Xygeni Blog

Must-Read Posts

JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

QuietPolyfill, an NPM dropper that resurrected

QuietPolyfill: An NPM dropper that resurrected

rogue by design

Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

PointBlank: PyPI RAT Hides C2 in a JSON-Bin Service

PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

RSA_Banner_Landing

Software Supply Chain

Xygeni Unveils Cybersecurity Innovations at RSA Conference 2024

April 9, 2024

Pagina_Eventos

Software Supply Chain

SafeDev Talks II – Demystifying SBOM Security

April 4, 2024

XZ Backdoor Attack

Must Read

XZ Backdoor: “That was a close one”

April 1, 2024

software-attestation-build-attestation

Build Security

Software Attestation in Build Security – An Introduction

March 28, 2024

NIST CSF Version 2.0

Software Supply Chain

National Institute of Standards and Technology Releases Landmark Update to Cybersecurity Framework

March 26, 2024

A Deep Dive into Software Security with Xygeni on Neuco's Podcast

Software Supply Chain

A Deep Dive into Software Security with Xygeni on Neuco’s Podcast

March 21, 2024

Build Security Essentials: Strengthening Your Software from the Ground Up

CI CD Security

Build Security Essentials: Strengthening Your Software from the Ground Up

March 19, 2024

The Essential Guide to Enhancing Your Software's Security Posture

CI CD Security

The Essential Guide to Enhancing Your Software’s Security Posture

March 14, 2024

open-source-software-security-tools-OSS-Security

CI CD Security

Understanding the Landscape of Open-Source Software Security

March 12, 2024

devops secrets management - secrets detection

Secrets Security

Unlocking Security: DevOps Secrets Management Best Practices

March 7, 2024

SLSA framework - Supply-chain Levels for Software

CI CD Security

Master SLSA Framework: Safeguard Your Software Supply Chain

March 5, 2024

CI/CD Security Tools - CI/CD challenges

CI CD Security

CI/CD Security: Overcoming CI/CD Challenges and Common Pitfalls

February 29, 2024