Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

cyber-security-assessment-Information-technology-security-assessment

Open-Source Security

Security Assessment Software: Cut Risk & Stay Compliant

March 17, 2025

open-source-software-vulnerability-scanner-open-source-vulnerablity-scanner

Open-Source Security

Open Source Software Vulnerability Scanner Guide

March 10, 2025

exploitability-what-is-exploit-in-security-zero day-security-exploits

Open-Source Security

Exploitability & Zero-Day Threats: Stay Secure

March 5, 2025

Infrastructure as Code Security - iac tools - iac security scanning

IaC

Infrastructure as Code Security – Introduction

March 3, 2025

Application-Security-Testing-Types-of-Application-Security-Testing-best-practices-in-security-testing-for-software-development

ASPM

Application Security Testing: Best Practices and Types

February 28, 2025

how-to-prioritize-vulnerability-remediation-vulnerability-prioritization

Code Security

How to Prioritize Vulnerability Remediation

February 25, 2025

Code-Scanning-code-checker-code-security

Code Security

Code Scanning for Modern AI-Driven SDLCs

February 24, 2025

application-security-manager-application-security-management-Application-Security-Posture-Management

ASPM

Application Security Manager Guide to ASPM

February 21, 2025

reachability analysis - Vulnerability Prioritization - reachability analyzer

Open-Source Security

Reachability Analysis: Smarter Vulnerability Prioritization

February 14, 2025

cve-2023-50164-exploit

Open-Source Security

Understanding CVE-2023-50164: A Critical Apache Struts Vulnerability

February 13, 2025

indicators of a malicious code attack

Anomaly Detection

Indicators of a Malicious Code Attack

February 13, 2025

security-and-privacy-workflows-security-workflow-automation-secure-workflow-application-security-workflow

ASPM

Security and Privacy Workflows That Work

February 12, 2025