Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

Cybersecurity-Frameworks-common-cybersecurity-framework-and-standards-Cybersecurity-Regulations

ASPM

Cybersecurity Frameworks: Simplifying Standards

December 4, 2024

sast-vs-dast-what-is-sast-and-dast-dast-vs-sast

Code Security

SAST vs DAST Explained: Which Is Better?

December 3, 2024

notable-supply-chain-compromise-attacks-software-supply-chain-attacks-defending-against-software-supply-chain-attacks

Attacks Analysis

Notable Supply Chain Compromise Attacks and Defenses

November 28, 2024

cvss-a-risk-score-what-information-does-cvss-provide-cvss-calculator

Open-Source Security

CVSS A Risk Score Framework to Prioritize Threats

November 26, 2024

xss-vulnerabilities-sast-tools

Code Security

XSS Vulnerabilities: How SAST Tools Can Prevent Them

November 21, 2024

cyber-risk-management-devsecops-best-practices

Software Supply Chain

Cyber Risk Management: DevSecOps Best Practices

November 21, 2024

breaching-and-attacking-terraform-iac-cyber-security-iac-scanning-tools

IaC

Breaching and Attacking Terraform – Protect Your IaC

November 20, 2024

shift-left-security-shift-left-vs-shift-right

Code Security

Shift Left Security and Shift Right

November 13, 2024

how can companies keep their source code private - Source Code Leaks - code leak

Code Security

How Can Companies Keep Their Source Code Private? | 10 Ways to Prevent Code Leaks

November 7, 2024

nis2-directive-nis2-compliance

Software Supply Chain

NIS2 Directive – Are you ready?

November 4, 2024

Application Security Tools Application Security Testing Tools Application Security

Open-Source Security

Essential Application Security Tools & Testing Types 2026

October 31, 2024

software-composition-analysis-tools-sca-tools

Open-Source Security

Best Software Composition Analysis Tools

October 25, 2024