Connect with us

Technology

Legit Security Releases 2025 State of Application Risk Report, Revealing 100% of Organizations Have High or Critical Risks in Their Development Environments

Published

2 years ago

on

Security leader’s new research highlights where the greatest application risks live and how organizations can prioritize their application security efforts

BOSTON, Jan. 23, 2025 /PRNewswire/ — Legit Security, the definitive application security posture management (ASPM) leader providing end-to-end visibility and protection across the entire software factory, today announced its latest research report, The 2025 State of Application Risk: An ASPM View of the Security of Software Factories. The report found significant risk in both applications and the factories that produce them, with many organizations challenged by inefficient AppSec testing, plus a lack of visibility into secrets exposure, AI risks, SDLC misconfigurations, and software supply chain security.

The 2025 State of Application Risk report, based on data from the Legit platform, reveals that, as software development has evolved, vulnerabilities in code are now only the tip of the iceberg, with risks in development pipelines, build servers, libraries, tools, and processes lurking beneath. The research also highlights that all application risk is not created equal, and with the right context, teams can better identify the highest risk areas that deserve their focus, such as toxic combinations that compound security issues.

Leveraging its powerful ASPM and visibility capabilities, Legit Security delivers data in this report that highlights the previous year’s risk findings and uncovers where application security risk lives in the modern development environment.

The report’s key findings include:

There is significant risk throughout the application development infrastructure and processes, with 100% of organizations found to have high or critical risks in their development environments.Application security scanning is inefficient, with 78% of organizations having duplicate SCA scanners and 39% with duplicate SAST scanners that can result in the same vulnerability findings and equivalent or contradictory remediation advice.Secrets exposure is pervasive, with 100% of organizations having high or critical secrets exposed in their code, and 36% of secrets found outside of source code.GenAI is an emerging threat, with 46% of organizations using AI models in source code in a risky way, such as low-reputation LLMs, which could contain malicious code or payloads or exfiltrate data sent to them.Misconfigurations are rampant, with 89% of organizations having pipeline misconfiguration issues that could lead to breaches like the one CodeCov suffered.Developer permissions sprawl is a significant issue, with 85% of organizations showing least-privilege violations that could lead to an attack like the one LastPass recently experienced.Toxic combinations of risk – such as developers using GenAI without human code review enforced through branch protection, or secrets in repositories with external collaborators – are prevalent, and highlight where security teams should focus their energy.

“Our research uncovered great risks everywhere throughout the development process,” said Liav Caspi, Legit CTO and co-founder. “These results highlight that teams are overlooking risks in their development environments and CI/CD pipelines, and are inviting the next supply chain attack by neglecting critical security hygiene. To make an analogy, it’s as if they are preparing delicious, innovative dishes, in a kitchen with rusty, dirty, malfunctioning equipment. Most security teams today don’t have the visibility or the context they need to identify risk outside of source code or to effectively triage AppSec findings.”

From GenAI code to overly permissioned developers to secrets exposed in Jira tickets, organizations must protect their development environments from end-to-end. Legit Security’s report provides organizations with the insights they need to understand the risks embedded and enmeshed across the software factory, well beyond vulnerabilities in code, and steps they can take to reduce this risk.

To download the full report, visit https://info.legitsecurity.com/state-of-application-risk.

Methodology
The Legit research team analyzed the data uncovered by the Legit Application Security Posture Management (ASPM) platform over the past 18 months. The data represents various industries and company sizes – from organizations with fewer than 100 developers to those with thousands. Enterprises had code repositories from hundreds to tens of thousands.

About Legit Security
Legit is a new way to manage your application security posture for security, product, and compliance teams. With Legit, enterprises get a cleaner, easier way to manage and scale application security and address risks from code to cloud. Built for the modern SDLC, Legit tackles the most challenging problems facing security teams, including GenAI usage, proliferation of secrets, and an uncontrolled dev environment. Fast to implement and easy to use, Legit lets security teams protect their software factory from end to end, gives developers guardrails that let them do their best work safely, and delivers metrics that prove the security program’s success. This new approach means teams can control risk across the business – and prove it.

Media Contact:
Michelle Kearney
Hi-Touch PR
443-857-9468
kearney@hi-touchpr.com

View original content to download multimedia:https://www.prnewswire.com/news-releases/legit-security-releases-2025-state-of-application-risk-report-revealing-100-of-organizations-have-high-or-critical-risks-in-their-development-environments-302354523.html

SOURCE Legit Security

Related Topics:
Continue Reading

Technology

STEPHEN A. SMITH ADDRESSES WHITE HOUSE DINNER ATTENDANCE, REAFFIRMS COMMITMENT TO HBCUs AND PROTECTING CORPORATE INVESTMENT IN BLACK EDUCATION

Published

31 minutes ago

on

October 24, 2026

By

NEW YORK, Oct. 23, 2026 /PRNewswire/ — Stephen A. Smith, media mogul, New York Times bestselling author, and proud 1991 graduate of Winston-Salem State University, is addressing the public discussion surrounding his decision to attend a White House dinner with President Donald Trump, emphasizing his commitment to the long-term financial stability of Historically Black Colleges and Universities (HBCUs).

For Smith, the decision was rooted in a commitment to institutions that have educated generations of Black leaders, professionals, entrepreneurs, and public servants.

“I will always advocate for HBCUs and the students whose futures depend on them,” Smith said. “My reason for attending the White House dinner was to discuss the challenges these institutions face in securing long-term funding and to make the case that corporate America must continue to invest in them.”

