Xygeni Logo White
Start Free
Book a demo

Xygeni Blog

Must-Read Posts

AI Pentesting Tools

AI Pentesting Tools: What to Look For, and What Agentic Pentesting Actually Changes

AI pentesting tools are four different product shapes. What agentic pentesting changes, seven evaluation criteria, and what it cannot do.
8 min read
Malicious npm Packages

Malicious npm Packages: The Live List Nobody’s Watching Closely Enough

Malicious npm packages are published faster than registries remove them. What eight weeks of confirmed findings show & what stops them.
8 min read
What Is the Agentic SDLC

What Is the Agentic SDLC? How AI Agents Are Reshaping Every Phase

Agents now plan, code, review, ship and operate. What the agentic SDLC changes in every phase, and which controls quietly stop working.
9 min read
AI Pentesting

AI Pentesting: Testing AI Systems Like an Attacker Would

Your last pentest tested code. AI pentesting tests behaviour: hijacked prompts, abused tools, leaked data. What to test, and how often.
9 min read
The CWE Top 25

The CWE Top 25: What It Is and Why It’s Not the Same as the OWASP Top 10

One ranks weaknesses, the other ranks risks. What the CWE Top 25 measures, how it differs from OWASP Top 10, and when to use each.
10 min read
Agentic Coding

Agentic Coding: The Risks, the Best Practices, and 8 Lessons from Early Adopters

Agents now write, install and ship code. The real risks of agentic coding, the practices that contain them & 8 lessons learned the hard way.
10 min read
What Is AI Coding

What Is AI Coding? A Developer’s Guide to Working With, and Securing, AI-Generated Code

What is AI coding, how do AI tools work, and how do you keep AI-generated code secure? A practical guide for developers and teams.
10 min read
AI Governance Framework

Building an AI Governance Framework: A Practical Structure

A policy document alone isn't an AI governance framework. Here's the practical structure, inventory, evidence, and controls, that works.
10 min read
AI Security Company

What to Look for in an AI Security Company

AI security companies all claim the same things. Here's the checklist to actually evaluate one, from coverage to data sovereignty.
7 min read
API Security Best Practices

API Security Best Practices: A Developer’s Checklist

API security best practices developers actually need: a practical checklist covering API protection and API management, before deployment.
10 min read
Risky Business: Self-Deleting npm Packages Explained

Risky Business: The Anti-Proctoring Packages That Delete Themselves

Risky Business: packages that delete themselves within minutes. Xygeni tracked 16 npm packages, 3 payloads, one shared technique. Dive in!
12 min read
Types of Cyber Security

Types of Cyber Security: A Complete Overview

Check out a complete overview of the types of cyber security: network, application, cloud, endpoint, identity, IoT, AI & operational security
8 min read
Load More