Xygeni Blog

Must-Read Posts

GhostTracker: npm Trojan Rebranded in 74 Minutes — Same C2

GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

secure software supply chain, ai bom, mcp security

OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM

which of the following are common causes of breaches - what is a data breach - how to prevent data breach

Attacks Analysis

Which of the Following Are Common Causes of Breaches?

August 6, 2025

github games - github unblocked games -github io games

Open-Source Security

GitHub Games with PreBuild Malware? It’s Happening

August 5, 2025

cybersecurity putting yourself in the mind of a hacker - white hat hacking - what is a white hat hacker

Open-Source Security

Cybersecurity, Putting Yourself in the Mind of a Hacker

August 5, 2025

What Xygeni Can Do To Increase Security

ASPM

What Xygeni Can Do To Increase Security?

August 5, 2025

Gitlab Security -Gitlab Security

CI CD Security

Gitlab Security FAQs: What Every Developer Should Know

August 4, 2025

dosfuscation - obfuscation techniques - types of denial of service attacks

Secrets Security

Dosfuscation: The Hidden Denial-of-Service Threat in Your Dependencies

August 1, 2025

Third Party Risk Management Software

Open-Source Security

Third Party Risk Management Software for Developers

August 1, 2025

crackhash - password cracking - hash cracking techniques

Secrets Security

How Attackers Use Crackhash for Password Cracking, And How to Stop Them

July 31, 2025

Hardcoding,hashicorp vault, secrets management

Secrets Security

How to Stop Hardcoding Secrets with HashiCorp Vault

July 30, 2025

tj-actions/changed-files - CVE-2025-30066 - secret leakage

Code Security

CVE‑2025‑30066: When tj‑actions/changed‑files Leads to Secret Leakage

July 30, 2025

insecure direct object reference - what is IDOR vulnerability

CI CD Security

What Happens When You Don’t Lock Object Access? Hello, IDOR Vulnerability

July 30, 2025

stride threat modeling framework

Code Security

STRIDE Threat Model: The “What Can Go Wrong?” Framework

July 30, 2025