Explore the security risks and best practices for developing hybrid mobile apps in this 37-minute conference talk from AppSec EU 2017. Delve into the architecture of Apache Cordova and learn about specific attacks targeting hybrid apps. Discover how Android developers are utilizing Apache Cordova in real-world scenarios. Gain hands-on guidelines for defensive programming and recommendations for hybrid app-specific security testing strategies. Examine weak spots in the JavaScript to Java bridge and understand the importance of using SSL. Learn about considerations for static and dynamic analysis, and receive practical recommendations for securing hybrid apps. Equip yourself with the knowledge to combine native and web development securely in the evolving landscape of cross-platform mobile app development.