Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

insecure direct object reference - what is IDOR vulnerability

CI CD Security

What Happens When You Don’t Lock Object Access? Hello, IDOR Vulnerability

July 30, 2025

stride threat modeling framework

Code Security

STRIDE Threat Model: The “What Can Go Wrong?” Framework

July 30, 2025

what is arp spoofing attack

Software Supply Chain

What Is ARP Spoofing? A No-Nonsense Explainer for Developers

July 30, 2025

GitOps vs DevOps - GitOps tools

Code Security

GitOps vs DevOps: What Developers See in Projects

July 30, 2025

which of the following may indicate a malicious code attack - how can malicious code spread

Code Security

Which of the Following May Indicate a Malicious Code Attack?

July 30, 2025

How Can Generative AI Be Used in Cybersecurity, will cybersecurity be replaced by AI, cybersecurity remediation

AI

How Can Generative AI Be Used in Cybersecurity?

July 29, 2025

cybersecurity checklist- software security checklist - application security best practices checklist- cybersecurity audit checklist

ASPM

Cybersecurity Checklist for DevOps Teams

July 29, 2025

Bitbucket Security-bitbucket- bitbucket security best practices

CI CD Security

Bitbucket Security FAQs: What Every Developer Should Know

July 28, 2025

What Are the 5 Key Stages of the Resilience Lifecycle Framework (2)

SDLC

What Are the 5 Key Stages of the Resilience Lifecycle Framework

July 24, 2025

how can i prevent the use of my source code - source code security - code integrity- source code security scanning tools

Code Security

Source Code Security: Best Practices to Protect Your Code Integrity

July 24, 2025

Code Security

Critical System Protection Starts in Dev, Not in Prod

July 24, 2025

Dependency Inversion Principle - principles of object-oriented programming

Software Supply Chain

Dependency Inversion Principle: Your First Line of Defense Against Supply Chain Attacks

July 23, 2025