You are all aware of what are XSS vulnerabilities; do you know what's Clickjacking?
You have probably heard of Root Certificate compromission; do you know the principle of a protocol downgrade attack?

You're coming to SymfonyCon because you are HTTP application developers and I will present you awesome HTTP headers that will help you to mitigate these kind of attacks, just using W3C WebAppSec recommendations.