Säker utveckling

LLM_Guardrails.zip

OVB — OpenVault Bank

picoCTF - CMU Cybersecurity Competition

SQLite: System Tables

picoCTF More SQLi

picoCTF File Uploads

SQL Injektion Övning

XSS Injektion spel

CIS Benchmarks™

SEC-T

NDC Security 2025 | Security Conference for Software Developers

OWASP Stockholm | Meetup

Cybersecurity Academy

Hack The Box Meetup: Stockholm, SE | Meetup

Threat Modeling: Designing for Security - Adam Shostack

Alice and Bob Learn Secure Coding - Tanya Janca

Alice and Bob Learn Application Security - Tanya Janca

The Pheonix Project - Gene Kim

Transparency Exchange API Specification

www.cyberresilienceact.eu

Web Security Academy: Free Online Training from PortSwigger

tl;dr sec

Cybersecurity (one year master) Autumn 2025 MU135

Master´s Programme in Information Security - Stockholm University

Cybersecurity, Master's Programme, 120 credits

Certified in Cybersecurity Certification | ISC2

SheHacksPurple - Tanya Janca on Youtube

APIsec University – Become an API Security Expert

Security and So Many Things

Cybersecurity Certificate Tier List (2023)

OffSec Sec-100 OCSP

Best Cyber Security Courses Online & In Person | SANS Institute

GitHub - rennf93/fastapi-guard: A security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. It integrates seamlessly with FastAPI to offer robust protection against various security threats. · Git

Known Exploited Vulnerabilities Catalog | CISA

Skills | Awesome GitHub Copilot

Bolt

GitHub - anchore/syft: CLI tool and library for generating a Software Bill of Materials from container images and filesystems · GitHub

GitHub - rfc-st/humble: A humble, and 𝗳𝗮𝘀𝘁, security-oriented HTTP headers analyzer. · GitHub

OWASP SAMM | OWASP Foundation

SAMMY - Your Secure SDLC Management Tool

Shodan Search Engine

Puma Scan | Installation Instructions

URL Fuzzer - online hidden file & directory finder

IDE integrated API Scanner

Logstash: Collect, Parse, Transform Logs | Elastic

Open Source Observability Platform | Uptrace

SigNoz | The Open Source Datadog Alternative

Splunk | The Key to Enterprise Resilience

Key Vault | Microsoft Azure

HashiCorp Vault | Identity-based secrets management

Application Insights for ASP.NET Core applications - Azure Monitor

Protect against OWASP API security Top 10 Vulnerabilities

GitHub - tldrsec/awesome-secure-defaults: Awesome secure by default libraries to help you eliminate bug classes!

HSTS Preload List Submission

DefectDojo | CI/CD and DevSecOps Automation

GitHub - Yelp/detect-secrets: An enterprise friendly way of detecting and preventing secrets in code.

OWASP WinFIM.NET | OWASP Foundation

Microsoft Security Development Lifecycle Threat Modelling

IriusRisk Automated Threat Modeling Tool For Secure Software

GitHub - anchore/syft: CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Analyse your HTTP response headers

Qualys SSL Labs

Netflix Chaos Monkey

File Upload - OWASP Cheat Sheet Series

Server Side Request Forgery Prevention - OWASP Cheat Sheet Series

OWASP XSS Cheat Sheet

www.troyhunt.com

MCP Servers: The New Security Nightmare | Equixly

Reprompt: The Single-Click Microsoft Copilot Attack that Silently Steals Your Personal Data

AI Bug Hunter Sets Milestone By Claiming Top Spot on HackerOne's Leaderboard

Header-Based IDOR: Financial Data Leak | Herish Blog

A fresh look at user enumeration in Microsoft Teams | by Bastian Kanbach | SSE Blog

3,000 Google Cloud API Keys Exposed: Security Lessons - Application Security Standards

Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies | by Alex Birsan | Medium

Security Flaw in 'Swish' Reveals Transaction History of Users

How one programmer broke the internet by deleting a tiny piece of code

Plug, Play, and Prey: The security risks of the Model Context Protocol | Microsoft Community Hub

Malicious helpers: VS Code Extensions observed stealing sensitive information - Security Boulevard

Hacking Formula 1: Accessing Max Verstappen's passport and PII through FIA bugs

Return of the Shai-Hulud worm affects over 25,000 GitHub repositories | Sysdig

You're a govt official. You accidentally slap personal info on the web. Quick, blame a kid! • The Register

Fresh survey reveal diverging fraud trends in the Nordics

F5 discloses major security breach linked to nation-state hackers – GeekWire

WA man set up fake free wifi at Australian airports and on flights to steal people’s data, police allege

SolarWinds hack explained: Everything you need to know

Outshift | Top 15 software supply chain attacks: Case studies

www.troyhunt.com

XZ Utils Backdoor — Everything You Need to Know, and What You Can Do | Akamai

Compromised npm Package: event-stream

I’m harvesting credit card numbers and passwords from your site. Here’s how.

Omgå flygplatssäkerhet via SQL-injektion 2024