Getting ready for spring! These are dahlia tubers that I dug up last fall, now ready to plant. See the growth in the top right image? That means it's alive. 🌼 #infosecgardening

I put pineapple in pizza. It's delicious! I understand if most of you need to unfollow me now. 😛

I did my first Alice and Bob Learn Secure Coding book stream yesterday… and honestly, it exceeded my expectations. So many of you showed up. The questions were thoughtful. The conversation was real. And Dr. Gerald Auger (Simply Cyber) was an absolutely fantastic guest! 1/3

New blog post alert, folks! 💜 The Psychology of Bad Code Part 4 is out, and this one is about copy-pasting code from online forums. Let’s be real: most of us have grabbed code from Stack Overflow, GitHub, or a blog post when we were stuck, rushed, or just trying to get unblocked. 1/3

Too true.....

I have no idea how many times I have to ask Fitbit to remove me from their dataset that they sold to @google, but apparently it's more than 3 times (since 2019). I have done the steps to delete my data multiple times, but I still receive these messages. 1/2

Join me, Katie Paxton-Fear (Semgrep), Joni Klippert (Stackhawk), Kurt Boberg, Derian Stenglein, and Diptendu Kar on April 15th, for a lively panel to kick off #SnowFroc 2026! "Agentically Engineered: How AI Agents Are Rewriting the DNA of AppSec". Note: seats are limited! https://twp.ai/9Pbzm9

SnowFroc ’26 is ONE WEEK away and I’m coming to Denver with a keynote AND a workshop. Keynote: Threat Modeling Developer Behavior: The Psychology of Bad Code Workshop: Supply Chain Isn’t Just Dependencies Anymore If you’re going, come say hi. I love meeting friendly humans who build things! 1/2

On April 10th, I’m kicking off something new… and I would LOVE for you to join me 💜 I’ll be diving into Chapter 1 of Alice & Bob Learn Secure Coding live, and I’m bringing an awesome guest with me: Dr. Gerald Auger (Simply Cyber)! https://twp.ai/9PcCuS 1/3

Who are the influencers in security you follow? And how do they help you? Who should we all start following? #AppSecThursday #talkAppSectome

I’m excited to announce that I’ll be teaching a two-day class at CppCon Sept 2026: Secure Engineering in Modern C++: Preventing Catastrophic Failures C++ powers infrastructure, robotics, finance, game engines, and safety-critical systems. 1/3

I'm quoted in the following article with best practices for developers to lock down their build systems: Anthropic employee error exposes Claude Code source

Android's new feature "adjust how bright you want your flashlight to be, every time, instead of just on/off": NO THANK YOU. I don't want to press extra buttons for no reason thanks.

I’m thrilled to share that I’ll be teaching at Black Hat USA this August! My training is Secure Coding for Embedded Systems in C and C++. If you write firmware or low-level code, we’ll dig into the security pitfalls that show up again and again in C and C++ and practice fixing them together. 1/2

It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect

Hi! If you are Canadian, I NEED YOUR HELP. Please call your member of parliament and ask them to vote YES on petition e-7115. Watch the video to learn more! https://twp.ai/NTbe5F Petition: https://twp.ai/9PbuV3

Not bad. I only made 4, just to test. Have you checked out my new podcast yet? https://twp.ai/4iww60

On April 10th, I’m kicking off something new… and I would LOVE for you to join me 💜 I’ll be diving into Chapter 1 of Alice & Bob Learn Secure Coding live, and I’m bringing an awesome guest with me: Dr. Gerald Auger (Simply Cyber)! https://twp.ai/9PbrMz 1/3

What's the name of YOUR Wi-Fi?

I'm quoted in the following article with best practices for developers to lock down their build systems: Anthropic employee error exposes Claude Code source

Join me, Katie Paxton-Fear (Semgrep), Joni Klippert (Stackhawk), Kurt Boberg, Derian Stenglein, and Diptendu Kar on April 15th, for a lively panel to kick off #SnowFroc 2026! "Agentically Engineered: How AI Agents Are Rewriting the DNA of AppSec". Note: seats are limited! https://twp.ai/9PbyCA

What’s the one secure-coding habit you wish you had started earlier? Share a tip you use that actually works. #AppSecThursday #talkAppSectome

I’m excited to announce that I’ll be teaching a two-day class at CppCon Sept 2026: Secure Engineering in Modern C++: Preventing Catastrophic Failures C++ powers infrastructure, robotics, finance, game engines, and safety-critical systems. 1/3

I'm quoted in the following article with best practices for developers to lock down their build systems: Anthropic employee error exposes Claude Code source

#Hugops to the dev that forgot to minifiy. Ouch. 💜 https://twp.ai/9Pc5qU#Hugops

Wholeheartedly recommend Tanya's trainings, and the early bird price is a steal, tbh. I've already forwarded this to some people at work...

