Xygeni Logo White
Start Free
Book a demo

Xygeni Blog

Must-Read Posts

self-decrypting archive - keystroke logger - malware delivery methods

Self-Decrypting Archive: The Malware Delivery Method You Can’t Ignore

Self-decrypting archive attacks can drop a keystroke logger silently into CI/CD. Learn how to block these stealthy malware delivery methods!
5 min read
yaml anchors and aliases - anchors yaml

YAML Anchors and Aliases: The Overlooked Attack Surface in CI/CD

YAML anchors and aliases can silently spread insecure defaults in CI/CD. Learn how to detect and secure YAML anchors before it's too late!
3 min read
privilege escalation - what is lateral movement in cybersecurity

Lateral Movement: How Privilege Escalation Spreads in Your Network

Learn what is lateral movement in cybersecurity and how privilege escalation fuels attacks in CI/CD, pipelines, and cloud environments.
4 min read
cyber threat hunting - threat hunter

Threat Hunting: What Every Dev Should Learn From a Threat Hunter

Cyber threat hunting isn’t just for SOC teams. Learn how every developer can act as a threat hunter inside code, pipelines, and containers.
4 min read
Visual Studio Code Software - VS code software - visual studio code security

Visual Studio Code Software FAQs

Visual Studio Code software explained. Secure workflows with VS Code software and boost Visual Studio Code security.
6 min read
docker secrets - docker compose secrets

Docker Secrets in CI/CD: Stop Leaking Sensitive Data

Secure Docker secrets and Docker compose secrets: use secret managers, avoid ENV vars, don't bake secrets into images, scan CI/CD for leaks.
4 min read
Platform Event Trap Dev Workflow in Action - pipeline integrity

Platform Event Trap: Dev Workflow in Action

Platform event trap ensures pipeline integrity with security automation that blocks secrets, CVEs, and unsafe scripts in CI/CD.
6 min read
requirements.txt - pip install requirements.txt - pip freeze requirements.txt

Hidden Dangers of Requirements.txt: How Dependency Pinning Can Save You

Secure builds: pin versions in requirements.txt & verify hashes before pip install requirements.txt to prevent typosquatting & attacks!
5 min read
does cyber security require coding - do you need to know coding for cyber security

Does Cyber Security Require Coding?

Does cyber security require coding? Discover if you need to know coding for cyber security and why it matters for security roles.
5 min read
how can an attacker execute malware through a script - cross scripting attack - cross site scripting attack​ - prevent cross site scripting attack​

How Can an Attacker Execute Malware Through a Script?

Learn how can an attacker execute malware through a script, including prevent cross site scripting attack tactics.
5 min read
how to escape python -v command in terminal -command injection attack

How to Escape Python -v Command in Terminal

How to escape Python -V Command in terminal to prevent a command injection attacks? Learn all about it in our post!
4 min read
how are jwt tokens secure - jwt validation - jwt security

How Are JWT Tokens Secure? Common Validation Flaws Developers Miss

How are JWT tokens secure? Learn common JWT validation flaws developers miss and best practices to strengthen JWT security.
5 min read
Load More