Ask HN: What a fullstack dev should know about security?

A fullstack development team using Spring and Angular needs to improve their security skills. The team is not expected to become cybersecurity experts, but rather to have a basic understanding of security principles to avoid putting their company at risk. Since they currently lack a dedicated cybersecurity expert, it is necessary for them to learn the fundamentals of security related to development. This will also enable them to effectively follow recommendations from a cybersecurity expert if one is hired in the future. The team's broad range of responsibilities, from front-end development to transaction isolation, makes it challenging for them to gain in-depth knowledge of both areas.