WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
Coffee With Developers • Mar 4, 2026

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski , Wekoslav Stefanovski

Are you blindly trusting your dependencies? Discover why shipping MVPs leaves your infrastructure vulnerable, and learn how to break your systems before attackers do.

Pause
Mute Enter Fullscreen
#1 about 3 min

Bridging the gap between developers and security tools

A security professional and a developer discuss ways to align their respective workflows for building safer products.

#2 about 3 min

Identifying common and emerging application injection attack vectors

Understanding why vulnerabilities ranging from legacy database queries to modern text prompt manipulations persistently occur.

#3 about 5 min

Exploiting cloud metadata servers and manipulating authentication tokens

How unchecked server requests can expose system metadata and overload application authentication services across cloud architectures.

#4 about 5 min

Using intentionally vulnerable applications for practical security training

An overview of how a custom sandbox environment provides safe, hands-on practice identifying logic and application flaws.

#5 about 2 min

Avoiding supply chain risks within standard software dependencies

Recognizing hidden threats located inside widely adopted package managers and binary compilation tools.

#6 about 4 min

Compromising default application security through rapid development cycles

The dangers of prioritizing immediate functionality and minimum viable products over fundamental infrastructure testing.

#7 about 3 min

Establishing safe access controls for automated intelligence agents

Why granting excessive system permissions to automated language tools introduces severe operational unpredictability.

#8 about 3 min

Integrating fundamental security evaluations into agile development sprints

How relying on temporary code segments that bypass strict testing creates profound, long-term deployment vulnerabilities.

#9 about 6 min

Overcoming magical thinking regarding third-party software library security

Improving infrastructure defenses requires fundamentally questioning the out-of-the-box safety guarantees declared by external deployment dependencies.

#10 about 7 min

Diagnosing recurring credential management failures within production environments

Auditing enterprise configurations consistently reveals mistakes involving static repository secrets and mathematically predictable rotation formulas.

#11 about 3 min

Prioritizing thoughtful software development over immediate technology adoption

A concluding reminder to evaluate long-term potential system impacts rather than blindly integrating unverified trending technologies.

Matching moments

2:40 min

Identifying command injection flaws in developer infrastructures

Vandana Verma Sehgal · LIVE

3:00 min

Top security vulnerabilities for AI applications

Deepu Deepu · WWC 2025

2:43 min

Understanding common web application vulnerabilities and risks

Jakub Andrzejewski · WWC 2023

2:01 min

The necessity of developer intelligence amidst automated attack generation

Julian Totzek-Hallhuber Julian Totzek-Hallhuber · WWC 2024

4:35 min

Improving developer education with realistic security training environments

Joseph Katsioloudes Joseph Katsioloudes · WWC 2025

5:13 min

Identifying sophisticated supply chain attacks and simulated software vulnerabilities

Mohamed Shiralizadeh · Coffee With Developers

More from Coffee With Developers

What to Do About Hackathons in the Time of Agents - Mike Swift thumbnail
46:03
9 days ago

What to Do About Hackathons in the Time of Agents - Mike Swift

Mike Swift

Moving from Playing with AI to Implementing AI - Lee Stott thumbnail
18:43
13 days ago

Moving from Playing with AI to Implementing AI - Lee Stott

Lee Stott

Evals vs. Evil - AI and Package Security - Laurie Voss thumbnail
16:57
22 days ago

Evals vs. Evil - AI and Package Security - Laurie Voss

Laurie Voss

Burning Satellites, Talking Plants and Agents Hiring Each Other - Fake or News with Matt Zeunert thumbnail
4:57
27 days ago

Burning Satellites, Talking Plants and Agents Hiring Each Other - Fake or News with Matt Zeunert

Matt Zeunert

Web Scraping, AI Agents, and the Future of Open Source - Kevin Lewis (Apify) thumbnail
40:29
about 2 months ago

Web Scraping, AI Agents, and the Future of Open Source - Kevin Lewis (Apify)

Making Teaching Code Less Academic and More Market-Ready - Peter Ruppel thumbnail
32:22
about 2 months ago

Making Teaching Code Less Academic and More Market-Ready - Peter Ruppel

Upcoming sessions on this topic

Open session

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova
Open session

World Congress 2026 North America

Know Your Enemies: Live Exploit of a PHP Engine Security Breach

Alexandre Daubois

CTO of Les-Tilleuls.coop / Symfony Core Team / PHP & FrankenPHP Core Maintainer

Alexandre Daubois
Open session

World Congress 2026 North America

Practical Threat Modeling for Software Developers

Mudassir Syed

Lead Security Software Engineer

Mudassir Syed
Open session

World Congress 2026 North America

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali

Related videos

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail
1:58:59
LIVE • over 4 years ago

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

Security Pitfalls for Software Engineers thumbnail
27:32
WWC 2023 • almost 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most thumbnail
24:33
WWC Europe 2026 • about 1 month ago

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most

Marcus Wermuth

Walking into the era of Supply Chain Risks thumbnail
37:36
LIVE • over 4 years ago

Walking into the era of Supply Chain Risks

Vandana Verma

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers thumbnail
30:36
WWC 2024 • almost 2 years ago

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers

Mackenzie

101 Typical Security Pitfalls thumbnail
28:41
WWC 2022 • about 4 years ago

101 Typical Security Pitfalls

Alexander Pirker

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.