I joined The Secure Disclosure to talk OWASP Top 10, vibe coding, broken access control, and why “we’ll fix security later” remains one of our industry’s most cursed little traditions.

Spoiler: secure coding is not magic. It is a skill. We should probably teach it. 💜

Listen to the full episode with Vinit Patel now!

YouTube: https://twp.ai/paTtAw
Spotify: https://twp.ai/bWU9ak
Apple Podcasts: https://twp.ai/IlpAoU

What does an attack against a developer look like? Check it out, in the video below. To learn how to defend, watch or download the podcast.

https://twp.ai/E5AZ9m

Sci-fi book pick: Which sci-fi book or series is your favourite? Tell me about what I should read next!

#AppSecThursday #talkAppSectome

I’m doing another live book stream 😊

June 5, 8:00 am PST, I’ll be diving into Chapter 3 of Alice and Bob Learn Secure Coding with Scott Helme.

This chapter, “Improving”, is one of my favourites because it’s all the “okay but how do I actually do that?” stuff.

https://twp.ai/4hq4Uc
1/3

I’m hosting another live book stream, and this one is all about the foundations of secure coding.

On May 10, 11 am-1 pm PST, I’ll be joined by Ray LeBlanc to walk through Chapter 2 of Alice and Bob Learn Secure Coding.

https://twp.ai/4hq1Jn
1/4

I’m excited to announce that I’ll be teaching a two-day class at CppCon Sept 2026:

Secure Engineering in Modern C++: Preventing Catastrophic Failures

C++ powers infrastructure, robotics, finance, game engines, and safety-critical systems.

But small engineering mistakes can turn into major security failures.
1/2