Säker utveckling

Säker utveckling has been a member of Linktree for 2 years and joined in October 2024. Resources secdevkurs has populated their site with include: • LLM_Guardrails.zip • OVB — OpenVault Bank • picoCTF - CMU Cybersecurity Competition • SQLite: System Tables • picoCTF More SQLi • picoCTF File Uploads • SQL Injektion Övning • XSS Injektion spel • CIS Benchmarks™ • SEC-T • NDC Security 2025 | Security Conference for Software Developers • OWASP Stockholm | Meetup • Cybersecurity Academy • Hack The Box Meetup: Stockholm, SE | Meetup • Threat Modeling: Designing for Security - Adam Shostack • Alice and Bob Learn Secure Coding - Tanya Janca • Alice and Bob Learn Application Security - Tanya Janca • The Pheonix Project - Gene Kim • Transparency Exchange API Specification • www.cyberresilienceact.eu • Web Security Academy: Free Online Training from PortSwigger • tl;dr sec • Cybersecurity (one year master) Autumn 2025 MU135 • Master´s Programme in Information Security - Stockholm University • Cybersecurity, Master's Programme, 120 credits • Certified in Cybersecurity Certification | ISC2 • SheHacksPurple - Tanya Janca on Youtube • APIsec University – Become an API Security Expert • Security and So Many Things • Cybersecurity Certificate Tier List (2023) • OffSec Sec-100 OCSP • Best Cyber Security Courses Online & In Person | SANS Institute • GitHub - rennf93/fastapi-guard: A security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. It integrates seamlessly with FastAPI to offer robust protection against various security threats. · Git • Known Exploited Vulnerabilities Catalog | CISA • Skills | Awesome GitHub Copilot • Bolt • GitHub - anchore/syft: CLI tool and library for generating a Software Bill of Materials from container images and filesystems · GitHub • GitHub - rfc-st/humble: A humble, and 𝗳𝗮𝘀𝘁, security-oriented HTTP headers analyzer. · GitHub • OWASP SAMM | OWASP Foundation • SAMMY - Your Secure SDLC Management Tool • Shodan Search Engine • Puma Scan | Installation Instructions • URL Fuzzer - online hidden file & directory finder • IDE integrated API Scanner • Logstash: Collect, Parse, Transform Logs | Elastic • Open Source Observability Platform | Uptrace • SigNoz | The Open Source Datadog Alternative • Splunk | The Key to Enterprise Resilience • Key Vault | Microsoft Azure • HashiCorp Vault | Identity-based secrets management • Application Insights for ASP.NET Core applications - Azure Monitor • Protect against OWASP API security Top 10 Vulnerabilities • GitHub - tldrsec/awesome-secure-defaults: Awesome secure by default libraries to help you eliminate bug classes! • HSTS Preload List Submission • DefectDojo | CI/CD and DevSecOps Automation • GitHub - Yelp/detect-secrets: An enterprise friendly way of detecting and preventing secrets in code. • OWASP WinFIM.NET | OWASP Foundation • Microsoft Security Development Lifecycle Threat Modelling • IriusRisk Automated Threat Modeling Tool For Secure Software • GitHub - anchore/syft: CLI tool and library for generating a Software Bill of Materials from container images and filesystems • Analyse your HTTP response headers • Qualys SSL Labs • Netflix Chaos Monkey • File Upload - OWASP Cheat Sheet Series • Server Side Request Forgery Prevention - OWASP Cheat Sheet Series • OWASP XSS Cheat Sheet • www.troyhunt.com • MCP Servers: The New Security Nightmare | Equixly • Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Personal Data • AI Bug Hunter Sets Milestone By Claiming Top Spot on HackerOne's Leaderboard • Header-Based IDOR: Financial Data Leak | Herish Blog • A fresh look at user enumeration in Microsoft Teams | by Bastian Kanbach | SSE Blog • 3,000 Google Cloud API Keys Exposed: Security Lessons - Application Security Standards • Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies | by Alex Birsan | Medium • Security Flaw in 'Swish' Reveals Transaction History of Users • How one programmer broke the internet by deleting a tiny piece of code • Plug, Play, and Prey: The security risks of the Model Context Protocol | Microsoft Community Hub • Malicious helpers: VS Code Extensions observed stealing sensitive information - Security Boulevard • Hacking Formula 1: Accessing Max Verstappen's passport and PII through FIA bugs • Return of the Shai-Hulud worm affects over 25,000 GitHub repositories | Sysdig • You're a govt official. You accidentally slap personal info on the web. Quick, blame a kid! • The Register • Fresh survey reveal diverging fraud trends in the Nordics • F5 discloses major security breach linked to nation-state hackers – GeekWire • WA man set up fake free wifi at Australian airports and on flights to steal people’s data, police allege • SolarWinds hack explained: Everything you need to know • Outshift | Top 15 software supply chain attacks: Case studies • XZ Utils Backdoor — Everything You Need to Know, and What You Can Do | Akamai • Compromised npm Package: event-stream • I’m harvesting credit card numbers and passwords from your site. Here’s how. • Omgå flygplatssäkerhet via SQL-injektion 2024