Xygeni Blog

Must-Read Posts

GhostTracker: npm Trojan Rebranded in 74 Minutes — Same C2

GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

secure software supply chain, ai bom, mcp security

OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM

aws security - amazon web services security - AWS security best practices

IaC

AWS Security FAQs: Everything You’ve Ever Wondered

August 19, 2025

what is deserialization - remote code execution

CI CD Security

How Insecure Deserialization Becomes Remote Code Execution (and How to Catch It Before Merge)

August 19, 2025

python user input - user input python - how to get user input in python

Attacks Analysis

The Wrong Way to Get User Input in Python (And the Secure Alternative)

August 19, 2025

sql substring_index - substring_index in sql - string functions in sql

CI CD Security

The Hidden Security Pitfalls of SQL SUBSTRING_INDEX

August 18, 2025

chmod 777 - linux permissions - backdoor attack

Attacks Analysis

Chmod 777 Is Not a Fix: How a Misconfigured Script Became a Backdoor

August 18, 2025

OpenSSL s_client - ssl error - TLS security

CI CD Security

OpenSSL s_client Showed My TLS Was Broken: Diagnosing SSL Errors in CI

August 18, 2025

cybersecurity platform - unified cybersecurity platform - cybersecurity risk management platform - cybersecurity management platform

SDLC

From 10 Tools to One Cybersecurity Platform

August 14, 2025

IaC security - infrastructure as code security - IaC cyber security

IaC

IaC Security: How to Build Strong Infrastructure as Code

August 14, 2025

watering hole attacks - what is a watering hole attack

Attacks Analysis

From Dev to Target: How Watering Hole Attacks Infiltrate Your Pipeline

August 14, 2025

namso gen - fake credit card generator - malware download

Code Security

Namso gen and the Malware Behind Fake Generators

August 13, 2025

NPM SECURITY - npm packages - NPM install

CI CD Security

Npm Security FAQs: Everything You’ve Ever Wondered

August 12, 2025

package.json - package-lock.json - typosquatting

CI CD Security

A Typo in package.json Let a Lookalike Package Compromise the Pipeline

August 12, 2025