Xygeni Logo White
Start Free
Book a demo

Xygeni Blog

Must-Read Posts

terraform software -terraform security - terraform iac

Terraform Software: Key FAQs

Discover Terraform software, terraform security, and terraform iac best practices in this FAQ guide to build safe and reliable pipelines.
7 min read
mitre attack - mitre att&ck - MITRE attack framework - the mitre att&ck framework.

MITRE ATT&CK Framework Explained for Developers

Learn how attack surface management and external attack surface management work in DevSecOps. See why the MITRE ATT&CK framework matters.
8 min read
jumping shell - bin/bash - escape restricted shell

Jumping Shell: How Attackers Escape Restricted Shells to /bin/bash

Learn how jumping shell exploits let attackers escape restricted shell to /bin/bash, the risks they pose, and how to secure CI/CD pipelines!
3 min read
package-lock.json - package lock json - npm typosquatting

Package-Lock.json Typo: How It Can Hijack Your Build

A typo in package-lock.json can expose you to NPM typosquatting. Learn how those errors hijack builds and how to secure dependencies!
4 min read
python try catch - try catch python - try catch block

Python Try Catch Blocks: When Error Handling Becomes a Risk

How Python try catch blocks work, when try catch Python patterns turn risky & best practices to secure your code with safe error handling!
5 min read
docker-compose.yml - docker-compose secrets

Why Docker-compose.yml Is a Security Risk Surface?

iscover hidden risks in your docker-compose.yml. Learn how to detect and manage docker-compose secrets before they leak into your CI/CD.D
3 min read
JavaScript Obfuscator - JavaScript deobfuscator - JavaScript malware

Why JavaScript Obfuscator Tools Are Abused by Attackers (And How to Detect Them)

Learn how JavaScript Obfuscator tools are misused to hide JavaScript malware, and how to detect threats before they reach production!
4 min read
attack surface management - attack surface -external attack surface management

Attack Surface Management in DevSecOps

Learn attack surface management in DevSecOps. Go beyond external attack surface management to cut risks in code, pipelines, and dependencies.
6 min read
CISA SBOM - SBOM Minimum Elements - SBOM standards - software risk management

CISA SBOM 2025: Updates, Standards, and Compliance

CISA SBOM Minimum Elements 2025: key updates, SBOM standards, and how to align with software risk management.
1 min read
AI Automated Vulnerability Remediation - code autofix - application security automation - automated application security testing

AI Automated Vulnerability Remediation: Black Hat Replay

AI Automated Vulnerability Remediation with code autofix, application security automation, and automated application security testing.
5 min read
spoofing attack - spoofing definition - what type of attack relies on spoofing

Spoofing Definition for Developers: What You Need to Know About These Attacks

Learn the spoofing definition, how an attack works, and what type of attack relies on spoofing to protect your code and pipelines in our post
4 min read
rootkit detection - code integrity

Rootkits Aren’t Just for Sysadmins Anymore: They Live in Repos Too

Discover modern rootkit detection strategies and protect code integrity in your repos, pipelines, and dependencies before threats go live!
5 min read
Load More