Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

What-is-Cross-Site-Scripting-Attack

Code Security

Cross-Site Scripting : What It Is and How to Stay Secure

December 27, 2024

most-commonly-used-sdlc-tools-sdlc-methodologies

SDLC

Most Commonly Used SDLC Tools & How to Secure Them

December 24, 2024

software-supply-chain-management-software-supply-chain-risk-management-software-supply-chain-attacks-software-supply-chain-security-tools

Software Supply Chain

Tips for Secure Software Supply Chain Management

December 23, 2024

securing-the-software-supply-chain-breach-software-supply-chain-security-report

CI CD Security

Secure Software Supply Chain: Lessons and Predictions for 2025

December 20, 2024

NIST-SSDF-meaning-ssdf-attestation

CI CD Security

NIST SSDF: Secure Development and Attestations

December 18, 2024

cve-2024-38526-polyfill.io-vulnerability

Attacks Analysis

CVE-2024-38526: everything about Polyfill.io Vulnerability

December 18, 2024

Infrastructure as Code best practices - iac security best practices - iac security & iac cyber security

IaC

Infrastructure as Code Security Best Practices

December 17, 2024

list of OWASP Top 10 Vulnerabilities OWASP Top 10 security vulnerabilities

CI CD Security

OWASP Top 10 Vulnerabilities Explained (2026 Guide)

December 13, 2024

design a vulnerability management program - what is a vulnerability management program

Open-Source Security

How to Design a Vulnerability Management Program?

December 13, 2024

software-complexity-lead-to-vulnerability-software-security-vulnerabilities-statistics

Open-Source Security

How Software Complexity Lead to Vulnerability

December 11, 2024

sca scans - what is sca scanning

Open-Source Security

SCA Scanning Explained: Protect Your Software from Vulnerabilities

December 10, 2024

cve-vs-cwe-Common-Weakness-Enumeration

CI CD Security

CWE vs CVE: Key Differences Explained

December 9, 2024