Xygeni Blog

Must-Read Posts

GhostTracker: npm Trojan Rebranded in 74 Minutes — Same C2

GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

secure software supply chain, ai bom, mcp security

OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM

markdown cheat sheet - Markdown guide - Markdown tips and tricks

CI CD Security

Markdown Cheat Sheet: Tips to Prevent Injection and Formatting Errors

August 26, 2025

Checksum errors

CI CD Security

Checksum Errors Explained: How to Detect and Prevent Integrity Failures

August 26, 2025

SDLC

Cyber Security Risk Assessment Guide for Dev Teams

August 26, 2025

ansible software - ansible for security - ansible best practices

IaC

Ansible Software FAQs: Everything You’ve Ever Wondered

August 25, 2025

conda delete environment - conda remove env - how to delete conda environment - conda clean

Anomaly Detection

Conda Remove Env: Don’t Just Delete It, Do It Securely!

August 25, 2025

exit code -1 - git push

Secrets Security

Exit Code -1 After a Git Push? It Might Be Your Secrets or Vulnerable Code

August 25, 2025

error pg_config executable not found

CI CD Security

Getting error: pg_config executable not found? Fix Your Python Build the Secure Way

August 25, 2025

CI CD Security

Top 10 Indicators of Compromise in CI/CD Pipelines

August 21, 2025

scan for application- scan for malware - vuln scanner

Code Security

Scan for Application Vulnerabilities and Malware Across the SDLC

August 20, 2025

threat detection and response - real time threat detection - threat detection and response solutions - threat detection and response tools

Code Security

Threat Detection and Response for DevOps

August 20, 2025

Autofix Software -sast tools examples- examples of sast tools - sast and dast tools examples (opcional)

Code Security

Autofix Software: Fix Alerts, Not Just Detect

August 20, 2025

requests.get, flask -request, flask request form

Attacks Analysis

Request.get in Flask: The Simple Injection Vector You Might Miss

August 20, 2025