blog/
87 pages · Updated 2026-10-15
Pages
- 8 Best Practices in Cyber Supply Chain Risk Management to Stay Safe
- What is Secure SDLC and Why It Matters?
- How to Secure Your Software Supply Chain in 10 Steps
- The Risks Lurking in Publicly Exposed GenAI Development Services
- Exposing Secrets Via SDLC Tools: The Artifactory Case
- SCA vs SAST: What's the Difference & When to Use Them
- NIST SSDF: Tips to Stay Ahead of Potential Updates
- Top 6 Cloud Application Security Best Practices to Follow
- Defend the Entire Software Factory | Legit Security
- Navigating the Shift: Unveiling the changes in PCI DSS version 4
- Google & Apache Found Vulnerable to GitHub Environment Injection
- Announcing Legit Secrets Detection & Prevention 2.0
- The Power of Identifying Continuously Vulnerable Repositories (CVRs)
- Magento Supply Chain Attack Installs Rekoobe Trojan | Legit
- The AI Security Maturity Model for AI-First Development Teams
- Reduce AppSec Friction: Shift Security Left With Context With ASPM
- 4 Software Supply Chain Risks Every CISO Should Know
- LastPass Data Breach: How to Protect Against Supply Chain Attacks
- ASPM vs. ASOC: The Evolution of Application Security
- The Trivy Supply Chain Compromise: What Happened and Playbooks to Respond
- Sophisticated 3CX Software Supply Chain Attack Affects Millions of Users
- What Is Cloud Security Posture Management? CSPM Explained
- GitHub, PyTorch: Self-Hosted Runner Attacks | Legit Security
- Top 5 Vulnerability Management Best Practices
- Legit Scans for Secrets in SharePoint
- How to Reduce Risk From Misconfigured Build Assets
- When Your Scanner Becomes the Weapon: From Trivy to LiteLLM
- What Are Software Artifacts and How to Prevent Poisoning?
- What are the Five Elements of the NIST Cybersecurity Framework?
- Re-thinking Application Security for DevSecOps and Scale
- A Guide to Securing Secrets in CI/CD Pipelines
- The MarkdownTime Vulnerability Explained & How to Prevent It
- Legit Announces New Vulnerability Prevention Capabilities
- Software Security Best Practices: Where to Focus First
- Supply Chain Attacks Overflow: PyPI Suspended New Registrations
- Securing AI-Generated Code: What Does It Look Like in Practice?
- Scaling Our Vision: Welcoming Tamar Nulman and Omri Arnon to the Legit Team
- Why Legit Joined the Coalition for Secure AI (CoSAI)
- Latest GitHub OAuth Tokens Attack Explained and How to Protect Yourself
- Legit and Traceable: Better Together
- 2023 Predictions for Modern Application Security
- EU CRA Compliance: Software Security Guide | Legit Security
- GitHub Codespaces Security Best Practices
- What Is SLSA? SLSA Explained In 5 Minutes
- Azure Devops Zero-Click CI/CD Vulnerability
- Securing Your CI/CD Pipeline: Exploring the Dangers of Self-Hosted Runners
- Legit Security Blog
- GitHub Locks Down npm: What the New Install Defaults Mean for Your Supply Chain
- GitHub Actions Injection in Google Project | Legit Security
- 4 New AppSec Requirements in the Age of AI
- Secure Fast, Not Slow: What We Learned Building VibeGuard 2.0
- How to Address CISA Attestation
- Legit License Scanning and Policy Enforcement
- 2025 Report: Toxic Combinations in AppSec | Legit Security
- Dependency Confusion Vulnerability Found in an Archived Apache Project
- ASPM Update: Accelerate AppSec Efficiency | Legit Security
- Agentic AppSec: closing the remediation gap and automating application security
- Software Supply Chain Attack Leads to Trojanized Comm100 Installer
- CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
- 10 Agile Software Development Security Concerns You Need to Know
- Why Legit Security is a Cybersecurity Game Changer | Legit
- Key Strategies from NIST to Secure CI/CD Pipelines
- GenAI-Based Application Security 101
- Introducing Legitify: A Better Way To Secure GitHub
- Legit Security Named in 2024 Gartner® Emerging Tech Radar
- Fable 5 Is Here. The AppSec Problem Hasn’t Changed.
- Securing the Software Supply Chain: Risk Management Tips
- Modern AppSec Needs Code to Cloud Traceability
- Defend the Software Factory, Not Just the Supply Chain
- Announcing The State of GitHub Actions Security Report
- Vulnerable GitHub Actions Workflows: Privilege Escalation
- Is GitHub Safe? How to Secure & Keep Your Code Protected
- Agentic Remediation Just Got Bigger: Now Fixing Vulnerabilities in Your Dependencies, Not Just Your Code
- OpenSSF SCM Best Practices Guide Released With Contributions From Legitify
- What is ASPM? Application Security Posture Management 101
- Remote Prompt Injection in GitLab Duo Leads to Source Code Theft
- OWASP Agentic AI Top 10 Coding Agent Risks | Legit Security
- 5 Best Practices for Successful Application Risk Assessments
- What to Look for in a Secrets Scanner
- What Are Immutable Tags And Can They Protect You From Supply Chain Attacks?
- Why Protecting Build Systems is Crucial | Legit Security
- Stop Drowning in the 30%
- Exposing Secrets Via SDLC Tools: The SonarQube Case
- Looking back on a Legit 2023
- How to Reduce Risk From Exposed Secrets
- Announcing Legit Context: The Missing Link to True Business-Driven ASPM
- Legitify adds support for GitLab and GitHub Enterprise Server