Xygeni Blog

Must-Read Posts

GhostTracker: npm Trojan Rebranded in 74 Minutes — Same C2

GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

secure software supply chain, ai bom, mcp security

OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM

exploitability-what-is-exploit-in-security-zero day-security-exploits

Open-Source Security

Exploitability & Zero-Day Threats: Stay Secure

March 5, 2025

Infrastructure as Code Security - iac tools - iac security scanning

IaC

Infrastructure as Code Security – Introduction

March 3, 2025

Application-Security-Testing-Types-of-Application-Security-Testing-best-practices-in-security-testing-for-software-development

ASPM

Application Security Testing: Best Practices and Types

February 28, 2025

how-to-prioritize-vulnerability-remediation-vulnerability-prioritization

Code Security

How to Prioritize Vulnerability Remediation

February 25, 2025

Code-Scanning-code-checker-code-security

Code Security

Code Scanning for Modern AI-Driven SDLCs

February 24, 2025

application-security-manager-application-security-management-Application-Security-Posture-Management

ASPM

Application Security Manager Guide to ASPM

February 21, 2025

reachability analysis - Vulnerability Prioritization - reachability analyzer

Open-Source Security

Reachability Analysis: Smarter Vulnerability Prioritization

February 14, 2025

cve-2023-50164-exploit

Open-Source Security

Understanding CVE-2023-50164: A Critical Apache Struts Vulnerability

February 13, 2025

indicators of a malicious code attack

Anomaly Detection

Indicators of a Malicious Code Attack

February 13, 2025

security-and-privacy-workflows-security-workflow-automation-secure-workflow-application-security-workflow

ASPM

Security and Privacy Workflows That Work

February 12, 2025

reason-why-security-vulnerabilities-in-software-occur-security-vulnerability

Open-Source Security

Reason Why Security Vulnerabilities in Software Occur

February 7, 2025

cybersecurity-risk-assessment-services-cybersecurity-risk-assessment-tool-risk-assessment-cybersecurity

Open-Source Security

Cybersecurity Risk Assessment: A Developer’s Guide

February 7, 2025