Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

CVE-2025-30065 - Apache Parquet - Parquet Avro

Attacks Analysis

CVE-2025-30065: Apache Parquet Avro Exploit

October 2, 2025

error: gpg check failed - error: gpg failed to sign the data - gpg error

CI CD Security

Why Error: GPG Check FAILED in Your Build (and How to Fix It Securely)

October 2, 2025

azure security - microsoft azure security - azure security best practices

IaC

Microsoft Azure Security FAQ

October 1, 2025

ldap port - ldap group - ldap bind operation

Secrets Security

LDAP Port Misconfigs: How Groups and Bind Operations Break App Security

October 1, 2025

cyber threat hunting - threat hunter

CI CD Security

Threat Hunting with Code: How to Track Malicious Patterns in Repos

October 1, 2025

SQL vulnerability - SQL injection vulnerability - SQL injection vulnerability scanner

Code Security

SQL Vulnerability: Detect and Prevent Attacks

September 30, 2025

cybersecurity as a service - cybersecurity as a service caas -cybersecurity as a service companies

SDLC

Cybersecurity as a Service in DevSecOps

September 30, 2025

has been pwned - pwned checker - secrets detection

Secrets Security

What “Has Been Pwned” Really Means for Developers

September 30, 2025

CI CD Security

Different Types of Security Tags and How to Remove Them Safely

September 30, 2025

laravel 11.30.0 exploit - laravel exploit - laravel 11.30.0 vulnerabilities

CI CD Security

Laravel 11.30.0 Exploit: What Devs Must Patch Now

September 29, 2025

session hijacking prevention - session hijack

CI CD Security

Session Hijacking: The Code and Config Mistakes That Open the Door

September 29, 2025

bash set -e - set -e bash

Anomaly Detection

set -e in Bash: Why Your Script Fails Without Warning

September 26, 2025