Roy Blit

Showing all posts by Roy Blit

Legit Security | Learn the risks of exposing secrets through leaked source code and why traditional code scanners may not be enough to fight threats.

New Techniques Attackers Are Using to Harvest Your Secrets

Learn the risks of exposing secrets through leaked source code and why traditional code scanners may not be enough to fight threats.

Legitify is an open-source GitHub and GitLab configuration scanner from Legit Security that helps manage & enforce SCM configuration best practices in a secure and scalable way

Legit SCMs

Legitify adds support for GitLab and GitHub Enterprise Server

Legitify is an open-source GitHub and GitLab configuration scanner from Legit Security that helps manage & enforce SCM configuration best practices in a secure and scalable way

OpenSSL has announced a critical fix in version 3.0.7 to be released Nov 1st. It means that on Tuesday the race will start between those who patch and those who exploit.

Threats

Critical and Time Sensitive OpenSSL Vulnerability - The Race Between Attackers and Defenders

OpenSSL has announced a critical fix in version 3.0.7 to be released Nov 1st. It means that on Tuesday the race will start between those who patch and those who exploit.

Legitify is an open-source GitHub configuration scanner from Legit Security that helps manage & enforce GitHub configurations in a secure and scalable way

Legit SCMs

Introducing Legitify: A Better Way To Secure GitHub

Legitify is an open-source GitHub configuration scanner from Legit Security that helps manage & enforce GitHub configurations in a secure and scalable way

This article will explain why security and GitHub should go hand in hand and describes a few best practices we believe any organization using GitHub should employ to reduce GitHub security risks.

Best Practices SCMs

GitHub Security Best Practices Your Team Should Be Following

This article will explain why security and GitHub should go hand in hand and describes a few best practices we believe any organization using GitHub should employ to reduce GitHub security risks.

This GitHub OAuth access token attack was announced by GitHub Security and is a compromise of OAuth access tokens issued to Heroku and Travis-CI integrations.

Explainers Threats SCMs

Latest GitHub OAuth Tokens Attack Explained and How to Protect Yourself

This GitHub OAuth access token attack was announced by GitHub Security and is a compromise of OAuth access tokens issued to Heroku and Travis-CI integrations.

Learn about SLSA (Supply-chain Levels for Software Artifacts), a security framework and a common language for improving software security and supply chain integrity.

Explainers

What Is SLSA? SLSA Explained In 5 Minutes

Learn about SLSA (Supply-chain Levels for Software Artifacts), a security framework and a common language for improving software security and supply chain integrity.