Xygeni Blog

npm i -s - npm install --save - npm malicious packages

NPM i -s and the Hidden Risks in Your Dependencies

Learn how npm i -s and npm install --save can expose you to npm malicious packages and secure your dependencies.
Application Vulnerability Scanning

Application Vulnerability Scanning: Detect and Fix Risks

Application vulnerability scanning improves security. Use application vulnerability scanning tools to detect risks early.
5 min read
nist ai risk management framework - ai risk management - ai in risk management

NIST AI Risk Management Framework Guide

Apply the NIST AI Risk Management Framework to automate AI risk management for developers and security teams.
9 min read
open source intrusion detection - open source intrusion detection system - intrusion detection and prevention systems

Open Source Intrusion Detection: A Practical Guide for DevSecOps

DevSecOps guide to open source intrusion detection system. Learn how intrusion detection and prevention systems protect CI/CD pipelines.
7 min read
Npm Packages -Contagious Interview

Npm Packages Masquerade as Benign UI Libraries in North Korea’s “Contagious Interview” Supply-Chain Attack

Newly detected malicious npm packages masquerade as harmless front-end helpers but contain malicious obfuscated code.
5 min read
ai security - ai in cyber security - ai security risks

AI in Cyber Security: Understanding the Real Risks

AI security: protect models and pipelines from prompt injection, data leaks, and risks with ASPM and AI Auto-Fix.
8 min read
git remote set-url - git set url for remote - git add remote

When Git remote set-url Becomes a Supply Chain Risk

Learn how Git remote set-url and git add remote can be abused in CI/CD pipelines & how to prevent supply chain attacks
infector virus - file infector virus - malware code

File Infector Virus in Code Repositories: What Devs Need to Watch For

Discover how an infector virus spreads through code repositories and how to detect and block hidden malware code in CI/CD pipelines.
jenkins security - security jenkins - jenkins security best practices

Jenkins Security FAQs: Everything You Need to Know

Learn how to apply jenkins security best practices, protect pipelines, and strengthen security jenkins workflows for reliable automation.
5 min read
attribute based access control - abac - abac vs rbac

Attribute-Based Access Control in CI/CD: Enforcing Policies Beyond Roles

Learn how attribute based access control secures CI/CD pipelines. Discover ABAC vs RBAC differences & why context-driven access wins.
what does whitelist mean - what does whitelisting mean - whitelist meaning

What Does Whitelist Mean in Cybersecurity (and Why Devs Should Stop Using It)?

Learn what does whitelist mean and why static trust fails. Understand whitelist meaning & secure allowlist practices for DevSecOps pipelines.
software development security best practices (2)

Software Development Security Best Practices

Discover software development security best practices and learn the best practices for secure software development.
4 min read