Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

software-composition-analysis-tools-sca-tools

Open-Source Security

10 Keys to Choosing Software Composition Analysis Tools

October 24, 2024

polyfill-attack-polyfill-supply-chain-attack-software-supply-chain-attacks

Attacks Analysis

Unmasking Polyfill: A Deep Dive

October 23, 2024

vulnerability-scan-vulnerability-scanning

Open-Source Security

Don’t Be a Victim: Prioritize Vulnerability Scan

October 18, 2024

it-risk-management-it-security-risk-management-it-risk-management-process

Open-Source Security

IT Risk Management: A Comprehensive Overview

October 17, 2024

Creating an Effective Vulnerability Management Plan - design a vulnerability management program

Open-Source Security

Creating an Effective Vulnerability Management Plan

October 16, 2024

open-source-vulnerability-remediator-open-source-vulnerability-scanner-vulnerability-scan

Open-Source Security

Xygeni’s Open-Source Vulnerability Remediator

October 11, 2024

Open-Source-Security-Tools

Open-Source Security

Don’t Get Hacked: Use Open Source Security Tools

October 9, 2024

vulnerability-management-tool-vulnerability-management-open-source-vulnerability-management

Open-Source Security

Why Every Organization Needs a Vulnerability Management Tool

October 8, 2024

code-checker-tool-malicious-code-checker

Code Security

How Xygeni’s Code Checker Tool Protects Against Malicious Code

October 3, 2024

secops-security-operations-differences-between-secops-and-devsecops

SDLC

SecOps Evolution: Adapting to Modern Cyber Threats

October 2, 2024

open-source-licensing-how-does-open-source-licensing-work-open-source-license-compliance

Open-Source Security

Making Open Source Licensing Easy for Modern Teams

September 27, 2024

Secure Software Development Life Cycle - SDLC Security

SDLC

What Are the Phases of Software Development Life Cycle?

September 24, 2024