Xygeni Blog

Must-Read Posts

GhostTracker: npm Trojan Rebranded in 74 Minutes — Same C2

GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

secure software supply chain, ai bom, mcp security

OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM

ldap port - ldap group - ldap bind operation

Secrets Security

LDAP Port Misconfigs: How Groups and Bind Operations Break App Security

October 1, 2025

cyber threat hunting - threat hunter

CI CD Security

Threat Hunting with Code: How to Track Malicious Patterns in Repos

October 1, 2025

SQL vulnerability - SQL injection vulnerability - SQL injection vulnerability scanner

Code Security

SQL Vulnerability: Detect and Prevent Attacks

September 30, 2025

cybersecurity as a service - cybersecurity as a service caas -cybersecurity as a service companies

SDLC

Cybersecurity as a Service in DevSecOps

September 30, 2025

has been pwned - pwned checker - secrets detection

Secrets Security

What “Has Been Pwned” Really Means for Developers

September 30, 2025

CI CD Security

Different Types of Security Tags and How to Remove Them Safely

September 30, 2025

laravel 11.30.0 exploit - laravel exploit - laravel 11.30.0 vulnerabilities

CI CD Security

Laravel 11.30.0 Exploit: What Devs Must Patch Now

September 29, 2025

session hijacking prevention - session hijack

CI CD Security

Session Hijacking: The Code and Config Mistakes That Open the Door

September 29, 2025

bash set -e - set -e bash

Anomaly Detection

set -e in Bash: Why Your Script Fails Without Warning

September 26, 2025

intrusion detection system - intrusion detection systems - intrusion and detection system

Anomaly Detection

Intrusion Detection System: What Devs Need Beyond Logs

September 25, 2025

python try catch - try catch python - try and catch python

CI CD Security

Python Try Catch: When Error Handling Becomes a Risk

September 25, 2025

CI CD Security

Vulnerability Management Automation in DevSecOps

September 25, 2025