Xygeni Blog

package.json - package-lock.json - typosquatting

A Typo in package.json Let a Lookalike Package Compromise the Pipeline

A single typo in package.json and a hidden entry in package-lock.json can enable typosquatting & malware in your CI/CD. Learn how to stop it!
request.get - input sanitization - flask security

Never trust a request.get() Without Sanitizing: How Input Kills Flask Security

Using request.get without input sanitization can break Flask security and open the door to RCE. Learn how to secure your apps now!
printf - python user input - java printf

printf(user_input) Is Still Dangerous: How I Broke a Build with a Format

Avoid dangerous printf bugs. Learn how unvalidated Python user input and Java printf misuse can crash builds and expose vulnerabilities!
deep packet inspection - definition dpi - attack surface management

Deep Packet Inspection Meets AppSec: Finding Risks You Can’t See in Code

Deep Packet Inspection Meets AppSec: definition dpi, attack surface management & all about finding risks you can’t see in code. Take a peek!
Online Cyber Security - DevSecOps Automation of Pipelines

Online Cyber Security: DevSecOps Automation of Pipelines for Early Warning Detection

Take a look at the post Online Cyber Security: DevSecOps Automation of Pipelines and learn what to do for Early Warning Detection!
6 min read
network infrastructure, network security - secure network design - what is network security

Why Network Infrastructure Still Matters in Secure Software Design?

Do you know why Network Infrastructure still matters in secure network design? Learn all about what is network security and more!
format string bug -format string vulnerability - memory corruption

How a Simple Format String Bug Can Lead to Memory Corruption (and How to Spot It in Your Code)

Learn how a simple format string bug can lead to memory corruption and how to spot it in your code in our blog post!
source code leakage - intellectual property protection - source code leakage

How to Stop Source Code Leakage Before It Becomes an Intellectual Property Disaster

Learn how to stop source code leakage before it becomes a disaster. Learn all about intellectual property protection now!
mandatory access control - mac access control - access control policy

What Access Control Policy Do You Need? Let’s Break It Down

Learn how mandatory access control (MAC access control) works and why a strong access control policy is key to securing sensitive data.
security misconfiguration vulnerability

Security Misconfiguration: The Silent Risk in Your Stack

Fix security misconfiguration vulnerability fast. Prevent OWASP security misconfiguration, secure containers, and protect CI/CD pipelines.
6 min read
stripchar - input sanitization -parameterized queries

Why Stripchar Didn’t Block That Injection Attack

Why input sanitization with stripchar fails. Use parameterized queries to prevent injection and secure your code the right way.
7 min read
CTF token - invalid csrf token - google ctf

CTF Tokens, CSRF Mistakes, and Leaked Secrets

Left a CTF token in your code? Learn how invalid CSRF tokens, Google CTF leftovers & leaked secrets expose your app before it even goes live!