Xygeni Blog

Must-Read Posts

GhostTracker: npm Trojan Rebranded in 74 Minutes — Same C2

GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

secure software supply chain, ai bom, mcp security

OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM

Auto Remediation for Modern DevSecOps

Code Security

Auto Remediation for Modern DevSecOps: Fix Fast

July 4, 2025

Software Supply Chain Attacks 2025 - malicious packages - malicious python packages - malicious npm packages

Open-Source Security

A Closer Look at Software Supply Chain Attacks 2025: PyPI & npm Campaigns Compared

July 3, 2025

sca and sbom - sca vs sbom - sbom vs SCA - sca sbom -

Open-Source Security

SCA vs SBOM: What’s the Difference and Why You Need Both

July 2, 2025

developer prevent hacking - what are some practices to prevent hacking- how to prevent hacking

Code Security

How can a Developer Prevent Hacking? Start With SAST and SCA

June 25, 2025

open source software vulnerability scanner - vulnerability scanner open source - open source vulnerability scanner software used in cybersecurity

Code Security

Open Source Vulnerability Scanner: Are They Enough?

June 17, 2025

OWASP AppSec - OWASP Global AppSec - auto remediation

Code Security

OWASP AppSec 2025: Key Takeaways, Auto Remediation with AI, and What’s Coming Next

June 17, 2025

governance risk and compliance software solutions - data governance software - what is grc

SDLC

Governance Risk and Compliance Software, Without the Headache

June 10, 2025

Cybersecurity for Software Applications - cybersecurity software - cybersecurity vs software engineering

SDLC

Cybersecurity for Software Applications: A DevOps-First Look

June 10, 2025

How to Detect Malware - malware detection service - malware detection engine

CI CD Security

How to Detect Malware in Your CI/CD Pipeline Before It Reaches Production

May 30, 2025

ai-powered static application security testing - AI SAST - AI Code Security

AI

AI SAST with AutoFix for DevOps Teams

May 30, 2025

which SBOM platform is best for Software Supply Chain - SBOM management platform

SDLC

Which SBOM Platform Is Best for Software Supply Chain Security?

May 30, 2025

application security tools - application security testing tools - AppSec Tools

ASPM

Application Security Tools That Actually Fit Your DevOps

May 21, 2025