Xygeni Logo White
Start Free
Book a demo

Xygeni Blog

Must-Read Posts

Platform Event Trap Dev Workflow in Action - pipeline integrity

Platform Event Trap: Dev Workflow in Action

Platform event trap ensures pipeline integrity with security automation that blocks secrets, CVEs, and unsafe scripts in CI/CD.
6 min read
requirements.txt - pip install requirements.txt - pip freeze requirements.txt

Hidden Dangers of Requirements.txt: How Dependency Pinning Can Save You

Secure builds: pin versions in requirements.txt & verify hashes before pip install requirements.txt to prevent typosquatting & attacks!
5 min read
does cyber security require coding - do you need to know coding for cyber security

Does Cyber Security Require Coding?

Does cyber security require coding? Discover if you need to know coding for cyber security and why it matters for security roles.
5 min read
how can an attacker execute malware through a script - cross scripting attack - cross site scripting attack​ - prevent cross site scripting attack​

How Can an Attacker Execute Malware Through a Script?

Learn how can an attacker execute malware through a script, including prevent cross site scripting attack tactics.
5 min read
how to escape python -v command in terminal -command injection attack

How to Escape Python -v Command in Terminal

How to escape Python -V Command in terminal to prevent a command injection attacks? Learn all about it in our post!
4 min read
how are jwt tokens secure - jwt validation - jwt security

How Are JWT Tokens Secure? Common Validation Flaws Developers Miss

How are JWT tokens secure? Learn common JWT validation flaws developers miss and best practices to strengthen JWT security.
5 min read
what is man-in-the-middle attack

Man-in-the-Middle Attack in DevOps: How Insecure Pipelines Get Hijacked

Learn what is man-in-the-middle attack in DevOps & how insecure CI/CD pipelines expose builds to hijacking, injection, and supply chain risks
5 min read
Shai hulud - npm packages - supply chain attack

Shai-Hulud: The npm Packages Worm Explained

Shai-Hulud npm worm: Read all you need to know about this massive supply chain attack with the latest updates and IoCs.
12 min read
git pre-commit hook

Why Pre-Commit Hooks Fail at Stopping Secrets

Pre-commit hooks are easy to bypass. Learn why git pre commit hook checks fail and how to enforce real security in CI/CD pipelines today!
4 min read
broken authentication - session management- oauth security - authentication vulnerabilities

The Broken Authentication Nightmare: Why Simple Logins Can Be Hacked

Stop broken authentication: fix session management, enforce oauth security & eliminate authentication vulnerabilities before attacks!
5 min read
git log - git stash- git rebase - git filter-repo

Why git log Still Shows Your Secrets: Git Commit History Never Forgets

Learn how git log, git stash, git rebase can fail to remove credentials & how git filter-repo safely scrubs sensitive history!
4 min read
how to decompile a compiled python file - python decompiler

How to Decompile a Compiled Python File (and Why It’s a Security Risk)

Python .pyc files are trivially decompilable. Learn how attackers exploit bytecode & how to protect your secrets, logic, and CI/CD pipeline.
6 min read
Load More