Blog

Authors

Nadav Noy

Nadav Noy

Showing all posts by Nadav Noy

Legit Security | Uncovering 'AIJacking': How Attackers Exploit Hugging Face for AI Supply Chain Attacks - A Deep Dive into Vulnerabilities and Risks.

Legit Discovers "AI Jacking" Vulnerability in Popular Hugging Face AI Platform

Uncovering 'AIJacking': How Attackers Exploit Hugging Face for AI Supply Chain Attacks - A Deep Dive into Vulnerabilities and Risks.

Legit Security | Uncover the security concerns in the era of AI and LLMs, delving into code opacity and application embedding risks.

Threats

The Risks of Being Blind to AI in Your Own Organization

Uncover the security concerns in the era of AI and LLMs, delving into code opacity and application embedding risks.

Legit Security | Explore Legit Security's revolutionary AI application security, risks, and solutions in our blog.

Explainers Legit

Securing AI-Generated Code

Explore Legit Security's revolutionary AI application security, risks, and solutions in our blog.

Legit Security | Learn how the use of Large Language Models (LLMs) like OpenAI's GPT and Google's Bard can create security risks in your applications.

Best Practices AppSec Threats

Emerging Risks with Embedded LLM in Applications

Learn how the use of Large Language Models (LLMs) like OpenAI's GPT and Google's Bard can create security risks in your applications.

Legit Security | CI/CD automates software development, while self-hosted runners enable general customization. SaaS platforms provide limited control.

DevOps Explainers

Securing Your CI/CD Pipeline: Exploring the Dangers of Self-Hosted Runners

CI/CD automates software development, while self-hosted runners enable general customization. SaaS platforms provide limited control.

Legit Security | 3CX, an international VoIP IPBX software, experienced software supply chain attack. We detail what occurred, and how it can be prevented.

Explainers AppSec Threats

Sophisticated 3CX Software Supply Chain Attack Affects Millions of Users

3CX, an international VoIP IPBX software, experienced software supply chain attack. We detail what occurred, and how it can be prevented.

Legit Security | Our team has found a vulnerability in Azure Pipelines (CVE-2023-21553) that allows an attacker to execute malicious code in a pipeline.

Threats

Remote Code Execution Vulnerability in Azure Pipelines Can Lead To Software Supply Chain Attack

Our team has found a vulnerability in Azure Pipelines (CVE-2023-21553) that allows an attacker to execute malicious code in a pipeline.

See how attackers used compromised Jenkins plugins to attack the software supply chain and how to continuously detect vulnerable Jenkins plugins at scale.

Best Practices Legit Threats

How to Continuously Detect Vulnerable Jenkins Plugins to Avoid a Software Supply Chain Attack

See how attackers used compromised Jenkins plugins to attack the software supply chain and how to continuously detect vulnerable Jenkins plugins at scale.

On Oct 7th, Toyota announced a possible data leakage incident. The compromised data contained 296,019 customers' private information, including customers' personal email addresses.

Threats

Toyota Customer Data Leaked Due To Software Supply Chain Attack

On Oct 7th, Toyota announced a possible data leakage incident. The compromised data contained 296,019 customers' private information, including customers' personal email addresses.

On the 29th of September, it was revealed that the installer for the widely used Comm100 Live Chat application included malicious trojan malware. The installer was compromised using a supply chain attack on the Comm100 development pipeline.

Threats

Software Supply Chain Attack Leads to Trojanized Comm100 Installer

On the 29th of September, it was revealed that the installer for the widely used Comm100 Live Chat application included malicious trojan malware. The installer was compromised using a supply chain attack on the Comm100 development pipeline.

DevOps Best Practices AppSec

5 Things You Need to Know About Application Security in DevOps

AppSec isn’t always top of mind - but it should be. And here’s why. Learn about the 5 things you need to know about application security in DevOps.

Nadav Noy

Legit Discovers "AI Jacking" Vulnerability in Popular Hugging Face AI Platform

The Risks of Being Blind to AI in Your Own Organization

Securing AI-Generated Code

Emerging Risks with Embedded LLM in Applications

Securing Your CI/CD Pipeline: Exploring the Dangers of Self-Hosted Runners

Sophisticated 3CX Software Supply Chain Attack Affects Millions of Users

Remote Code Execution Vulnerability in Azure Pipelines Can Lead To Software Supply Chain Attack

How to Continuously Detect Vulnerable Jenkins Plugins to Avoid a Software Supply Chain Attack

Toyota Customer Data Leaked Due To Software Supply Chain Attack

Software Supply Chain Attack Leads to Trojanized Comm100 Installer

5 Things You Need to Know About Application Security in DevOps

Schedule a Demo