Open-Source Security

03 Jul A Closer Look at Software Supply Chain Attacks 2025: PyPI & npm Campaigns Compared

Posted at 14:26h in Open-Source Security, Software Supply Chain by Luis Rodríguez 0 Comments

Learn how to stop malicious packages in 2025 software supply chain attacks with real PyPI and npm examples and Xygeni’s MEW. ...

Read More

02 Jul SCA vs SBOM: What’s the Difference and Why You Need Both

Posted at 09:51h in Open-Source Security, Software Supply Chain by Fátima Said 0 Comments

Learn the difference between SCA vs SBOM and why using both is key to secure software. Discover how Xygeni automates SBOM generation with SCA. ...

Read More

25 Jun How can a Developer Prevent Hacking – Start With SAST and SCA

Posted at 16:19h in Code Security, Open-Source Security by Fátima Said 0 Comments

Secure your SDLC with top application security tools. Discover AppSec tools that boost compliance and stop vulnerabilities early. ...

Read More

17 Jun Open Source Vulnerability Scanner: Are They Enough?

Posted at 16:42h in Code Security, Open-Source Security, SDLC, Secrets Security by Fátima Said 0 Comments

Secure your SDLC with top application security tools. Discover AppSec tools that boost compliance and stop vulnerabilities early. ...

Read More

21 May Software Security: Back to Basics

Posted at 15:40h in Code Security, IaC, Open-Source Security, SDLC, Software Supply Chain by Fátima Said 0 Comments

Discover how DevSecOps automation, principles, and platforms help teams build secure, scalable software without slowing down development ...

Read More

14 May Penetration Testing vs Vulnerability Scanning

Posted at 09:24h in Open-Source Security by Fátima Said 0 Comments

Learn how static source code analysis and source code analysis tools detect risks early and boost application security. ...

Read More

30 Apr What Is a Secure Code?

Posted at 15:00h in Code Security, Open-Source Security by Fátima Said 0 Comments

Learn what is a secure code, why secure coding matters, and how OWASP secure coding practices help protect modern software. ...

Read More

17 Apr Python Dependency Injection: How to Do It Safely

Posted at 13:13h in Code Security, Open-Source Security, SDLC by Fátima Said 0 Comments

What is dependency injection in Python? Learn how Python dependency injection improves security and how to apply it safely. ...

Read More

14 Apr AI SAST: How to Secure AI Code Before It Ships

Posted at 12:18h in Attacks Analysis, Code Security, Open-Source Security, SDLC by Fátima Said 0 Comments

Learn DevSecOps best practices and practical DevSecOps steps for secure CI/CD. Discover how to implement DevSecOps with real automation. ...

Read More

10 Apr How Can Malicious Code Do Damage?

Posted at 12:03h in Attacks Analysis, Code Security, Open-Source Security, SDLC by Fátima Said 0 Comments

Learn DevSecOps best practices and practical DevSecOps steps for secure CI/CD. Discover how to implement DevSecOps with real automation. ...

Read More

26 Mar EPSS vs CVSS: What’s the Difference?

Posted at 18:23h in Open-Source Security by Fátima Said 0 Comments

Compare CVSS vs EPSS to understand severity vs exploitability. Learn how CVSS and EPSS work together for smarter vulnerability management. ...

Read More

25 Mar EPSS Score Vulnerability v4: What’s New

Posted at 10:10h in Open-Source Security by Fátima Said 0 Comments

Explore EPSS v4 and learn how to enhance EPSS score vulnerability management by fixing the most exploitable EPSS vulnerabilities. ...

Read More