways.
These aren’t just talks—they’re lessons your team will remember.
2/3
5,000 subscribers for my monthly newsletter, wow! Thank you, all of you, for learning about #securecoding and #appsec with me! 
The newsletter has come a long way since 2018!
Join free, here: https://twp.ai/4io8XN
#applicationsecurity
5,000 subscribers for my monthly newsletter, wow! Thank you, all of you, for learning about #securecoding and #appsec with me! The newsletter has come a long way since 2018!
Join free, here: https://twp.ai/4io3cd
#applicationsecurity
Virtual-friendly Packages available Built for developers + security pros Fun, funny, and full of practical, actionable advice
DM or email me for deets! Tanya [AT] shehackspurple [DOT] ca
#CyberSecurityAwarenessMonth #SecurityAwarenessMonth #SecureCoding #appsec
3/3
With 25+ presentations to choose from, I cover everything from #securecoding and #threatmodeling to AI risks and #AppSec—always with humor, clarity, and actionable takeaways.
These aren’t just talks—they’re lessons your team will remember.
2/3
Noch nie von #CWE-22, CWE-377, CWE-778 gehört? Dann könnte dein nächster Datei-Upload in #Java zur Sicherheitslücke werden.
@svenruppert hat praktische Abhilfe parat.
Jetzt absichern: https://javapro.io/de/erstellen-einer-einfachen-datei-up-download-anwendung-mit-vaadin-flow/
5,000 subscribers for my monthly newsletter, wow! Thank you, all of you, for learning about #securecoding and #appsec with me! The newsletter has come a long way since 2018!
Join free, here: https://twp.ai/4ioqvU
#applicationsecurity
5,000 subscribers for my monthly newsletter, wow! Thank you, all of you, for learning about #securecoding and #appsec with me! The newsletter has come a long way since 2018!
Join free, here: https://twp.ai/4iokiv
#applicationsecurity
My friend Yabing Wang and I are doing a fireside chat about MODERN #AppSec. Yabing wrote '97 things an appsec professional needs to know', she's a CISO, and a great conversation partner!
July 2nd at 9AM PT 
@justworks
#SecureCoding
My friend Yabing Wang and I are doing a fireside chat about MODERN #AppSec. Yabing wrote '97 things an appsec professional needs to know', she's a CISO, and a great conversation partner!
July 2nd at 9AM PT
@justworks
#SecureCoding
5,000 subscribers for my monthly newsletter, wow! Thank you, all of you, for learning about #securecoding and #appsec with me! The newsletter has come a long way since 2018!
Join free, here: https://twp.ai/4ioRIO
#applicationsecurity
Virtual-friendly Packages available Built for developers + security pros Fun, funny, and full of practical, actionable advice
DM or email me for deets! Tanya [AT] shehackspurple [DOT] ca
#CyberSecurityAwarenessMonth #SecurityAwarenessMonth #SecureCoding #appsec
3/3
With 25+ presentations to choose from, I cover everything from #securecoding and #threatmodeling to AI risks and #AppSec—always with humor, clarity, and actionable takeaways.
These aren’t just talks—they’re lessons your team will remember.
2/3
Since day one @SecDim has been about making secure code learning accessible to all devs.
Now we go one step further:
Free in-repo secure coding challenges
For open source projects & volunteer-run meetups
We use OSS. We give back.
https://secdim.com/open-source/
5,000 subscribers for my monthly newsletter, wow! Thank you, all of you, for learning about #securecoding and #appsec with me! The newsletter has come a long way since 2018!
Join free, here: https://twp.ai/4imzF9
#applicationsecurity
Mini #securecoding lesson: APIs are often where #IDOR vulnerabilities live. They’re scriptable, discoverable, and rarely protected by frontend logic. Even endpoints not visible to users are vulnerable! Attackers use tools like Burp or Postman to find and exploit them. Easily!