I’m thrilled to share that I’ll be teaching at Black Hat USA this August! My training is Secure Coding for Embedded Systems in C and C++. If you write firmware or low-level code, we’ll dig into the security pitfalls that show up again and again in C and C++ and practice fixing them together. 1/2

Important question for software developers: what do you wish you knew more about in regard to creating more secure software? If you could suddenly know something, like Neo in the matrix, what would it be? I will see if I can help.

This! Mark your calendars, friends!

On April 10th, I’m kicking off something new… and I would LOVE for you to join me 💜 I’ll be diving into Chapter 1 of Alice & Bob Learn Secure Coding live, and I’m bringing an awesome guest with me: Dr. Gerald Auger (Simply Cyber)! https://twp.ai/9PcsBS 1/3

It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect

Hi! If you are Canadian, I NEED YOUR HELP. Please call your member of parliament and ask them to vote YES on petition e-7115. Watch the video to learn more! https://twp.ai/NTcTov Petition: https://twp.ai/E6HzQn

GROAN

Join me, Katie Paxton-Fear (Semgrep), Joni Klippert (Stackhawk), Kurt Boberg, Derian Stenglein, and Diptendu Kar on April 15th, for a lively panel to kick off #SnowFroc 2026! "Agentically Engineered: How AI Agents Are Rewriting the DNA of AppSec". Note: seats are limited! https://twp.ai/9PckPj

I have a new oped out with Digital Journal. I argue that in the face of vibecoding and AI's impact on software development, the Canadian government needs a secure-coding. Luckily, @shehackspurple.bsky.social already has one: www.ourcommons.ca/petitions/en... www.digitaljournal.com/tech-science...

I’ve been getting a lot of “do you have something I can send my manager?” requests lately. So… I made a proper training brochure! Clear outcomes, realistic expectations, and no fear-based nonsense. 👉 https://twp.ai/NTb77B Just brochure: https://twp.ai/9PbNWz

Story challenge: What’s your funniest or most relatable security moment? Without breaking NDA, of course! #AppSecThursday #talkAppSectome

My plans for tonight got cancelled, #RSAC, what should I do? What's up?

Would you like to hire me for in-person, secure coding training? Here's my upcoming travel schedule for adding training dates: April: Denver, CO May: Toronto June: Vienna (can add anywhere in EU) August: Anywhere in EU Sept: Denver, CO tanya AT shehackspurple DOT ca Isn't the AI image creepy?

On April 10th, I’m kicking off something new… and I would LOVE for you to join me 💜 I’ll be diving into Chapter 1 of Alice & Bob Learn Secure Coding live, and I’m bringing an awesome guest with me: Dr. Gerald Auger (Simply Cyber)! https://twp.ai/9PckZ3 1/3

I'm doing what I do best.... #rsac

At The Forte Group breakfast, with a room full my role models! Learning about lady lead startup founders. 🥳

I’m officially at RSAC 2026 in San Francisco! 🎉 If you’re here too, please come say hi, I’d LOVE to meet you. Introduce yourself, tell me what you build, and what you’re hoping to learn at RSAC. Bonus! I’m speaking twice: 1/2

It’s #CyberMentoringMonday!!!! Are you looking for a professional mentor or to learn more about InfoSec? Are you experienced and willing to ‘give back’? Use this thread and hashtag to connect

*In addition to the letter* one can sign in support of the bill at the link below. www.ourcommons.ca/petitions/en...

Hi! If you are Canadian, I NEED YOUR HELP. Please call your member of parliament and ask them to vote YES on petition e-7115. Watch the video to learn more! https://twp.ai/NTcDDN Petition: https://twp.ai/E6HipF

Get in on this folks. It's a great book, and Tanya is a fantastic teacher.

📢 Announcing DevSec Station, my new podcast! 💜 If you write code, this is for you. Short, practical #AppSec lessons. No scare tactics. Very little homework. 😉 https://twp.ai/9Pck1N https://twp.ai/4ixUpJ

Guess who's half asleep and on her way to B-Sides San Francisco???? 🥳

On April 10th, I’m kicking off something new… and I would LOVE for you to join me 💜 I’ll be diving into Chapter 1 of Alice & Bob Learn Secure Coding live, and I’m bringing an awesome guest with me: Dr. Gerald Auger (Simply Cyber)! https://twp.ai/9PcmbZ 1/3