Xygeni Logo White
Start Free
Book a demo

Xygeni Blog

Must-Read Posts

sql substring_index - substring_index in sql - string functions in sql

The Hidden Security Pitfalls of SQL SUBSTRING_INDEX

Misused string functions in SQL can leak data or break tenant isolation in critical systems. Learn the hidden risks of sql substring_index!
7 min read
chmod 777 - linux permissions - backdoor attack

Chmod 777 Is Not a Fix: How a Misconfigured Script Became a Backdoor

Chmod 777 may fix errors fast but breaks Linux permissions, opening the door to backdoor attacks in CI/CD. Learn safer DevSecOps practices!
5 min read
OpenSSL s_client - ssl error - TLS security

OpenSSL s_client Showed My TLS Was Broken: Diagnosing SSL Errors in CI

Fix SSL errors fast with OpenSSL s_client. Learn how to diagnose TLS security issues in CI/CD, before they break builds!
5 min read
cybersecurity platform - unified cybersecurity platform - cybersecurity risk management platform​ - cybersecurity management platform​

From 10 Tools to One Cybersecurity Platform

Consolidate security with one unified cybersecurity platform. Xygeni replaces multiple tools to protect your SDLC from code to production.
8 min read
IaC security - infrastructure as code security - IaC cyber security

IaC Security: How to Build Strong Infrastructure as Code

Master IaC cyber security with proven infrastructure as code security practices. Prevent risks for Terraform, Kubernetes or CloudFormation.
8 min read
watering hole attacks - what is a watering hole attack

From Dev to Target: How Watering Hole Attacks Infiltrate Your Pipeline

Discover what is a watering hole attack and how watering hole attacks infiltrate trusted dev resources to compromise your CI/CD pipeline!
6 min read
namso gen - fake credit card generator - malware download

Namso gen and the Malware Behind Fake Generators

Namso gen and fake credit card generators are used to deliver malware. Learn how it spreads and how to stop it before it hits your SDLC.
5 min read
NPM SECURITY - npm packages - NPM install

Npm Security FAQs: Everything You’ve Ever Wondered

Get answers on npm security, npm install safety, and npm packages. Learn how to secure dependencies and avoid supply chain risks.
12 min read
package.json - package-lock.json - typosquatting

A Typo in package.json Let a Lookalike Package Compromise the Pipeline

A single typo in package.json and a hidden entry in package-lock.json can enable typosquatting & malware in your CI/CD. Learn how to stop it!
5 min read
request.get - input sanitization - flask security

Never trust a request.get() Without Sanitizing: How Input Kills Flask Security

Using request.get without input sanitization can break Flask security and open the door to RCE. Learn how to secure your apps now!
11 min read
printf - python user input - java printf

printf(user_input) Is Still Dangerous: How I Broke a Build with a Format

Avoid dangerous printf bugs. Learn how unvalidated Python user input and Java printf misuse can crash builds and expose vulnerabilities!
7 min read
deep packet inspection - definition dpi - attack surface management

Deep Packet Inspection Meets AppSec: Finding Risks You Can’t See in Code

Deep Packet Inspection Meets AppSec: definition dpi, attack surface management & all about finding risks you can’t see in code. Take a peek!
13 min read
Load More