WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
Coffee With Developers • Mar 4, 2026

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski , Wekoslav Stefanovski

Are you blindly trusting your dependencies? Discover why shipping MVPs leaves your infrastructure vulnerable, and learn how to break your systems before attackers do.

Pause
Mute Enter Fullscreen
#1 about 3 min

Bridging the gap between developers and security tools

A security professional and a developer discuss ways to align their respective workflows for building safer products.

#2 about 3 min

Identifying common and emerging application injection attack vectors

Understanding why vulnerabilities ranging from legacy database queries to modern text prompt manipulations persistently occur.

#3 about 5 min

Exploiting cloud metadata servers and manipulating authentication tokens

How unchecked server requests can expose system metadata and overload application authentication services across cloud architectures.

#4 about 5 min

Using intentionally vulnerable applications for practical security training

An overview of how a custom sandbox environment provides safe, hands-on practice identifying logic and application flaws.

#5 about 2 min

Avoiding supply chain risks within standard software dependencies

Recognizing hidden threats located inside widely adopted package managers and binary compilation tools.

#6 about 4 min

Compromising default application security through rapid development cycles

The dangers of prioritizing immediate functionality and minimum viable products over fundamental infrastructure testing.

#7 about 3 min

Establishing safe access controls for automated intelligence agents

Why granting excessive system permissions to automated language tools introduces severe operational unpredictability.

#8 about 3 min

Integrating fundamental security evaluations into agile development sprints

How relying on temporary code segments that bypass strict testing creates profound, long-term deployment vulnerabilities.

#9 about 6 min

Overcoming magical thinking regarding third-party software library security

Improving infrastructure defenses requires fundamentally questioning the out-of-the-box safety guarantees declared by external deployment dependencies.

#10 about 7 min

Diagnosing recurring credential management failures within production environments

Auditing enterprise configurations consistently reveals mistakes involving static repository secrets and mathematically predictable rotation formulas.

#11 about 3 min

Prioritizing thoughtful software development over immediate technology adoption

A concluding reminder to evaluate long-term potential system impacts rather than blindly integrating unverified trending technologies.

Matching moments

2:40 min

Identifying command injection flaws in developer infrastructures

Vandana Verma Sehgal · LIVE

2:36 min

Addressing vulnerabilities in software supply chains

Thijs Feryn Thijs Feryn · World Congress 2026 North America

3:00 min

Top security vulnerabilities for AI applications

Deepu Deepu · World Congress 2025

2:43 min

Understanding common web application vulnerabilities and risks

Jakub Andrzejewski · World Congress 2023

2:01 min

The necessity of developer intelligence amidst automated attack generation

Julian Totzek-Hallhuber Julian Totzek-Hallhuber · World Congress 2024

4:35 min

Improving developer education with realistic security training environments

Joseph Katsioloudes Joseph Katsioloudes · World Congress 2025

More from Coffee With Developers

Using Agents to Curate the Content You See Online - Dan Gish thumbnail
12:47
about 1 month ago

Using Agents to Curate the Content You See Online - Dan Gish

Dan Gish

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka thumbnail
11:14
about 1 month ago

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka

Ewa Szyszka

What is Cross-Origin Storage - Thomas Steiner thumbnail
34:51
about 1 month ago

What is Cross-Origin Storage - Thomas Steiner

Thomas Steiner

Women in AI - Nalini Garg thumbnail
42:19
about 1 month ago

Women in AI - Nalini Garg

Nalini Garg

Agents and People Dynamics in Shared Chats - Sam Liu thumbnail
37:41
about 2 months ago

Agents and People Dynamics in Shared Chats - Sam Liu

Sam Liu

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD. thumbnail
41:09
about 2 months ago

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD.

Dave Anderson, Sarel Weinberger, Phd

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

How We Cut Our API's p99 Latency from Minutes to Under a Second

  • Deepak Agrawal

    Atlassian

    Principal Software Engineer

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Open session

What I Got Wrong Shipping an MCP Server for Live Infrastructure

  • Pritesh Kiri

    Harness

    Developer Relations Engineer

Open session

Autopsy of an Autonomous Incident: When the Agent Made It Worse

  • Navin Pai

    StackGen

    Director of Engineering

Related videos

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail
1:58:59
LIVE • over 4 years ago

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • about 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most thumbnail
24:33
World Congress 2026 Europe • 3 months ago

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most

Marcus Wermuth

Walking into the era of Supply Chain Risks thumbnail
37:36
LIVE • over 4 years ago

Walking into the era of Supply Chain Risks

Vandana Verma

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers thumbnail
30:36
World Congress 2024 • about 2 years ago

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers

Mackenzie

101 Typical Security Pitfalls thumbnail
28:41
World Congress 2022 • over 4 years ago

101 Typical Security Pitfalls

Alexander Pirker

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.