Xygeni Logo White
Start Free
Book a demo

Xygeni Blog

Must-Read Posts

types of cyber threats

Cyber Threats Explained: The Main Types Security Teams Should Know

Dive in to discover the main types of cyber threats security teams face today: malware, secrets leakage, supply chain and AI code attacks.
7 min read
npm Package Security

npm Package Security: What Changes When Your AI Agent Runs the Install

AI agents now run npm install on their own. See how MEW and Shield secure npm package security. Meet Xygeni at German OWASP Day 2026.
7 min read
AI Security Posture Management

AI Security Posture Management: Why Discovery Alone Won’t Secure AI-Generated Code

AI-generated code introduces vulnerabilities at scale. See how AI Security Posture Management fixes risk. Meet Xygeni at OWASP Portugal.
8 min read
developer security

Developer Security Adoption: Why Tools Sit Unused

Developer security adoption fails for predictable reasons. Here's why developers ignore the tools you bought them & what they trust.
6 min read
Vulnerability Prioritization

Vulnerability Prioritization Is Broken: Why Severity Score Alone Gets You Fixing the Wrong Thing First

Vulnerability prioritization built on severity alone fixes the wrong thing first. Here's what belongs in the ranking. Dive in!
6 min read
npm worm playbook

The npm Worm Playbook: Same Attack, Three Times in Eight Months

What is an npm worm? Inside the biggest npm worm incidents, the pattern that repeats, and the cooldown window most defenses still miss.
8 min read
AI Security

AI Security: The Files Nobody Reviews Are Now Your Biggest Attack Surface

AI security: discover every AI asset in your code, catch prompt injection and poisoned skills, and export an AI-BOM before attackers do.
9 min read
Code Quality Check vs. Code Security Check

Code Quality Check vs. Code Security Check: What’s the Difference?

Code quality checks and code security checks measure different things. See now what each catches, and how to run both from one platform.
8 min read
Vibe Coding Security

Vibe Coding Security: What Happens When “It Works” Replaces “I Reviewed It”

Vibe coding security is the gap most AppSec tools miss. "It works" isn't "it's safe." See the real risks before they ship to production.
8 min read
Xygeni AI Shield

Xygeni AI Shield: Stop AI-Generated Malicious Packages

AI tools now write and publish malicious packages in minutes. See how Xygeni AI Shield blocks them before they execute. Free plan available.
8 min read
JavacDoor, Maven Malware That Runs at Compile Time

JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

A Maven jar with zero install hooks and zero imports still ran a live C2 payload, just by sitting on the compiler's path. Dive in!
10 min read
When AI Agents Install Dependencies

AI Agent Supply Chain Security: What Stops a Bad Dependency When AI Agents Install It

AI agent supply chain security is failing as agents install packages and edit pipelines unsupervised. Here's what actually stands in the way.
9 min read
Load More