Completely free and utterly comprehensive security training.
Covers every major security vulnerability you are likely to face.
Concrete, no-nonsense advice for the developer in a hurry.