Säker utveckling

Säker utveckling has been a member of Linktree for 1 year and joined in October 2024. Resources secdevkurs has populated their site with include: • LLM_Guardrails.zip • GitHub - rennf93/fastapi-guard: A security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. It integrates seamlessly with FastAPI to offer robust protection against various security threats. · Git • www.troyhunt.com • MCP Servers: The New Security Nightmare | Equixly • Transparency Exchange API Specification • www.cyberresilienceact.eu • Known Exploited Vulnerabilities Catalog | CISA • Skills | Awesome GitHub Copilot • Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Personal Data • AI Bug Hunter Sets Milestone By Claiming Top Spot on HackerOne's Leaderboard • Bolt • GitHub - anchore/syft: CLI tool and library for generating a Software Bill of Materials from container images and filesystems · GitHub • GitHub - rfc-st/humble: A humble, and 𝗳𝗮𝘀𝘁, security-oriented HTTP headers analyzer. · GitHub • Header-Based IDOR: Financial Data Leak | Herish Blog • A fresh look at user enumeration in Microsoft Teams | by Bastian Kanbach | SSE Blog • 3,000 Google Cloud API Keys Exposed: Security Lessons - Application Security Standards • OVB — OpenVault Bank • Web Security Academy: Free Online Training from PortSwigger • OWASP SAMM | OWASP Foundation • SAMMY - Your Secure SDLC Management Tool • Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies | by Alex Birsan | Medium • Security Flaw in 'Swish' Reveals Transaction History of Users • How one programmer broke the internet by deleting a tiny piece of code • Plug, Play, and Prey: The security risks of the Model Context Protocol | Microsoft Community Hub • Malicious helpers: VS Code Extensions observed stealing sensitive information - Security Boulevard • Hacking Formula 1: Accessing Max Verstappen's passport and PII through FIA bugs • Return of the Shai-Hulud worm affects over 25,000 GitHub repositories | Sysdig • You're a govt official. You accidentally slap personal info on the web. Quick, blame a kid! • The Register • Fresh survey reveal diverging fraud trends in the Nordics • Shodan Search Engine • Puma Scan | Installation Instructions • SQLite: System Tables • picoCTF More SQLi • picoCTF - CMU Cybersecurity Competition • picoCTF File Uploads • URL Fuzzer - online hidden file & directory finder • WA man set up fake free wifi at Australian airports and on flights to steal people’s data, police allege • IDE integrated API Scanner • tl;dr sec • Logstash: Collect, Parse, Transform Logs | Elastic • Open Source Observability Platform | Uptrace • SigNoz | The Open Source Datadog Alternative • Splunk | The Key to Enterprise Resilience • Key Vault | Microsoft Azure • File Upload - OWASP Cheat Sheet Series • SolarWinds hack explained: Everything you need to know • GitHub - tldrsec/awesome-secure-defaults: Awesome secure by default libraries to help you eliminate bug classes! • HSTS Preload List Submission • OWASP WinFIM.NET | OWASP Foundation • Microsoft Security Development Lifecycle Threat Modelling • IriusRisk Automated Threat Modeling Tool For Secure Software • Cybersecurity (one year master) Autumn 2025 MU135 • Master´s Programme in Information Security - Stockholm University • Cybersecurity, Master's Programme, 120 credits • GitHub - anchore/syft: CLI tool and library for generating a Software Bill of Materials from container images and filesystems • Analyse your HTTP response headers • Qualys SSL Labs • CIS Benchmarks™ • SEC-T • NDC Security 2025 | Security Conference for Software Developers • OWASP Stockholm | Meetup • Cybersecurity Academy • Hack The Box Meetup: Stockholm, SE | Meetup • OffSec Sec-100 OCSP • Certified in Cybersecurity Certification | ISC2 • SheHacksPurple - Tanya Janca on Youtube • Threat Modeling: Designing for Security - Adam Shostack • Alice and Bob Learn Secure Coding - Tanya Janca • Alice and Bob Learn Application Security - Tanya Janca • The Pheonix Project - Gene Kim • Security and So Many Things • Best Cyber Security Courses Online & In Person | SANS Institute • XZ Utils Backdoor — Everything You Need to Know, and What You Can Do | Akamai • Compromised npm Package: event-stream • I’m harvesting credit card numbers and passwords from your site. Here’s how. • OWASP XSS Cheat Sheet • Omgå flygplatssäkerhet via SQL-injektion 2024 • Protect against OWASP API security Top 10 Vulnerabilities • APIsec University – Become an API Security Expert • Netflix Chaos Monkey • XSS Injektion spel • SQL Injektion Övning • Cybersecurity Certificate Tier List (2023) • Server Side Request Forgery Prevention - OWASP Cheat Sheet Series • DefectDojo | CI/CD and DevSecOps Automation • GitHub - Yelp/detect-secrets: An enterprise friendly way of detecting and preventing secrets in code. • HashiCorp Vault | Identity-based secrets management • Application Insights for ASP.NET Core applications - Azure Monitor • Outshift | Top 15 software supply chain attacks: Case studies • F5 discloses major security breach linked to nation-state hackers – GeekWire