Xygeni Logo White
Start Free
Book a demo

Xygeni Blog

Must-Read Posts

python try catch - try catch python - try and catch python

Python Try Catch: When Error Handling Becomes a Risk

Misused python try catch blocks can hide failures and risks. Learn safer try and catch python patterns to secure apps and CI/CD pipelines.
48 min read
Vulnerability Management Automation in DevSecOps

Vulnerability Management Automation in DevSecOps

Discover how vulnerability management automation, risk-based prioritization, and defenses against malicious npm packages secure DevSecOps.
3 min read
Injection XML - how to prevent XML injection

XML Injection: How Attackers Break Your Parsers

Learn how to prevent XML injection in code and pipelines. Discover where injection XML hides, its risks & how to secure your parsers & CI/CD
4 min read
json.stringify - insecure deserialization

 JSON. stringify: When It Leads to Insecure Deserialization

Misusing JSON.stringify can expose you to insecure deserialization. Learn how to secure JSON handling in code, pipelines, and CI/CD workflows
5 min read
self-decrypting archive - keystroke logger - malware delivery methods

Self-Decrypting Archive: The Malware Delivery Method You Can’t Ignore

Self-decrypting archive attacks can drop a keystroke logger silently into CI/CD. Learn how to block these stealthy malware delivery methods!
5 min read
yaml anchors and aliases - anchors yaml

YAML Anchors and Aliases: The Overlooked Attack Surface in CI/CD

YAML anchors and aliases can silently spread insecure defaults in CI/CD. Learn how to detect and secure YAML anchors before it's too late!
3 min read
privilege escalation - what is lateral movement in cybersecurity

Lateral Movement: How Privilege Escalation Spreads in Your Network

Learn what is lateral movement in cybersecurity and how privilege escalation fuels attacks in CI/CD, pipelines, and cloud environments.
4 min read
cyber threat hunting - threat hunter

Threat Hunting: What Every Dev Should Learn From a Threat Hunter

Cyber threat hunting isn’t just for SOC teams. Learn how every developer can act as a threat hunter inside code, pipelines, and containers.
4 min read
Visual Studio Code Software - VS code software - visual studio code security

Visual Studio Code Software FAQs

Visual Studio Code software explained. Secure workflows with VS Code software and boost Visual Studio Code security.
6 min read
docker secrets - docker compose secrets

Docker Secrets in CI/CD: Stop Leaking Sensitive Data

Secure Docker secrets and Docker compose secrets: use secret managers, avoid ENV vars, don't bake secrets into images, scan CI/CD for leaks.
4 min read
Platform Event Trap Dev Workflow in Action - pipeline integrity

Platform Event Trap: Dev Workflow in Action

Platform event trap ensures pipeline integrity with security automation that blocks secrets, CVEs, and unsafe scripts in CI/CD.
6 min read
requirements.txt - pip install requirements.txt - pip freeze requirements.txt

Hidden Dangers of Requirements.txt: How Dependency Pinning Can Save You

Secure builds: pin versions in requirements.txt & verify hashes before pip install requirements.txt to prevent typosquatting & attacks!
5 min read
Load More