Xygeni Blog

Must-Read Posts

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

secure software supply chain, ai bom, mcp security

OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM

OWASP GLOBAL Appsec AI Security

AI Security at OWASP Global AppSec EU 2026: Meet Xygeni in Vienna

Docker Build -t - docker build command - docker build -t option

CI CD Security

Docker Build -t Explained: Secure Image Tagging in Your Pipeline

October 7, 2025

server side template injection - ssti vulnerability - ssti payloads

CI CD Security

Server Side Template Injection Explained with Real Code Examples

October 6, 2025

docker registry - container registry -malicious docker images

CI CD Security

Securing Your Docker Registry: Don’t Let Malicious Images Into Your Pipeline

October 6, 2025

Function Result 2 Error Code 0 - error: gradle task assembledebug failed with exit code 1

CI CD Security

Function Result 2 Error Code 0 in CI/CD: What It Really Means

October 5, 2025

try except python - python try except else

CI CD Security

Python Try Except Blocks: Debugging vs. Security Trade-Offs

October 4, 2025

Open-Source Security

Risk Remediation: Avoid Breaking Changes

October 3, 2025

sast scan - sast scanning tools- sast scanning tools

Code Security

SAST Scan with Xygeni: Secure Code at Speed

October 3, 2025

open source intrusion detection - intrusion detection and prevention systems open source - open source intrusion detection tools - intrusion detection system open source

Open-Source Security

Open Source Intrusion Detection Tools and Systems

October 2, 2025

CVE-2025-30065 - Apache Parquet - Parquet Avro

Attacks Analysis

CVE-2025-30065: Apache Parquet Avro Exploit

October 2, 2025

error: gpg check failed - error: gpg failed to sign the data - gpg error

CI CD Security

Why Error: GPG Check FAILED in Your Build (and How to Fix It Securely)

October 2, 2025

azure security - microsoft azure security - azure security best practices

IaC

Microsoft Azure Security FAQ

October 1, 2025

ldap port - ldap group - ldap bind operation

Secrets Security

LDAP Port Misconfigs: How Groups and Bind Operations Break App Security

October 1, 2025