The top list of securing your developer workstation
summary
Data from TrueSec and Microsoft shows rapid escalation — 58% of breaches reach full domain control within two hours and Microsoft reports a median time of 1 hour 42 minutes from breach to full compromise. Recommendations list concrete mitigations: run risky tasks in VMs or VS Code containers and GitHub Codespaces, enable MFA everywhere, avoid persistent admin sessions, use BitLocker/FileVault (remember disk encryption protects only when powered off), audit plugins and package sources (Brew, winget, npm) and adopt hardware keys like UB Keys.
AI-written summary · about
chapters (10)
- 0:00Intro
- 2:40About Truesec
- 5:01Establish targets
- 5:40Establish threat actors
- 11:11Lack of isolation
- 13:21No policy for hardware outside of work
- 17:04Too many IDE Plugins
- 22:593rd party dependencies
- 25:35Not using MFA solutions
- 30:43To much Access
related talks
19mThe toplist of securing your developer workstation
48mCrucial Cyber Hygiene Defenses for 2023
48mSecurity from zero
55m52 mins from initial access to ransomware - is your defensive team ready?
25mSecuring Your DevOps Transformation
45mBuilding Secure Software: Practical Strategies for Developers
20mDeveloper’s security survival guide
51mSecurity 101: A Beginner’s Guide to Cybersecurity and Zero Trust for Developers