Xygeni Blog

poisoned-pipeline-execution-II

A Deep Dive into CI/CD Pipelines Vulnerabilities (II) : Indirect Poisoned Pipeline Execution (I-PPE)

Poisoned Pipeline Execution (PPE) is produced when the attacker can modify the pipeline logic in either of two ways: discover which!
The Ledger Attack: draining hardware cryptowallets

The Ledger Attack: draining hardware cryptowallets

This post analyzes Ledger attack as an example of how a spear phising led to a software supply chain (SSC) attack on the software connect-kit
10 Malicious NPM Packages Uncovered: A Wake-up Call to Software Supply Chain Security

10 Malicious NPM Packages Uncovered: A 2024 Case Study Still Relevant Today

Xygeni's 2024 discovery of 10 malicious npm packages was an early warning sign. Today: 100-200+ weekly. See what changed!
Brewing Security Resilience: A Coffee Talk on Software Supply Chain Security in 2024

Brewing Security Resilience: A Coffee Talk on Software Supply Chain Security in 2024

Join us for a free thought-provoking coffee talk on the future of Software Supply Chain Security in 2024. Register Now!
3 min read
aspm security - application security posture management

ASPM – Application Security Posture Management: Elevating Cybersecurity & Business Success

Discover ASPM security. Learn how application security posture management strengthens defenses, ensures compliance & prevents cyber threats!
what is an SBOM Security - Software Security

SBOM Security and Its Role in Software Security

One crucial tool gaining prominence is SBOM Security. But what exactly is SBOM, and why is it so vital for software security?
7 min read
Software Supply Chain Security Threats in the Package Stage

Software Supply Chain Security Threats in the Package Stage

Threats In The Package Stage - a pivotal juncture, converting source code into executable artifacts prepared for distribution. Read Now!
6 min read
Blog Post images (6) (1)

Software Supply Chain Threats in the Build Stage

Discover the most common Software Supply Chain Threats. Join us in building a more secure software ecosystem with build security!
5 min read
The State of Software Supply Chain Security in 2023 A Sneak Peek

The Road Ahead: Predictions for SSCS in DevOps

DevOps teams are constantly exploring ways to strengthen their SSCS. Discover the road ahead with predictions for 2024!
Blog Post images (5) (1)

The State of Software Supply Chain Security in 2024: A Sneak Peek

We shed some light on the events and trends that defined software supply chain security in 2023 and offer glimpse into what 2024 might bring!
Introduction to Software Supply Chain Protection with NIST SP 800-204D

Build Security: A Practical Guide to Protecting Software Supply Chains Using NIST SP 800-204D

Studies have highlighted the importance of considering the entire SDLC, known as the SSC regarding security. Learn more about build security!
Software Supply Chain Security Threats in the Source Stage

Software Supply Chain Security Threats in the Source Stage

Today, we’ll dive into the most prevalent software supply chain security threats that arise during the source stage. Read blog post now!
6 min read