Ask HN: Security Awareness Training for Developers

Do you know of any courses, books, or other resources that train developers on cybersecurity and instill a healthy sense of paranoia?

I'm looking for something focused on topics like handling credentials, protecting their computers, and avoiding phishing, rather than on building secure applications (like the OWASP Top 10).