Xygeni Logo White
Start Free
Book a demo

Category: CI/CD Security

Must-Read Posts

Injection XML - how to prevent XML injection

XML Injection: How Attackers Break Your Parsers

Learn how to prevent XML injection in code and pipelines. Discover where injection XML hides, its risks & how to secure your parsers & CI/CD
4 min read
json.stringify - insecure deserialization

 JSON. stringify: When It Leads to Insecure Deserialization

Misusing JSON.stringify can expose you to insecure deserialization. Learn how to secure JSON handling in code, pipelines, and CI/CD workflows
5 min read
self-decrypting archive - keystroke logger - malware delivery methods

Self-Decrypting Archive: The Malware Delivery Method You Can’t Ignore

Self-decrypting archive attacks can drop a keystroke logger silently into CI/CD. Learn how to block these stealthy malware delivery methods!
5 min read
yaml anchors and aliases - anchors yaml

YAML Anchors and Aliases: The Overlooked Attack Surface in CI/CD

YAML anchors and aliases can silently spread insecure defaults in CI/CD. Learn how to detect and secure YAML anchors before it's too late!
3 min read
privilege escalation - what is lateral movement in cybersecurity

Lateral Movement: How Privilege Escalation Spreads in Your Network

Learn what is lateral movement in cybersecurity and how privilege escalation fuels attacks in CI/CD, pipelines, and cloud environments.
4 min read
Platform Event Trap Dev Workflow in Action - pipeline integrity

Platform Event Trap: Dev Workflow in Action

Platform event trap ensures pipeline integrity with security automation that blocks secrets, CVEs, and unsafe scripts in CI/CD.
6 min read
requirements.txt - pip install requirements.txt - pip freeze requirements.txt

Hidden Dangers of Requirements.txt: How Dependency Pinning Can Save You

Secure builds: pin versions in requirements.txt & verify hashes before pip install requirements.txt to prevent typosquatting & attacks!
5 min read
how to escape python -v command in terminal -command injection attack

How to Escape Python -v Command in Terminal

How to escape Python -V Command in terminal to prevent a command injection attacks? Learn all about it in our post!
4 min read
how are jwt tokens secure - jwt validation - jwt security

How Are JWT Tokens Secure? Common Validation Flaws Developers Miss

How are JWT tokens secure? Learn common JWT validation flaws developers miss and best practices to strengthen JWT security.
5 min read
what is man-in-the-middle attack

Man-in-the-Middle Attack in DevOps: How Insecure Pipelines Get Hijacked

Learn what is man-in-the-middle attack in DevOps & how insecure CI/CD pipelines expose builds to hijacking, injection, and supply chain risks
5 min read
broken authentication - session management- oauth security - authentication vulnerabilities

The Broken Authentication Nightmare: Why Simple Logins Can Be Hacked

Stop broken authentication: fix session management, enforce oauth security & eliminate authentication vulnerabilities before attacks!
5 min read
how to decompile a compiled python file - python decompiler

How to Decompile a Compiled Python File (and Why It’s a Security Risk)

Python .pyc files are trivially decompilable. Learn how attackers exploit bytecode & how to protect your secrets, logic, and CI/CD pipeline.
6 min read
Load More