Xygeni Blog

Must-Read Posts

forge-jsxy npm Infostealer: IOCs & Detection Guide

forge-jsxy: The npm Infostealer That Keeps Changing Its Name

GhostTracker: npm Trojan Rebranded in 74 Minutes — Same C2

GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

Malicious Packages 5

Attacks Analysis

Anatomy of Malicious Packages: What Are the Trends?

July 16, 2024

ASPM-tool-Application Security

ASPM

Is ASPM the Future of Application Security?

July 12, 2024

Xygeni-black-hat-2024

ASPM

Join Xygeni at Black Hat USA 2024

July 9, 2024

ASPM platforms - Application Security Posture Management Platforms

ASPM

ASPM Platforms: Discover Their Value

July 3, 2024

DORA ICT risk management

CI CD Security

ICT Risk Management: The First Pillar of DORA

July 3, 2024

data-leakage-prevention-data-breach

Open-Source Security

Data Leakage : Essential Strategies for Protection

July 3, 2024

Open Source Malicious Packages: The Problem

Must Read

Open Source Malicious Packages: The Problem

June 26, 2024

CI CD Security

DORA Implementation and Cyber Resilience

June 13, 2024

Attacks Analysis

The Most Infamous Malware Attacks in History

June 11, 2024

Open-Source Security

Simplifying Open Source Licensing Compliance

June 7, 2024

JA_NPM

Attacks Analysis

NPM flooding case-study: “Down the Rabbit Hole looking for a Tea”

May 29, 2024

RSA_Conference_2024_Cover

Software Supply Chain

Highlights from RSA Conference 2024: Must-Watch Talks

May 24, 2024