Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

git fast version control-git security-Git Best Practices

SDLC

Git Security FAQs: What Developers Should Know

July 22, 2025

Single Responsibility Principle - single principle - solid programming principles

Code Security

Why the Single Responsibility Principle Matters for Secure Code?

July 22, 2025

Sniffing Application - packet sniffer - sniffing attack

Code Security

Sniffing Application: A Hidden DevSecOps Supply Chain Risk

July 22, 2025

barracuda attack - RCE exploit - barracuda email security gateway

Code Security

Barracuda Attack: What It Means for Your CI/CD Security?

July 22, 2025

what is the advice given for applying security by obscurity - security through obscurity

Code Security

What Is the Advice Given for Applying Security by Obscurity?

July 21, 2025

Define Hacking - what is a hack - notable hacking incidents

Code Security

Define Hacking: What Dev Teams Need to Know About Real-World Attacks

July 19, 2025

bugging meaning - Wiretapping - advanced persistent attack

Code Security

Bugging Meaning in DevSecOps: From Debugging to Malicious Surveillance

July 18, 2025

Open-Source Security

7 Best Practices for Disclosing Open Source Components to Customers

July 18, 2025

how to get into cybersecurity - entry-level cybersecurity jobs - cybersecurity roadmap

Code Security

How to Get Into Cybersecurity Without Leaving Dev Behind?

July 17, 2025

remote code execution - what is remote file inclusion

Code Security

Remote File Inclusion: How It Happens and How Developers Can Prevent It?

July 16, 2025

How to Get Rid of Malware

Code Security

How to Get Rid of Malware in Your Codebase and Pipelines

July 15, 2025

GitHub Security - GitHub Advanced Security

CI CD Security

GitHub Security FAQs: What Every Developer Should Know

July 14, 2025