How to win friends and influence your security team
summary
Security vs devs becomes cooperation when incentives and language align, not slogans. Attack services are cheap: ransomware kit $66, spearphishing $100–$1,000 and compromised account dumps sold for pennies, while zero‑day development runs $5k–$350k. Practical wins: enable MFA, least privilege and timely patching (research says 95–98% breaches prevented), design security up front, use defense‑in‑depth, train security champions, and mitigate AI risks like MCP tool poisoning by integrating identity and vetting tools before deployment.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:51Security vs developers divide
- 4:58Breaches shift security focus
- 9:15Shadow IT and cloud security
- 13:07Threat landscape costs
- 21:17Identity and security boundaries
- 26:55Collaboration beyond tech
- 32:58Defense in depth model
- 37:30AI security risks
- 42:04Call to action
related talks
34mSecDevSecOpsSec
46mBreaches Are Everywhere. What’s A Good Security Leader To Do?!
30mEffective security on a tight budget
48mSecurity from zero
35mDevSecOps in practice. Tools vs People!
48mSecuring Buy-In for Security Budgets
33mSecurity on a Shoestring: A Low-Budget Security Revival Tour (Jared Casner)
57mMaking Security Priority Zero