Smith acknowledged federal support through the FUTURE Act while expressing concern that political tensions surrounding diversity, equity, and inclusion (DEI) could discourage private companies from supporting HBCUs. He maintains that these institutions deserve sustained corporate partnerships, philanthropic contributions, and public investment.

“If we truly believe in free-market capitalism, businesses should be able to support educational institutions and charitable causes without fear of criticism or repercussions,” Smith said. “HBCUs have made extraordinary contributions to this country. They deserve sustained public and private investment.”

Ashley Christopher, Esq., Founder and CEO of the HBCU Week Foundation, recognized Smith’s advocacy and decision to engage with the administration.

“Stephen A. Smith has been a powerful advocate for HBCUs, using his platform and influence to shine a national spotlight on our institutions,” expressed Christopher, “His continued support of HBCU Week helps advance our mission of connecting students with life-changing educational opportunities, and we are proud to have him as our ambassador.”

Since Smith became an HBCU Week Ambassador in 2019, the initiative has facilitated more than 15,000 on-the-spot college acceptances and raised and awarded more than $150 million in scholarships, according to the HBCU Week Foundation.

As public discussion continues, Smith is emphasizing the importance of ensuring HBCUs have the resources and partnerships needed to educate future generations and expand opportunities for students.

CLICK HERE to watch Smith’s full response to his White House visit.

MEDIA CONTACT:

media@mrsasinc.com

View original content:https://www.prnewswire.com/news-releases/stephen-a-smith-addresses-white-house-dinner-attendance-reaffirms-commitment-to-hbcus-and-protecting-corporate-investment-in-black-education-302918547.html

SOURCE Straight Shooter Media

Continue Reading

Technology

Advantex Announces Completion of Financing and Extension of Maturity Date of Previously Issued Debentures

Published

31 minutes ago

on

October 24, 2026

By

TORONTO, Oct. 23, 2026 /CNW/ — Advantex Marketing International Inc. (CSE: ADX) (“Advantex”), a leader in the merchant cash advance and loyalty marketing products for merchants, today announced the completion of a $250,000 secured debt financing. Advantex issued a $250,000 non-convertible debenture which bears an interest rate at 12% per annum and matures December 15, 2027. The proceeds raised from this issuance of the Debenture will be used for working capital purposes.

Advantex has also extended the maturity of its existing $700,000 in 12% secured debentures from October 10, 2026 to December 15, 2027.

About Advantex Marketing International Inc.

Advantex provides working capital to merchants. Advantex also provides specialized marketing programs that enable members of Aeroplan to earn Aeroplan points at participating merchants.

Advantex shares trade on the Canadian Securities Exchange under the symbol ADX. For more information go to Advantex’s profile on www.sedar.com

Forward-Looking Information

This news release contains “forward-looking statements” within the meaning of applicable securities laws relating to the future business and operations of Advantex. Actual results and developments may differ materially from those contemplated by these statements. The business and operations of Advantex described herein is dependent on a number of factors and is subject to a number of risks and uncertainties. Factors that could cause actual results to differ material include, but are not limited to, changes in Advantex’s economic and competitive conditions including but not limited to the industry sectors in which Advantex operates.

The statements in this news release are made of the date of this release. Forward-looking statements are made based on management’s beliefs, estimates and opinions on the date the statements are made and Advantex undertakes no obligation to update forward-looking statements if these beliefs, estimates and opinions or other circumstances should change, except as required by applicable law.

SOURCE Advantex Marketing International Inc.

Continue Reading

Technology

Club Offers for Travel Enthusiasts in Canada

Published

2 hours ago

on

October 23, 2026

By

TORONTO, Oct 23, 2026 /PRNewswire/ — Travelzoo® (NASDAQ: TZOO), the club for travel enthusiasts, announces three of many new Club Offers for Club Members in Canada.

Rigorously vetted and negotiated for us travel enthusiasts:

$799—COSTA RICA WEEK WITH FLIGHTS & CAR
We think fall is an ideal time to visit Costa Rica; the scenery is lush and the crowds are gone. Drive between volcanic Arenal and the idyllic beaches of Tamarindo on this seven-night trip. Since it’s not as busy, we were able to negotiate a price that saves members up to $648 on departures through mid-December.

$899—BARCELONA: 5 NIGHTS WITH FLIGHTS
Explore Barcelona’s world-class museums and architectural masterpieces in the quieter winter months to pack more into your trip. You won’t waste hours in lines and can access top restaurants that are fully booked in summer. We save $300 on travel this January and February, when temperatures are still spring-like. Roundtrip flights from Toronto, hotel and daily breakfast are included.

$999—ST. KITTS GETAWAY FOR 2, REG. $2083
Most visitors to St. Kitts book months in advance, but when we pointed out that travel enthusiasts are more spontaneous, this resort gave us a terrific rate for stays this November and December. Spend four nights in Frigate Bay and get an upgraded Oceanview room, too.

Are you a travel enthusiast? Join the club today: https://travelzoo.com

Who are we?
We, Travelzoo®, are the club for travel enthusiasts. We reach 30 million travellers. Club Members receive Club Offers negotiated and rigorously vetted by our deal experts around the globe. Our relationships with thousands of top travel companies give us access to irresistible deals. Our club and its benefits are built around the lifestyle of a modern travel enthusiast.

Media Contact: 
Amanda Ieraci – Toronto
+1 437 866 8540
aieraci@travelzoo.com

View original content to download multimedia:https://www.prnewswire.com/news-releases/club-offers-for-travel-enthusiasts-in-canada-302918543.html

SOURCE Travelzoo

Continue Reading

Trending