Xygeni Blog

XZ Backdoor Attack

XZ Backdoor: “That was a close one”

The XZ Utils backdoor (CVE-2024-3094) nearly compromised SSH worldwide. See the timeline, who's behind it & why traces still surface in 2025.
software-attestation-build-attestation

Software Attestation in Build Security – An Introduction

Learn how Software Attestation and Build Attestation strengthen security and ensure compliance in software development in our post!
9 min read
NIST CSF Version 2.0

National Institute of Standards and Technology Releases Landmark Update to Cybersecurity Framework

NIST released a major update to its Cybersecurity Framework (CSF), meant to help organizations better manage cybersecurity risk. Read Now!
3 min read
A Deep Dive into Software Security with Xygeni on Neuco's Podcast

A Deep Dive into Software Security with Xygeni on Neuco’s Podcast

Explore the intricate world of software security, focusing on the pressing challenge of supply chain attacks in the DevOps realm. Take a look
3 min read
Build Security Essentials: Strengthening Your Software from the Ground Up

Build Security Essentials: Strengthening Your Software from the Ground Up

Build security is essential for crafting secure software: it is a proactive defense against potential vulnerabilities. Learn all about it!
8 min read
The Essential Guide to Enhancing Your Software's Security Posture

The Essential Guide to Enhancing Your Software’s Security Posture

Security posture is a comprehensive term that encapsulates an organization’s overall cybersecurity strength and resilience. Learn more!
6 min read
open-source-software-security-tools-OSS-Security

Understanding the Landscape of Open-Source Software Security

The landscape of Open-Source Software Security is a study in contrasts. Take a quick peek at our post and learn all about OSS Security!
6 min read
devops secrets management - secrets detection

Unlocking Security: DevOps Secrets Management Best Practices

Learn all about DevOps secrets management & detection to secure tokens, keys & credentials, without slowing your pipeline. Read it now!
6 min read
SLSA framework - Supply-chain Levels for Software

Master SLSA Framework: Safeguard Your Software Supply Chain

Secure your software supply chain with the SLSA framework. Xygeni makes Supply-chain Levels for Software compliance easy and scalable.
8 min read
CI/CD Security Tools - CI/CD challenges

CI/CD Security: Overcoming CI/CD Challenges and Common Pitfalls

Implementing CI/CD Security Tools & best practices is the cornerstone of modern Software Development. Overcome CI/CD Challenges easily!
5 min read
CICD-Pipelines

A Deep Dive into CI/CD Pipelines Vulnerabilities (III): Artifact Poisoning and Code Injection

This post deep dives into some other CI/CD pipeline vulnerabilities such as Artifact Poisoning and Code Injection. Don't miss out!
Implementing CI/CD Best Practices for Success

CI/CD Best Practices: Transforming Software Development

CI/CD practices transform the way development teams squash bugs, improve software quality, and speed up the delivery of updates,... Read More
12 min read