Xygeni Blog

bash set -e - set -e bash

set -e in Bash: Why Your Script Fails Without Warning

Learn how bash set -e works, why set -e bash silently skips failures, and how to secure CI/CD scripts with pipefail, traps & explicit checks!
intrusion detection system - intrusion detection systems - intrusion and detection system

Intrusion Detection System: What Devs Need Beyond Logs  

A modern intrusion detection system must go beyond logs. Learn how IDS can secure CI/CD pipelines, code, and builds against hidden attacks!
python try catch - try catch python - try and catch python

Python Try Catch: When Error Handling Becomes a Risk

Misused python try catch blocks can hide failures and risks. Learn safer try and catch python patterns to secure apps and CI/CD pipelines.
Vulnerability Management Automation in DevSecOps

Vulnerability Management Automation in DevSecOps

Discover how vulnerability management automation, risk-based prioritization, and defenses against malicious npm packages secure DevSecOps.
3 min read
Injection XML - how to prevent XML injection

XML Injection: How Attackers Break Your Parsers

Learn how to prevent XML injection in code and pipelines. Discover where injection XML hides, its risks & how to secure your parsers & CI/CD
json.stringify - insecure deserialization

 JSON. stringify: When It Leads to Insecure Deserialization

Misusing JSON.stringify can expose you to insecure deserialization. Learn how to secure JSON handling in code, pipelines, and CI/CD workflows
self-decrypting archive - keystroke logger - malware delivery methods

Self-Decrypting Archive: The Malware Delivery Method You Can’t Ignore

Self-decrypting archive attacks can drop a keystroke logger silently into CI/CD. Learn how to block these stealthy malware delivery methods!
yaml anchors and aliases - anchors yaml

YAML Anchors and Aliases: The Overlooked Attack Surface in CI/CD

YAML anchors and aliases can silently spread insecure defaults in CI/CD. Learn how to detect and secure YAML anchors before it's too late!
privilege escalation - what is lateral movement in cybersecurity

Lateral Movement: How Privilege Escalation Spreads in Your Network

Learn what is lateral movement in cybersecurity and how privilege escalation fuels attacks in CI/CD, pipelines, and cloud environments.
cyber threat hunting - threat hunter

Threat Hunting: What Every Dev Should Learn From a Threat Hunter

Cyber threat hunting isn’t just for SOC teams. Learn how every developer can act as a threat hunter inside code, pipelines, and containers.
Visual Studio Code Software - VS code software - visual studio code security

Visual Studio Code Software FAQs

Visual Studio Code software explained. Secure workflows with VS Code software and boost Visual Studio Code security.
6 min read
docker secrets - docker compose secrets

Docker Secrets in CI/CD: Stop Leaking Sensitive Data

Secure Docker secrets and Docker compose secrets: use secret managers, avoid ENV vars, don't bake secrets into images, scan CI/CD for leaks.