Tanya Janca | Shehackspurple
@shehackspurple
Followers
50K
Following
110K
Media
6K
Statuses
61K
Secure Coding Trainer, Best-selling author of Alice and Bob Learn Secure Coding & Alice and Bob Learn Application Security. #AppSec she/her 🌻
Canada - West Coast 🍁
Joined June 2017
I was on the @DarknetDiaries podcast! 🥳
New episode alert 🚨 Ep 165: Tanya @shehackspurple is a globally recognized AppSec (application security) expert and founder of We Hack Purple. In this episode, she shares wild stories from the front lines of cybersecurity. She shares stories of when she was a penetration tester
43
43
629
How To Get Your First Job In #Cybersecurity: a blog post of all the steps you need to transition into #InfoSec! https://t.co/eTMxz3mBmR
3
14
32
React Developers: There is a serious vulnerability in React and Next.JS (CVE-2025-55182 / CVE-2025-66478). It affects those using React for the BACKEND (RSC and React Server Functions). It is similar in damage and exploit to log4j. Please upgrade asap. https://t.co/5or3ljEk3T
0
4
8
I was on Darknet Diaries Ep. 165! Learn about dumb buildings with malware, how going to the dentist can get you in hot water, and that sharing breach information can you get buy in with software developers. YouTube: https://t.co/9sdo1kLjYY Or any podcast platform
5
6
23
React Developers: There is a serious vulnerability in React and Next.JS (CVE-2025-55182 / CVE-2025-66478). It affects those using React for the BACKEND (RSC and React Server Functions). It is similar in damage and exploit to log4j. Please upgrade asap. https://t.co/dAlHGougVI
1
4
11
May I ask you a favor? If you follow me here, consider following me there too? I'm equally nerdy and helpful, I promise! https://t.co/5jcK3jjZjt Note: I can't connect because LinkedIn has cut me off/I'm maxed out.
2
3
8
React Developers: There is a serious vulnerability in React and Next.JS (CVE-2025-55182 / CVE-2025-66478). It affects those using React for the BACKEND (RSC and React Server Functions). It is similar in damage and exploit to log4j. Please upgrade asap. https://t.co/dAlHGougVI
1
4
11
Create your own AppSec-themed band name. I'll start: “Zero Day Reapers” 🤘 #talkappsectome PS Yes, you are allowed to use the Wu-Tang Name Generator.
3
0
9
Hey folks, I don't have a sponsor yet for my December SheHacksPurple nerd-a-licious newsletter of 10,435 subscribers. If you want to reach a large audience of #appsec and security conscious devs, give me a holler.
2
3
13
There is critical vulnerability in React Server Components disclosed as CVE-2025-55182 that impacts React 19 and frameworks that use it. A fix has been published in React versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately. https://t.co/kue7kd0XEX
react.dev
The library for web and native user interfaces
143
1K
4K
@shehackspurple lit up the stage at our Global AppSec EU event earlier this year. Now it’s your turn! The Global AppSec EU 2026 CFP is officially open, and we’re looking for passionate voices and fresh ideas. Submit your proposal now! https://t.co/Oh4ZTBbcD1
#appsec
0
1
2
Random Tanya Thoughts on Video: securing vibe coded apps built by non-software engineers. How do we handle that????? https://t.co/OGoVZcpY5E
0
1
2
FOLKS! The audiobook of Alice and Bob Learn Secure Coding is OUT on @audible now! If you buy it and like it, please rate it for me? I'm so pleased it's finally available. https://t.co/ls0h4c9T9F
2
14
36
React Developers: I need you to upgrade right now. I don't ring the alarm bell often, but this time I am. It's similar to Log4j, but not yet exploited in the wild. This is quite serious, please upgrade now. https://t.co/11ZslhTD2c
1
2
11
My talk from @defcon is finally out! Watch 'Secure Code Is Critical Infrastructure: Hacking Policy for Public Good' here: https://t.co/hYAVWEKvIe If you like it, please give it a thumbs up. 👍
4
18
106
Hi again. As I explained yesterday, I am going to record an online course and I'm testing how the coding parts will look. I updated it to dark mode, changed the cursor, etc. May I have more feedback?
8
2
33
#OWASP Foundation is asking for donations. Do they provide you with lots of value? Perhaps this is a chance to show your appreciation? https://t.co/7uWrGontwe
0
3
7
At Wild West Hackin' Fest this year I was presented with The Rita Award. It is in recognition of outstanding community work. This is my acceptance speech. Thank you John. @strandjs @WWHackinFest
5
3
32
I hosted a webinar -> Metrics, Models, and Mindsets: A Conversation About the Future of AppSec, with my friends Spyros from Smithy and Aram! Blog post and video at the link. https://t.co/PTwX1AyqoH
0
1
8
Hey folks. I am going to record an online course and I'm testing how the coding parts will look. I would love some feedback as to if code is large enough to see, am I too large/small, is highlighting the code 'enough' for the viewer to follow, and anything else on your mind.
12
2
32