React Summit

React Summit 2022

React has a great security standard as default, but if you don’t pay close attention to the details you could get burned by some of the escape hatches APIs, or even by just passing props insecurely to components. I’ll teach you how to avoid these pitfalls.

How React Applications Get Hacked in the Real-World

JS Nation

JSNation 2022

The omnipresence of open-source software and low-barrier of entry on npmjs are serving as a catalyst for supply chain security incidents that are continuously impacting JavaScript developers. What can we do to protect ourselves?

Security Controls in the JavaScript Supply Chain

TestJS Summit

TestJS Summit 2021

The adoption of open-source software continues to grow and creates significant security concerns for everything from software supply chain attacks in language ecosystem registries to cloud-native application security concerns. In this session, we will explore how developers are targeted as a vehicle for malware distribution, how immensely we depend on open-source maintainers to release timely security fixes, and how the race to the cloud creates new security concerns for developers to cope with, as computing resources turn into infrastructure as code. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Are we Forever Doomed to Software Supply Chain Security?

React Advanced

React Advanced Conference 2021

Modern frontend frameworks like React are well thought-of in their application security design and that’s great. However, there is still plenty of room for developers to make mistakes and use insecure APIs, vulnerable components, or generally do the wrong thing that turns user input into a Cross-site Scripting vulnerability (XSS). Let me show you how React applications get hacked in the real-world. <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Let Me Show You How React Applications Get Hacked in the Real-World

React Finland

React Finland 2021

You thought your React application is secure? Think again

Node Congress

Node Congress 2021

We’ve all heard the buzz around pushing application security into the hands of developers, but if you’re like most companies, it has been hard to actually make this a reality. You aren’t alone - putting the culture, processes, and tooling in place to make this happen is tough - especially for sophisticated applications. Join Scott Gerlach (CSO, StackHawk) and Liran Tal (Developer Advocate, Snyk) as they dive into how you can add AppSec testing to your CI/CD pipeline to ship secure code faster. Prerequisites:Docker is a nice to have <a href="https://www.froala.com/wysiwyg-editor?pb=1"> </a>

Securing Node Applications with Automated Security Testing in CI/CD

TestJS Summit - January, 2021

Panel Discussion: Application Security Testing

Liran Tal