WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
Coffee With Developers • Mar 4, 2026

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski , Wekoslav Stefanovski

Are you blindly trusting your dependencies? Discover why shipping MVPs leaves your infrastructure vulnerable, and learn how to break your systems before attackers do.

Pause
Mute Enter Fullscreen
#1 about 3 min

Bridging the gap between developers and security tools

A security professional and a developer discuss ways to align their respective workflows for building safer products.

#2 about 3 min

Identifying common and emerging application injection attack vectors

Understanding why vulnerabilities ranging from legacy database queries to modern text prompt manipulations persistently occur.

#3 about 5 min

Exploiting cloud metadata servers and manipulating authentication tokens

How unchecked server requests can expose system metadata and overload application authentication services across cloud architectures.

#4 about 5 min

Using intentionally vulnerable applications for practical security training

An overview of how a custom sandbox environment provides safe, hands-on practice identifying logic and application flaws.

#5 about 2 min

Avoiding supply chain risks within standard software dependencies

Recognizing hidden threats located inside widely adopted package managers and binary compilation tools.

#6 about 4 min

Compromising default application security through rapid development cycles

The dangers of prioritizing immediate functionality and minimum viable products over fundamental infrastructure testing.

#7 about 3 min

Establishing safe access controls for automated intelligence agents

Why granting excessive system permissions to automated language tools introduces severe operational unpredictability.

#8 about 3 min

Integrating fundamental security evaluations into agile development sprints

How relying on temporary code segments that bypass strict testing creates profound, long-term deployment vulnerabilities.

#9 about 6 min

Overcoming magical thinking regarding third-party software library security

Improving infrastructure defenses requires fundamentally questioning the out-of-the-box safety guarantees declared by external deployment dependencies.

#10 about 7 min

Diagnosing recurring credential management failures within production environments

Auditing enterprise configurations consistently reveals mistakes involving static repository secrets and mathematically predictable rotation formulas.

#11 about 3 min

Prioritizing thoughtful software development over immediate technology adoption

A concluding reminder to evaluate long-term potential system impacts rather than blindly integrating unverified trending technologies.

Matching moments

2:40 min

Identifying command injection flaws in developer infrastructures

Vandana Verma Sehgal · LIVE

3:00 min

Top security vulnerabilities for AI applications

Deepu Deepu · World Congress 2025

2:43 min

Understanding common web application vulnerabilities and risks

Jakub Andrzejewski · World Congress 2023

2:01 min

The necessity of developer intelligence amidst automated attack generation

Julian Totzek-Hallhuber Julian Totzek-Hallhuber · World Congress 2024

4:35 min

Improving developer education with realistic security training environments

Joseph Katsioloudes Joseph Katsioloudes · World Congress 2025

5:13 min

Identifying sophisticated supply chain attacks and simulated software vulnerabilities

Mohamed Shiralizadeh · Coffee With Developers

More from Coffee With Developers

Using Agents to Curate the Content You See Online - Dan Gish thumbnail
12:47
21 days ago

Using Agents to Curate the Content You See Online - Dan Gish

Dan Gish

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka thumbnail
11:14
21 days ago

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka

Ewa Szyszka

What is Cross-Origin Storage - Thomas Steiner thumbnail
34:51
21 days ago

What is Cross-Origin Storage - Thomas Steiner

Thomas Steiner

Women in AI - Nalini Garg thumbnail
42:19
22 days ago

Women in AI - Nalini Garg

Nalini Garg

Agents and People Dynamics in Shared Chats - Sam Liu thumbnail
37:41
29 days ago

Agents and People Dynamics in Shared Chats - Sam Liu

Sam Liu

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD. thumbnail
41:09
about 1 month ago

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD.

Dave Anderson, Sarel Weinberger, Phd

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 24, 2026 · 14:50–15:20

Stage 1

The Era of Machine-Driven Defense is Here: Headless Security

Loris Degioanni

Founder & CTO of Sysdig

Loris Degioanni
Open session

World Congress 2026 North America

September 25, 2026 · 16:50–17:20

Stage 5

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer at Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

September 25, 2026 · 09:40–10:10

Stage 5

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova
Open session

World Congress 2026 North America

September 24, 2026 · 14:10–14:40

Stage 2

Know Your Enemies: Live Exploit of a PHP Engine Security Breach

Alexandre Daubois

CTO of Les-Tilleuls.coop / Symfony Core Team / PHP & FrankenPHP Core Maintainer

Alexandre Daubois
Open session

World Congress 2026 North America

September 24, 2026 · 12:15–12:45

Stage 6

AI vs. AI: Defending the open source supply chain with agentic workflows

Manfred Moser

Senior Principal DevRel Engineer at Chainguard

Manfred Moser
Open session

World Congress 2026 North America

September 24, 2026 · 16:00–18:00

Stage 13

Practical Threat Modeling for Software Developers

Mudassir Syed

Lead Security Software Engineer

Mudassir Syed

Related videos

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail
1:58:59
LIVE • over 4 years ago

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • almost 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most thumbnail
24:33
World Congress 2026 Europe • 2 months ago

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most

Marcus Wermuth

Walking into the era of Supply Chain Risks thumbnail
37:36
LIVE • over 4 years ago

Walking into the era of Supply Chain Risks

Vandana Verma

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers thumbnail
30:36
World Congress 2024 • about 2 years ago

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers

Mackenzie

101 Typical Security Pitfalls thumbnail
28:41
World Congress 2022 • over 4 years ago

101 Typical Security Pitfalls

Alexander Pirker

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.