Be Agile with Security
summary
Examples cite a stolen user access token at Facebook, a misconfigured AWS server at Capital One, malware via phishing at the European Central Bank, parameter tampering at First American, and credential stuffing at Disney Plus; breaches rise 52% by mid‑2019 versus 2018 and there are 57 open-source tools plus certifications like CSI IP CSC is SP Harry CES. Recommendation: treat security as an epic with security stories, run code reviews, SAST then DAST then final pen testing, and fix vulnerabilities per story to cut cost and downtime.
AI-written summary · about
chapters (4)
related talks
46mApplication security from start to finish
22mSecurity and Risks
33mLearning from Past Security Breaches: Strengthening AppSec Efforts and Focus
16mSecurity, Fraud, and Compliance
52mContinuous Security
01h 03mBe your own Threatbuster!- 22mSecurity and Risks
46mStories from the cutting edge: Cloud security in 2023