> Markdown version of [/videos/346-stranger-danger-your-java-attack-surface-just-got-bigger?t=161](https://www.wearedevelopers.com/videos/346-stranger-danger-your-java-attack-surface-just-got-bigger?t=161). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Stranger Danger: Your Java Attack Surface Just Got Bigger

Are your open-source Java dependencies secretly hosting malware? Watch live exploit demos of Log4j and learn how shifting security left protects your software supply chain.

- **Speakers:** Vandana Verma Sehgal
- **Event:** WeAreDevelopers LIVE
- **Published:** January 26, 2022
- **Duration:** 1:58:59
- **URL:** https://www.wearedevelopers.com/videos/346-stranger-danger-your-java-attack-surface-just-got-bigger
- **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/e2101242993d00ce0ad1ea1f709d5961/thumbnails/thumbnail.jpg?time=163815ms

## Access

Playback and chapters for this video are available with a Free account.

## Related Moments

- [Mitigating risks from supply chain attacks and vulnerable libraries](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) (from "Security Pitfalls for Software Engineers")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/eab2cc9358cdcef85af99d0280eb1f6b/thumbnails/thumbnail.jpg?time=262250ms
- [Mapping the complete software supply chain attack surface](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) (from "Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/ce760d1f58c375b2cda83931e73cb215/thumbnails/thumbnail.jpg?time=141270ms
- [Understanding software vulnerabilities and prominent exploits](https://www.wearedevelopers.com/videos/100235-beyond-sboms-the-future-of-container-supply-chain-security) (from "Beyond SBOMs: The Future of Container Supply Chain Security")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/e219da07338d3bd15418462ad9b96038/thumbnails/thumbnail.jpg?time=152360ms
- [Exploring the mechanics of software supply chain attacks](https://www.wearedevelopers.com/videos/1841-wearedevelopers-live-bitpanda-s-ai-first-approach) (from "WeAreDevelopers LIVE - Bitpanda’s AI First Approach")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/a93a3550210466bdca13415dee11adf9/thumbnails/thumbnail.jpg?time=90620ms
- [Discovering security vulnerabilities outside primary application code](https://www.wearedevelopers.com/videos/100396-your-threat-model-is-lying-to-you-why-modeling-the-design-isn-t-enough-in-2026) (from "Your Threat Model Is Lying to You: Why Modeling the Design Isn’t Enough in 2026")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/1cfdb0e6d9bf6c3fc5783c16ec4c9557/thumbnails/thumbnail.jpg?time=124076ms
- [Vulnerabilities within the cyber software supply chain](https://www.wearedevelopers.com/videos/784-overcome-your-trust-issues-in-a-world-of-fake-data-data-provenance-ftw) (from "Overcome your trust issues! In a world of fake data, Data Provenance FTW")
  - **Thumbnail URL:** https://customer-goifxnzhrq3d0d54.cloudflarestream.com/e5c8b1f2684d3910f20120d18cbc26b4/thumbnails/thumbnail.jpg?time=244930ms

## Related Articles

- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)

## Related Jobs

- [Senior Supply Chain Security Engineer](https://www.wearedevelopers.com/jobs/48462-senior-supply-chain-security-engineer) at **Docker, Inc.**
- [Senior Software Engineer, Vulnerability Management](https://www.wearedevelopers.com/jobs/ext/3814641-senior-software-engineer-vulnerability-management) at **GitHub**
- [Staff Developer Advocate, GitHub Security Lab](https://www.wearedevelopers.com/jobs/ext/2628442-staff-developer-advocate-github-security-lab) at **GitHub**
- [Senior Principal Software Engineer, Docker and Ecosystem](https://www.wearedevelopers.com/jobs/48456-senior-principal-software-engineer-docker-and-ecosystem) at **Docker, Inc.**
- [Senior Product Security Architect](https://www.wearedevelopers.com/jobs/48532-senior-product-security-architect) at **Expedia**
- [Principal Software Engineer, Docker Hardened Images](https://www.wearedevelopers.com/jobs/48453-principal-software-engineer-docker-hardened-images) at **Docker, Inc.**