Category: ASPM

Must-Read Posts

Risky Business: Self-Deleting npm Packages Explained

Risky Business: The Anti-Proctoring Packages That Delete Themselves

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

ASPM, SDLC, Software Supply Chain

What Are the Challenges of Implementing ASPM in Your Organization?

Find out more about the real challenges of Implementing ASPM in Your Organization but also about the solutions to overcome them!

October 31, 2023

Fátima Said

4 min read

ASPM, SDLC, Software Supply Chain

Beyond Vulnerability Management: The Expanding Horizons of ASPM

Vulnerability management has long been the cornerstone of ensuring application security. Discover why in this post!

September 19, 2023

Jesús Cuadrado

13 min read