Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

operational resilience testing - dora resilience testing

Open-Source Security

DORA Compliance: Strengthening Your Digital Resilience Testing

September 19, 2024

sca scanning - sca tool

Open-Source Security

Beyond SCA Scanning

September 17, 2024

container security scanner - container image scanning

Open-Source Security

Container Security – The Ultimate Guide

September 12, 2024

third-party-risk-management-software

Open-Source Security

Xygeni’s Third-Party Risk Management for DORA Compliance

September 11, 2024

how-to-avoid-malware-malware-prevention-cve check

Open-Source Security

How to Avoid Malware: 7 Steps for Malware Prevention in 2026

September 5, 2024

secure-software-development-devops-security-devops-and-security

SDLC

DevOps and Security: Faster, Safer Software Development

September 3, 2024

DevOps-and-Software-Supply-Chain-Security-secure-software-supply-chain

CI CD Security

Software Supply Chain Security and DevOps: Building a Synergistic Relationship

August 31, 2024

dependency scanning tools - open source dependencies

Open-Source Security

Why Dependency Scanning Matters for DevOps Teams

August 30, 2024

SDLC

Secure Software Development Life Cycle with SafeDev Talks

August 28, 2024

Software-Supply-Chain-Attacks

CI CD Security

Navigating the Landscape of Software Supply Chain Security and Attacks

August 27, 2024

AppSec Tools - appsec security

SDLC

AppSec Tools: 6 Reasons Why They Should Matter to You

August 22, 2024

CVE scoring - CVE security

Open-Source Security

CVE Scoring Explained: CVSS, EPSS & Prioritization

August 22, 2024