Säker utveckling

Säker utveckling has been a member of Linktree for 1 year and joined in October 2024. Resources secdevkurs has populated their site with include: • Omgå flygplatssäkerhet via SQL-injektion 2024 • OWASP XSS Cheat Sheet • I’m harvesting credit card numbers and passwords from your site. Here’s how. • Compromised npm Package: event-stream • XZ Utils Backdoor — Everything You Need to Know, and What You Can Do | Akamai • Best Cyber Security Courses Online & In Person | SANS Institute • Security and So Many Things • The Pheonix Project - Gene Kim • Alice and Bob Learn Application Security - Tanya Janca • Alice and Bob Learn Secure Coding - Tanya Janca • Threat Modeling: Designing for Security - Adam Shostack • SheHacksPurple - Tanya Janca on Youtube • Certified in Cybersecurity Certification | ISC2 • OffSec Sec-100 OCSP • Hack The Box Meetup: Stockholm, SE | Meetup • Cybersecurity Academy • OWASP Stockholm | Meetup • NDC Security 2025 | Security Conference for Software Developers • SEC-T • www.troyhunt.com • CIS Benchmarks™ • Qualys SSL Labs • Analyse your HTTP response headers • GitHub - anchore/syft: CLI tool and library for generating a Software Bill of Materials from container images and filesystems • Cybersecurity, Master's Programme, 120 credits • Master´s Programme in Information Security - Stockholm University • Cybersecurity (one year master) Autumn 2025 MU135 • IriusRisk Automated Threat Modeling Tool For Secure Software • Microsoft Security Development Lifecycle Threat Modelling • OWASP WinFIM.NET | OWASP Foundation • HSTS Preload List Submission • GitHub - tldrsec/awesome-secure-defaults: Awesome secure by default libraries to help you eliminate bug classes! • SolarWinds hack explained: Everything you need to know • File Upload - OWASP Cheat Sheet Series • Key Vault | Microsoft Azure • Splunk | The Key to Enterprise Resilience • SigNoz | The Open Source Datadog Alternative • Open Source Observability Platform | Uptrace • Logstash: Collect, Parse, Transform Logs | Elastic • tl;dr sec • IDE integrated API Scanner • WA man set up fake free wifi at Australian airports and on flights to steal people’s data, police allege • URL Fuzzer - online hidden file & directory finder • picoCTF File Uploads • picoCTF - CMU Cybersecurity Competition • picoCTF More SQLi • SQLite: System Tables • Puma Scan | Installation Instructions • Shodan Search Engine • Fresh survey reveal diverging fraud trends in the Nordics • You're a govt official. You accidentally slap personal info on the web. Quick, blame a kid! • The Register • Return of the Shai-Hulud worm affects over 25,000 GitHub repositories | Sysdig • Hacking Formula 1: Accessing Max Verstappen's passport and PII through FIA bugs • Malicious helpers: VS Code Extensions observed stealing sensitive information - Security Boulevard • Plug, Play, and Prey: The security risks of the Model Context Protocol | Microsoft Community Hub • How one programmer broke the internet by deleting a tiny piece of code • Security Flaw in 'Swish' Reveals Transaction History of Users • Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies | by Alex Birsan | Medium • SAMMY - Your Secure SDLC Management Tool • OWASP SAMM | OWASP Foundation • Web Security Academy: Free Online Training from PortSwigger • OVB — OpenVault Bank • 3,000 Google Cloud API Keys Exposed: Security Lessons - Application Security Standards • A fresh look at user enumeration in Microsoft Teams | by Bastian Kanbach | SSE Blog • Header-Based IDOR: Financial Data Leak | Herish Blog • GitHub - rfc-st/humble: A humble, and 𝗳𝗮𝘀𝘁, security-oriented HTTP headers analyzer. · GitHub • GitHub - anchore/syft: CLI tool and library for generating a Software Bill of Materials from container images and filesystems · GitHub • Bolt • AI Bug Hunter Sets Milestone By Claiming Top Spot on HackerOne's Leaderboard • Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Personal Data • Skills | Awesome GitHub Copilot • Known Exploited Vulnerabilities Catalog | CISA • www.cyberresilienceact.eu • Transparency Exchange API Specification • MCP Servers: The New Security Nightmare | Equixly • GitHub - rennf93/fastapi-guard: A security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. It integrates seamlessly with FastAPI to offer robust protection against various security threats. · Git • LLM_Guardrails.zip • SQL Injektion Övning • XSS Injektion spel • Netflix Chaos Monkey • APIsec University – Become an API Security Expert • Protect against OWASP API security Top 10 Vulnerabilities • Server Side Request Forgery Prevention - OWASP Cheat Sheet Series • Cybersecurity Certificate Tier List (2023) • GitHub - Yelp/detect-secrets: An enterprise friendly way of detecting and preventing secrets in code. • DefectDojo | CI/CD and DevSecOps Automation • Application Insights for ASP.NET Core applications - Azure Monitor • HashiCorp Vault | Identity-based secrets management • Outshift | Top 15 software supply chain attacks: Case studies • F5 discloses major security breach linked to nation-state hackers – GeekWire