Xygeni Blog

Must-Read Posts

GhostTracker: npm Trojan Rebranded in 74 Minutes — Same C2

GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

secure software supply chain, ai bom, mcp security

OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM

Injection XML - how to prevent XML injection

CI CD Security

XML Injection: How Attackers Break Your Parsers

September 24, 2025

json.stringify - insecure deserialization

CI CD Security

JSON. stringify: When It Leads to Insecure Deserialization

September 24, 2025

self-decrypting archive - keystroke logger - malware delivery methods

CI CD Security

Self-Decrypting Archive: The Malware Delivery Method You Can’t Ignore

September 23, 2025

yaml anchors and aliases - anchors yaml

CI CD Security

YAML Anchors and Aliases: The Overlooked Attack Surface in CI/CD

September 23, 2025

privilege escalation - what is lateral movement in cybersecurity

CI CD Security

Lateral Movement: How Privilege Escalation Spreads in Your Network

September 22, 2025

cyber threat hunting - threat hunter

Anomaly Detection

Threat Hunting: What Every Dev Should Learn From a Threat Hunter

September 22, 2025

Visual Studio Code Software - VS code software - visual studio code security

Code Security

Visual Studio Code Software FAQs

September 19, 2025

docker secrets - docker compose secrets

Secrets Security

Docker Secrets in CI/CD: Stop Leaking Sensitive Data

September 19, 2025

CI CD Security

Platform Event Trap: Dev Workflow in Action

September 19, 2025

requirements.txt - pip install requirements.txt - pip freeze requirements.txt

CI CD Security

Hidden Dangers of Requirements.txt: How Dependency Pinning Can Save You

September 19, 2025

does cyber security require coding - do you need to know coding for cyber security

Code Security

Does Cyber Security Require Coding?

September 19, 2025

how can an attacker execute malware through a script - cross scripting attack - cross site scripting attack - prevent cross site scripting attack

Code Security

How Can an Attacker Execute Malware Through a Script?

September 18, 2025