What security teams need to understand about developers

What security teams need to understand about developers

NightVision offers web and API security testing tools built to integrate with developers’ established workflows. NightVision identifies issues by precise area(s) of code, so devs don’t have to chase down and validate vulnerability reports, a process that eats up precious engineering resources. Get started with their docs.

Connect with Kinnaird on LinkedIn.

Stack Overflow user Cecil Curry earned a Populist badge with their exceptionally thoughtful answer to In Python how can one tell if a module comes from a C extension?.

Some great excerpts from this episode:

“From the program side, I would say if you're running a security program or you're starting from day one, there's a danger with security people and being the security person who's out of touch or doesn't know what the life of a developer is like. And you don't want to be that person. And that's not how you have actual business impact, right? So you got to embed with teams, threat model, and then do some preventative security testing, right? Testing things before it gets into production, not just relying on having a bug bounty program.”

“With code scanning, you're looking for potentially insecure patterns in the code, but with dynamic testing, you're actually testing the live application. So we're sending HTTP traffic to the application, sending malicious payloads in forms or in query parameters, et cetera, to try to elicit a response or to send something to an attacker controlled server. And so using this, we're able to. Not just have theoretical vulnerabilities, but exploitable vulnerabilities. I mean, how many times have you looked at something in GitHub security alerts and thought, yeah, that's not real. That's not exploitable. Right. So we're trying to avoid that and have higher quality touch points with developers. So when they look at something, they say, okay, that's exploitable. You showed me how. And you traced it back to code.”

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Avsnitt(860)

Banking on a serverless world

Banking on a serverless world

Explore how Capital One is using tech to innovate the banking experience here.Connect with Kathleen on LinkedIn and visit her blog. Shoutout to user Theraot for answering the questions How to connect a signal with extra arguments in Godot 4, which won them a Lifeboat badge.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

6 Juni 23min

If an attacker can edit your mobile code, how do you defend your app?

If an attacker can edit your mobile code, how do you defend your app?

SPONSORED BY GUARDSQUARELearn more about mobile application security and how to protect your app.Congrats to Lifeboat badge winner Chitrakshi for rescuing TypeScript Error: No overload matches this call in Express route handler.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

4 Juni 28min

In a deterministic simulation, you can debug with time travel

In a deterministic simulation, you can debug with time travel

Antithesis is an autonomous testing platform that finds bugs in your software with perfect reproducibility.Connect with Will Wilson on Linkedin.Congrats to user hannes neukermans whose question How can I do tag wrapping in Visual Studio Code? won them a Stellar Question badge.Our 2025 Developer Survey is live! We want to know what your developer life is like!See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

3 Juni 28min

Getting rid of the pain for developers on Shopify

Getting rid of the pain for developers on Shopify

Check out Shopify’s newest updates on their editions page, including Horizons and their new AI capabilities with Sidekick.Connect with Glen Coates on LinkedIn and X.Shoutout to Stellar Question badge winner nouptime for asking Converting string to byte array in C#.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

30 Maj 30min

Understanding the limitations of AI is crucial for enterprise success

Understanding the limitations of AI is crucial for enterprise success

The discussion also: Touches on the role, evolution, and adoption of AI agents, emphasizing their growing integration into systems, while addressing key safeguarding measures to ensure AI agents can accurately use data to reason effectively. Explores how Abnormal Security utilizes AI to detect and protect against cybersecurity threats, and how Dan and his team are leveraging AI to drive compounding productivity within their organization. Connect with Dan Shiebler on LinkedIn and learn more about Abnormal Security.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

29 Maj 32min

“The future is agents”: Building a platform for RAG agents

“The future is agents”: Building a platform for RAG agents

Contextual AI offers a platform for building RAG agents. Get started with their docs here.Connect with Douwe on LinkedIn. Congrats to Stack Overflow user Smrutiranjan Sahu, who earned a Stellar Question badge by asking How to define type for a function callback (as any function type, not universal any) used in a method parameter.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

27 Maj 32min

WBIT #8: Typescript for gut biomes

WBIT #8: Typescript for gut biomes

Jona provides an AI-powered gut biome test for clinicians and patients alike. Connect with Tyler on Twitter. See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

26 Maj 44min

Can a dev environment spark joy? The Android team thinks so.

Can a dev environment spark joy? The Android team thinks so.

Get the whole rundown of what’s new in this version of Android Developer’s Studio. Google I/O just happened, and the Android team announced a bunch of things. Connect with Matthew on LinkedIn.Congrats to Populist badge winner chudo xl for their answer to Android app stuck at "Launching on Devices" or 'device 'DEVICEID' not found' error.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

23 Maj 37min

Populärt inom Business & ekonomi

framgangspodden
varvet
badfluence
rss-borsens-finest
uppgang-och-fall
svd-ledarredaktionen
avanzapodden
lastbilspodden
rikatillsammans-om-privatekonomi-rikedom-i-livet
fill-or-kill
rss-kort-lang-analyspodden-fran-di
rss-dagen-med-di
affarsvarlden
borsmorgon
dynastin
tabberaset
kapitalet-en-podd-om-ekonomi
montrosepodden
rss-inga-dumma-fragor-om-pengar
market-makers