Xygeni Logo White
Start Free
Book a demo

Xygeni Blog

Must-Read Posts

Slopsquatting Evolution

Slopsquatting evolution: From AI Curiosity to Agent RCE

How slopsquatting attacks evolved from a research curiosity in 2023 to autonomous-agent remote code execution in 2026 & what it means.
7 min read
AI Governance

AI Governance: What It Actually Takes to Get It Right in 2026

AI governance failures cost enterprises millions. Learn why AI governance monitoring & contextual visibility matter more than policy alone
8 min read
Slopsquatting: How Attackers Weaponize AI Hallucinations

What Is Slopsquatting? How Attackers Weaponize AI Hallucinations

Slopsquatting turns AI hallucinations into supply chain attacks. Learn how it works, why it's effective & how to defend against it.
7 min read
Security Threats in 2026

Security Threats in 2026: Types, Blind Spots, and Why Attack Surface Discovery Is the Fix

A guide to security threats, types, how they differ from risk, and how attack surface discovery brings SDLC visibility. Dive in!
10 min read
PhantomSync: npm Crypto Packages Hide Wallet Stealer

PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

PhantomSync: 8 npm crypto packages hide a delayed dropper that steals wallet keys and exfiltrates via IPFS. IOCs and detection guide.
11 min read
AI Supply Chain Security

AI Supply Chain Security: How AI Attacks and Defends Code

AI supply chain security defends against slopsquatting, malicious packages, and MCP risks in AI-written code. Learn how!
9 min read
FauxUV: Fake PyPI uv Packages Open Jupyter to the Web

FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

FauxUV: fake PyPI uv helper packages install a passwordless JupyterLab server, then expose it to the internet via reverse tunnel.
5 min read
Slopsquatting Attacks

Slopsquatting Attacks: How an AI Mistake Became a New Way Into Your Software Supply Chain

Slopsquatting attacks explained: how AI package hallucinations become real malware. See the evolution and practical prevention steps.
9 min read
forge-jsxy npm Infostealer: IOCs & Detection Guide

forge-jsxy: The npm Infostealer That Keeps Changing Its Name

Renamed npm infostealer forge-jsxy → pinokio-redis steals crypto wallets & credentials. IOCs, timeline, and defender guidance inside.
8 min read
AI Triage and AutoFix

AI Triage and AutoFix: How to Actually Reduce Your Security Backlog

AI triage & AutoFix cut security backlogs by prioritizing what's exploitable and fixing it automatically. Here's how to make it work!
12 min read
GhostTracker: npm Trojan Rebranded in 74 Minutes — Same C2

GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2

GhostTracker rebranded 74 minutes after takedown, same C2, new names. Do you know how the npm trojan works and what to block first?
7 min read
SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

SkillLeak hides a Chrome/Edge password decryptor inside an MCP skill, not an install hook. Learn how it works and what defenders should check.
8 min read
Load More