Xygeni Logo White
Start Free
Book a Demo

Category: CI/CD Security

Must-Read Posts

self-decrypting archive - keystroke logger - malware delivery methods

Self-Decrypting Archive: The Malware Delivery Method You Can’t Ignore

Self-decrypting archive attacks can drop a keystroke logger silently into CI/CD. Learn how to block these stealthy malware delivery methods!
·
5 min read
yaml anchors and aliases - anchors yaml

YAML Anchors and Aliases: The Overlooked Attack Surface in CI/CD

YAML anchors and aliases can silently spread insecure defaults in CI/CD. Learn how to detect and secure YAML anchors before it's too late!
·
3 min read
privilege escalation - what is lateral movement in cybersecurity

Lateral Movement: How Privilege Escalation Spreads in Your Network

Learn what is lateral movement in cybersecurity and how privilege escalation fuels attacks in CI/CD, pipelines, and cloud environments.
·
4 min read
Platform Event Trap Dev Workflow in Action - pipeline integrity

Platform Event Trap: Dev Workflow in Action

Platform event trap ensures pipeline integrity with security automation that blocks secrets, CVEs, and unsafe scripts in CI/CD.
·
6 min read
requirements.txt - pip install requirements.txt - pip freeze requirements.txt

Hidden Dangers of Requirements.txt: How Dependency Pinning Can Save You

Secure builds: pin versions in requirements.txt & verify hashes before pip install requirements.txt to prevent typosquatting & attacks!
·
5 min read
how to escape python -v command in terminal -command injection attack

How to Escape Python -v Command in Terminal

How to escape Python -V Command in terminal to prevent a command injection attacks? Learn all about it in our post!
·
4 min read
how are jwt tokens secure - jwt validation - jwt security

How Are JWT Tokens Secure? Common Validation Flaws Developers Miss

How are JWT tokens secure? Learn common JWT validation flaws developers miss and best practices to strengthen JWT security.
·
5 min read
what is man-in-the-middle attack

Man-in-the-Middle Attack in DevOps: How Insecure Pipelines Get Hijacked

Learn what is man-in-the-middle attack in DevOps & how insecure CI/CD pipelines expose builds to hijacking, injection, and supply chain risks
·
5 min read
broken authentication - session management- oauth security - authentication vulnerabilities

The Broken Authentication Nightmare: Why Simple Logins Can Be Hacked

Stop broken authentication: fix session management, enforce oauth security & eliminate authentication vulnerabilities before attacks!
·
5 min read
how to decompile a compiled python file - python decompiler

How to Decompile a Compiled Python File (and Why It’s a Security Risk)

Python .pyc files are trivially decompilable. Learn how attackers exploit bytecode & how to protect your secrets, logic, and CI/CD pipeline.
·
6 min read
jumping shell - bin/bash - escape restricted shell

Jumping Shell: How Attackers Escape Restricted Shells to /bin/bash

Learn how jumping shell exploits let attackers escape restricted shell to /bin/bash, the risks they pose, and how to secure CI/CD pipelines!
·
3 min read
package-lock.json - package lock json - npm typosquatting

Package-Lock.json Typo: How It Can Hijack Your Build

A typo in package-lock.json can expose you to NPM typosquatting. Learn how those errors hijack builds and how to secure dependencies!
·
4 min read
Load More