Your developers are the attack surface now and vibe coding as a vulnerability | Tanya Janca

Developers are like water: if you make your security protocols too difficult, they will find a way to flow right around them. This week on Dev Interrupted, bestselling author and OWASP Top 10 Project Leader Tanya Janca returns to unpack why vibe coding has officially made the list of the most critical security risks in software development. Tanya breaks down the psychology of bad code, explains why the modern software engineer has become the primary attack surface, and shares actionable strategies for shifting security left directly into your AI prompts. Finally, she provides practical, behavioral solutions for building a golden path that makes secure coding the easy choice for your engineering team. 

Register here: for the June 25th workshop, Life Beyond Tokenmaxxing, to learn how to measure real AI impact and ROI across the SDLC.

Follow the show:

• Subscribe to our Substack 
• Follow us on LinkedIn
• Subscribe to our YouTube Channel
• Leave us a Review

Follow the hosts:

• Follow Andrew
• Follow Ben
• Follow Dan

Follow today's guest:

• SheHacksPurple: Learn secure coding from Tanya atshehackspurple.ca
• DevSec Station: Listen to Tanya's bite-sized security podcast for developers at devsecstation.com
• Secure My Vibe: Download Tanya's free AI secure coding prompt library at securemyvibe.ca 
• The Psychology of Bad Code: Read Tanya's insightful blog series on behavioral economics and application security on the SheHacksPurple Blog
• OWASP Top 10: Learn more about the most critical security risks to web applications atowasp.org
• Tanya’s Newsletter: Sign up for Tanya’s newsletter at  newsletter.shehackspurple.ca  
• Connect with Tanya: LinkedIn | Twitter/X

OFFERS

• Start Free Trial:Get started with LinearB's AI productivity platform for free.
• Book a Demo:Learn how you can ship faster, improve DevEx, and lead with confidence in the AI era.

LEARN ABOUT LINEARB

• AI Code Reviews:Automate reviews to catch bugs, security risks, and performance issues before they hit production.
• AI & Productivity Insights:Go beyond DORA with AI-powered recommendations and dashboards to measure and improve performance.
• AI-Powered Workflow Automations:Use AI-generated PR descriptions, smart routing, and other automations to reduce developer toil.
• MCP Server:Interact with your engineering data using natural language to build custom reports and get answers on the fly.