Xygeni Logo White
Start Free
Book a demo

Xygeni Blog

Must-Read Posts

what is man-in-the-middle attack

Man-in-the-Middle Attack in DevOps: How Insecure Pipelines Get Hijacked

Learn what is man-in-the-middle attack in DevOps & how insecure CI/CD pipelines expose builds to hijacking, injection, and supply chain risks
5 min read
Shai hulud - npm packages - supply chain attack

Shai-Hulud: The npm Packages Worm Explained

Shai-Hulud npm worm: Read all you need to know about this massive supply chain attack with the latest updates and IoCs.
12 min read
git pre-commit hook

Why Pre-Commit Hooks Fail at Stopping Secrets

Pre-commit hooks are easy to bypass. Learn why git pre commit hook checks fail and how to enforce real security in CI/CD pipelines today!
4 min read
broken authentication - session management- oauth security - authentication vulnerabilities

The Broken Authentication Nightmare: Why Simple Logins Can Be Hacked

Stop broken authentication: fix session management, enforce oauth security & eliminate authentication vulnerabilities before attacks!
5 min read
git log - git stash- git rebase - git filter-repo

Why git log Still Shows Your Secrets: Git Commit History Never Forgets

Learn how git log, git stash, git rebase can fail to remove credentials & how git filter-repo safely scrubs sensitive history!
4 min read
how to decompile a compiled python file - python decompiler

How to Decompile a Compiled Python File (and Why It’s a Security Risk)

Python .pyc files are trivially decompilable. Learn how attackers exploit bytecode & how to protect your secrets, logic, and CI/CD pipeline.
6 min read
what is cve in cyber security - cve security - cve in cyber security

CVE Security Under Pressure: Navigating Challenges and Strengthening Vulnerability Management in DevSecOps

CVE security still anchors vulnerability management, but the system underneath it is straining. 48,185 CVEs were published in 2025, NVD now enriches only the records that meet its criteria, and a growing share of real threats never receive a CVE at all. Here is what breaks, and what to prioritize on instead.
9 min read
application security audit - open source audit - open source audit software - open source software audit - open source security audit tools

How to Build an Application Security Audit Program That Works: A Practical Guide for DevSecOps

Build an audit-ready application security audit program using open source audit software, CI/CD controls, and real ISO/NIST-aligned evidence.
5 min read
terraform software -terraform security - terraform iac

Terraform Software: Key FAQs

Discover Terraform software, terraform security, and terraform iac best practices in this FAQ guide to build safe and reliable pipelines.
7 min read
mitre attack - mitre att&ck - MITRE attack framework - the mitre att&ck framework.

MITRE ATT&CK Framework Explained for Developers

Learn how attack surface management and external attack surface management work in DevSecOps. See why the MITRE ATT&CK framework matters.
8 min read
jumping shell - bin/bash - escape restricted shell

Jumping Shell: How Attackers Escape Restricted Shells to /bin/bash

Learn how jumping shell exploits let attackers escape restricted shell to /bin/bash, the risks they pose, and how to secure CI/CD pipelines!
3 min read
package-lock.json - package lock json - npm typosquatting

Package-Lock.json Typo: How It Can Hijack Your Build

A typo in package-lock.json can expose you to NPM typosquatting. Learn how those errors hijack builds and how to secure dependencies!
4 min read
Load More