WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
Coffee With Developers • Mar 4, 2026

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski , Wekoslav Stefanovski

Are you blindly trusting your dependencies? Discover why shipping MVPs leaves your infrastructure vulnerable, and learn how to break your systems before attackers do.

Pause
Mute Enter Fullscreen
#1 about 3 min

Bridging the gap between developers and security tools

A security professional and a developer discuss ways to align their respective workflows for building safer products.

#2 about 3 min

Identifying common and emerging application injection attack vectors

Understanding why vulnerabilities ranging from legacy database queries to modern text prompt manipulations persistently occur.

#3 about 5 min

Exploiting cloud metadata servers and manipulating authentication tokens

How unchecked server requests can expose system metadata and overload application authentication services across cloud architectures.

#4 about 5 min

Using intentionally vulnerable applications for practical security training

An overview of how a custom sandbox environment provides safe, hands-on practice identifying logic and application flaws.

#5 about 2 min

Avoiding supply chain risks within standard software dependencies

Recognizing hidden threats located inside widely adopted package managers and binary compilation tools.

#6 about 4 min

Compromising default application security through rapid development cycles

The dangers of prioritizing immediate functionality and minimum viable products over fundamental infrastructure testing.

#7 about 3 min

Establishing safe access controls for automated intelligence agents

Why granting excessive system permissions to automated language tools introduces severe operational unpredictability.

#8 about 3 min

Integrating fundamental security evaluations into agile development sprints

How relying on temporary code segments that bypass strict testing creates profound, long-term deployment vulnerabilities.

#9 about 6 min

Overcoming magical thinking regarding third-party software library security

Improving infrastructure defenses requires fundamentally questioning the out-of-the-box safety guarantees declared by external deployment dependencies.

#10 about 7 min

Diagnosing recurring credential management failures within production environments

Auditing enterprise configurations consistently reveals mistakes involving static repository secrets and mathematically predictable rotation formulas.

#11 about 3 min

Prioritizing thoughtful software development over immediate technology adoption

A concluding reminder to evaluate long-term potential system impacts rather than blindly integrating unverified trending technologies.

Matching moments

2:40 min

Identifying command injection flaws in developer infrastructures

Vandana Verma Sehgal · LIVE

3:00 min

Top security vulnerabilities for AI applications

Deepu Deepu · World Congress 2025

2:43 min

Understanding common web application vulnerabilities and risks

Jakub Andrzejewski · World Congress 2023

2:01 min

The necessity of developer intelligence amidst automated attack generation

Julian Totzek-Hallhuber Julian Totzek-Hallhuber · World Congress 2024

4:35 min

Improving developer education with realistic security training environments

Joseph Katsioloudes Joseph Katsioloudes · World Congress 2025

5:13 min

Identifying sophisticated supply chain attacks and simulated software vulnerabilities

Mohamed Shiralizadeh · Coffee With Developers

More from Coffee With Developers

Using Agents to Curate the Content You See Online - Dan Gish thumbnail
12:47
27 days ago

Using Agents to Curate the Content You See Online - Dan Gish

Dan Gish

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka thumbnail
11:14
27 days ago

AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka

Ewa Szyszka

What is Cross-Origin Storage - Thomas Steiner thumbnail
34:51
27 days ago

What is Cross-Origin Storage - Thomas Steiner

Thomas Steiner

Women in AI - Nalini Garg thumbnail
42:19
28 days ago

Women in AI - Nalini Garg

Nalini Garg

Agents and People Dynamics in Shared Chats - Sam Liu thumbnail
37:41
about 1 month ago

Agents and People Dynamics in Shared Chats - Sam Liu

Sam Liu

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD. thumbnail
41:09
about 1 month ago

Why Token Reduction Isn’t Cost Reduction - Dave Anderson & Sarel Weinberger, PhD.

Dave Anderson, Sarel Weinberger, Phd

Related videos

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail
1:58:59
LIVE • over 4 years ago

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • almost 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most thumbnail
24:33
World Congress 2026 Europe • 3 months ago

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most

Marcus Wermuth

Walking into the era of Supply Chain Risks thumbnail
37:36
LIVE • over 4 years ago

Walking into the era of Supply Chain Risks

Vandana Verma

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers thumbnail
30:36
World Congress 2024 • about 2 years ago

The AI Security Survival Guide: Practical Advice for Stressed-Out Developers

Mackenzie

101 Typical Security Pitfalls thumbnail
28:41
World Congress 2022 • over 4 years ago

101 Typical Security Pitfalls

Alexander Pirker

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.