Xygeni Blog

Must-Read Posts

GhostTracker: npm Trojan Rebranded in 74 Minutes — Same C2

GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

secure software supply chain, ai bom, mcp security

OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM

mitre attack - mitre att&ck - MITRE attack framework - the mitre att&ck framework.

Attacks Analysis

MITRE ATT&CK Framework Explained for Developers

September 2, 2025

jumping shell - bin/bash - escape restricted shell

CI CD Security

Jumping Shell: How Attackers Escape Restricted Shells to /bin/bash

August 29, 2025

package-lock.json - package lock json - npm typosquatting

CI CD Security

Package-Lock.json Typo: How It Can Hijack Your Build

August 29, 2025

python try catch - try catch python - try catch block

CI CD Security

Python Try Catch Blocks: When Error Handling Becomes a Risk

August 29, 2025

docker-compose.yml - docker-compose secrets

Secrets Security

Why Docker-compose.yml Is a Security Risk Surface?

August 28, 2025

JavaScript Obfuscator - JavaScript deobfuscator - JavaScript malware

CI CD Security

Why JavaScript Obfuscator Tools Are Abused by Attackers (And How to Detect Them)

August 28, 2025

attack surface management - attack surface -external attack surface management

ASPM

Attack Surface Management in DevSecOps

August 28, 2025

CISA SBOM - SBOM Minimum Elements - SBOM standards - software risk management

Open-Source Security

CISA SBOM 2025: Updates, Standards, and Compliance

August 27, 2025

AI Automated Vulnerability Remediation - code autofix - application security automation - automated application security testing

AI

AI Automated Vulnerability Remediation: Black Hat Replay

August 27, 2025

spoofing attack - spoofing definition - what type of attack relies on spoofing

CI CD Security

Spoofing Definition for Developers: What You Need to Know About These Attacks

August 27, 2025

rootkit detection - code integrity

Anomaly Detection

Rootkits Aren’t Just for Sysadmins Anymore: They Live in Repos Too

August 27, 2025

Code Security

Handlebars JS: Safe Usage to Avoid Injection Flaws

August 27, 2025