Catching up with
summary
Claims that interns find secrets in an hour, and demonstrates free tools and a public case where exposed credentials were found in late 2021. Describes API risks shown by a web proxy that reveals mobile APIs in four seconds, argues to shift everywhere (left and right) and to prioritize legacy apps, notes a gap of 500 devs per security person, released a small framework in February and warns raw ChatGPT code is often insecure while security-focused copilot tools are emerging.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:01Finding secrets
- 2:50DevSecOps culture
- 8:51Security mistakes
- 10:36APIs security blind spot
- 13:27Beyond SDLC security
- 17:39AI code security risks
- 20:50Fixing coding education
- 22:14Secure coding tools
related talks
19mProtect Your Digital Assets: Spot and Secure Open APIs Quickly
38mFinding Security Issues in Open Source
15mInterview with
55mBreaking and Fixing Web Application Security
27mHidden Dangers Of AI In Developer Workflows: Navigating... with Dwayne McDaniel
56mKeynote: AppSec: From Outsiders to Allies
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
49mFrom Application Security to Developer Security