WeAreDevelopers LIVE • Oct 12, 2020

How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR

Anna Bacher

Could a simple URL tweak expose your database? IDOR vulnerabilities routinely cause massive enterprise data breaches. Learn to systematically eradicate these flaws using AI-driven secure coding.

How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

1:54 min

Uncovering access control flaws in AI-generated code

Christian Heilmann

Christian Heilmann +1 · World Congress 2026 North America

5:30 min

Identifying non-coding software vulnerabilities and organizational risks

Tino Sokic · World Congress 2023

2:55 min

Identifying common and emerging application injection attack vectors

Bozidar Spirovski

Bozidar Spirovski +1 · Coffee With Developers

1:49 min

Adapting application security for AI-generated code

Christian Heilmann

Christian Heilmann +1 · World Congress 2026 North America

2:59 min

Reporting IDE vulnerabilities and bug bounty program takeaways

Thomas Chauchefoin +1 · World Congress 2023

3:06 min

Transitioning from code risks to data-driven business threats

Jon Geater · World Congress 2023

More from WeAreDevelopers LIVE

Like Peas in a Pod - What Happens When People Clone Your App? thumbnail

Like Peas in a Pod - What Happens When People Clone Your App?

Ivan Kutskir, Christian Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail

WeAreDevelopers LIVE - Read more, Prompt Less

Christian Heilmann, Daniel Cranney, Luise Freese

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail

WeAreDevelopers LIVE - Tech Education in Two Languages

Daniel Cranney, Roxy Rodriguez-Becker

WeAreDevelopers LIVE - Playing in Production thumbnail

WeAreDevelopers LIVE - Playing in Production

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail

about 1 month ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail

about 2 months ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Upcoming sessions on this topic

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

Hadar Geva

Myop

CTO & Co-founder

Beyond File Dumps: Context Engineering for Coding Agents

Animesh Dutta

Arm

Senior Software Engineer

How We Cut Our API's p99 Latency from Minutes to Under a Second

Deepak Agrawal

Atlassian

Principal Software Engineer

Autopsy of an Autonomous Incident: When the Agent Made It Worse

Navin Pai

StackGen

Director of Engineering

Related videos

Coffee with Developers with Noris Buriac (Forward Security) thumbnail

World Congress 2026 North America • about 1 month ago

Coffee with Developers with Noris Buriac (Forward Security)

Christian Heilmann, Noris Buriac

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski thumbnail

Coffee With Developers • 8 months ago

How to Defend Against Data Manipulation Attacks - Bozidar Spirovski & Wekoslav Stefanovski

Bozidar Spirovski, Wekoslav Stefanovski

Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools thumbnail

LIVE • about 2 years ago

Can Machines Dream of Secure Code? Emerging AI Security Risks in LLM-driven Developer Tools

Liran Tal

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most thumbnail

World Congress 2026 Europe • 4 months ago

The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most

Marcus Wermuth

Vulnerable VS Code extensions are now at your front door thumbnail

JS Congress • almost 5 years ago

Vulnerable VS Code extensions are now at your front door

Raul Onitza-Klugman, Kirill Efimov

Stranger Danger: Your Java Attack Surface Just Got Bigger thumbnail

LIVE • over 4 years ago

Stranger Danger: Your Java Attack Surface Just Got Bigger

Vandana Verma Sehgal

Related articles

BB

Benedikt Bischof

Walking Into The Era of Supply Chain Risks

Welcome to this issue of the WeAreDevelopers Live Talk series. This article recaps an interesting talk by Vandana Verma who introduced the audience interesting topic of supply chain risks.About the...

over 4 years ago

Walking Into The Era of Supply Chain Risks

DC

Daniel Cranney

Understanding and Mitigating Common Web Vulnerabilities

Vulnerabilities exist in many forms on the web, and attackers continue to find creative ways to exploit them. Technological advances like the proliferation of AI are of course exciting nd filled wi...

over 1 year ago

An image with neon lighting featuring a globe and a padlock

CH

Chris Heilmann

Dev Digest 134 - Where pixels sing?

News and ArticlesWeAreDevelopers LIVE Data and Security Day is on Wednesday, 25/09/2024. Learn about OPC UA Updates, Best Practices for Using GitHub Secrets, Passwordless Web 1.5, Emerging AI Secur...

about 2 years ago

Dev Digest 134 - Where pixels sing?

DC

Daniel Cranney

Dev Digest 180: AI Code Crashes, Rooting Copilot and a 200 LOC AI agent

Inside last week’s Dev Digest 179 . 😬 ChatGPT queries leaked and indexed by search engines 👎 The first outage from LLM written code analysed 💻 The hidden productivity tax of ‘almost right’ AI code...

about 1 year ago

Offline Sign

From learning to earning

Jobs that call for the skills explored in this talk.

Staff Developer Advocate, GitHub Security Lab

Experienced $121k–323k Remote Git Github Databases

Senior Software Engineer, Vulnerability Management

Expert $329k Remote Ruby Golang Docker

Cyber Defense & Incident Response

Delivery Hero SE

Remote Golang Cybercrime Security Log

Cyber Defense & Incident Response

Delivery Hero SE

Zaragoza, Spain

Remote Golang Cybercrime Security Log

Cyber Defense & Incident Response

Delivery Hero SE

Remote Golang Cybercrime Security Log

Cyber Defense & Incident Response

Delivery Hero SE

Valencia, Spain

Remote Golang Cybercrime Security Log