WeAreDevelopers LIVE • Jan 26, 2022

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

Are your open-source Java dependencies secretly hosting malware? Watch live exploit demos of Log4j and learn how shifting security left protects your software supply chain.

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

2:00 min

Mitigating risks from supply chain attacks and vulnerable libraries

Jasmin Azemović

Jasmin Azemović · World Congress 2023

2:46 min

Mapping the complete software supply chain attack surface

Matthew Brady

Matthew Brady · World Congress 2026 Europe

2:13 min

Understanding software vulnerabilities and prominent exploits

Mohammad-Ali A'râbi

Mohammad-Ali A'râbi · World Congress 2026 Europe

3:39 min

Exploring the mechanics of software supply chain attacks

Chris Heilmann

Chris Heilmann +2 · LIVE

1:22 min

Discovering security vulnerabilities outside primary application code

Farshad Abasi

Farshad Abasi · World Congress 2026 North America

3:59 min

Vulnerabilities within the cyber software supply chain

Jon Geater · World Congress 2023

More from WeAreDevelopers LIVE

Humans in the Loop: Storytelling in Tech thumbnail

Humans in the Loop: Storytelling in Tech

Christian Heilmann +2

4 days ago

WeAreDevelopers LIVE: Your Brain Is Lying to You: Cognitive Biases in Development thumbnail

Your Brain Is Lying to You: Cognitive Biases in Development

Last week

Like Peas in a Pod - What Happens When People Clone Your App? thumbnail

Like Peas in a Pod - What Happens When People Clone Your App?

Ivan Kutskir +2

2 weeks ago

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail

Read more, Prompt Less

Christian Heilmann +2

3 weeks ago

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail

Tech Education in Two Languages

Daniel Cranney +1

Oct 2026

WeAreDevelopers LIVE - Playing in Production thumbnail

Playing in Production

Andrew MacLean +2

Sep 2026

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Ship Happens: Guardrails for AI-Written Code

Anthony Nguyen

LaunchDarkly

Senior Solutions Engineer

Your AI Wrote the Code. Who Vouches for It?

Siddharth Joshi

GitHub

Senior Customer Success Architect

How We Cut Our API's p99 Latency from Minutes to Under a Second

Deepak Agrawal

Atlassian

Principal Software Engineer

Agentic SDLC with Antigravity Harness

Tarun Pant

Google Cloud

Director, Customer Engineering

Related videos

Walking into the era of Supply Chain Risks thumbnail

Walking into the era of Supply Chain Risks

Vandana Verma

LIVE · Apr 2022

Open Source Secure Software Supply Chain in action thumbnail

Open Source Secure Software Supply Chain in action

Natale Vinto · Red Hat

World Congress · 2024

Security Pitfalls for Software Engineers thumbnail

Security Pitfalls for Software Engineers

Jasmin Azemović · HTEC

World Congress · 2023

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski thumbnail

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski +1

Coffee With Developers · Mar 2026

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most thumbnail

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most

Marcus Wermuth · Safety Cybersecurity

World Congress Europe · 2026

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor thumbnail

Coffee with Developers with Feross Aboukhadijeh of Socket about the xz backdoor

Feross Aboukhadijeh

Coffee With Developers · Apr 2024

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

The Overflow: Security and Privacy

Every week we dig through hundreds of links from all over the web, and it’s often hard for developers keep up. So, we thought we’d put together some links we couldn’t fit in the Dev Digest in what ...

8 months ago

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

about 2 years ago

Dev Digest 138 - Are you secure about this?

From learning to earning

Jobs that call for the skills explored in this talk.

Product Security Incident Response Analyst

Expert $329k Remote Github Code Review Data Analysis

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

about 2 months ago • Verified

Senior Product Security Architect

Austin, United States

Expert Remote Agentic AI Security Architecture

6 days ago • Verified

Software Development Engineer 1

Bengaluru, India

Starter Remote Java Spring

6 days ago • Verified

Software Development Engineer 1

Bengaluru, India

Starter Remote Java