Really excited to speak at the Bangladesh Java User Group with Bazlur and Oronno.
The best question I got after was about where to start in security, given that developers have limited time. In my opinion the best place to start is narrowing the scope ot "security" to limit it to what's relevant to your application.
Presentation#
OpenJDK 17 makes the interesting decision that deprecating a security feature (the SecurityManager) can actually improve security of the platform and running applications, setting out a path to remove a feature that hasn’t been used and hasn’t blocked many exploits.