A lot of the stories @Scott_Helme shares are
caused by terrible web application security.

It's never a wrong time to revisit the @owasp top
10: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project
/status/1110220835640524800