Xygeni Logo White
Start Free
Book a demo

Xygeni Blog

Must-Read Posts

application control engine - application client container - aspm

Application Control Engine vs Client Container in ASPM

Discover how an application control engine, application client container, and (ASPM) enable real execution control.
8 min read
Broken Access Control - Security Misconfiguration - Managed Object Browser

Managed Object Browser and Broken Access Control

Security advisory on Managed Object Browser risks, Security Misconfiguration, and Broken Access Control aligned with OWASP A05:2021.
6 min read
Why PURL Matters More Than You Think

Why purl Matters More Than You Think

Learn how purl and pkg improve vulnerability assessment by identifying dependencies accurately and reducing false positives in modern SCA.
7 min read
Risk Based Vulnerability Management- cyber resilience act - cisa known exploited vulnerabilities catalog

Risk Based Vulnerability Management and CRA

Risk based vulnerability management explained using the CISA Known Exploited Vulnerabilities Catalog and the Cyber Resilience Act.
9 min read
mcp server - model context protocol - mcp ai project

MCP Server in AI: Key Concepts Explained

Learn what an MCP server is, how the Model Context Protocol works, and how to secure an MCP AI project safely.
8 min read
software supply chain security - open source supply chain attacks - AI and software security - AI Security

AI Security and the Expanding Software Supply Chain Attack Surface

AI Security is now inseparable from software supply chain security. Learn what AI-driven development means for dependency risk.
10 min read
React2Shell - CVE-2025-55182 - RCE risk

React2Shell: CVE-2025-55182 and the Next.js RCE Risk

React2Shell (CVE-2025-55182) creates a critical Next.js RCE risk. Understand the impact and what to patch immediately.
7 min read
slsa attestation - slsa framework - SLSA v1.2

SLSA v1.2 : Updates to the SLSA Framework Explained

A clear developer guide to SLSA v1.2 that explains the new requirements, the framework and how to use slsa attestation in your builds.
5 min read
OWASP Top 10 2025 -owasp top ten - OWASP Top 10

OWASP Top 10 2025 Explained for Developers

A quick developer guide to the OWASP Top 10 2025 that explains the new risks and how to understand them fast.
15 min read
shai hulud - npm supply chain attack

Shai-Hulud 2.0 NPM Supply Chain Attack

Shai Hulud turns the npm supply chain attack into a cross-ecosystem risk. Understand the impact, exposures, and how to stay protected.
15 min read
Vibe Coding Security Risks

AI for Coding Explained: 10 Simple Answers Developers Need

Vibe coding, AI for coding y sus riesgos de seguridad: descubre cómo proteger tu código de los AI-generated code security risks.
6 min read
Agentic AI The Complete Guide

Agentic AI: The Complete Guide for Developers, AI Engineers, and AppSec Teams

Learn what agentic AI is and how AI agent platforms and AI coding agents work, including key risks and security practices for DevSecOps.
11 min read
Load More