Xygeni Blog

Must-Read Posts

RuntimeBroker npm Typosquat Plants Crypto Clipper

RuntimeBroker: an npm Typosquat Plants a 40-Chain Crypto-Clipper as a Cross-OS \”System Runtime Helper”\

AuditorTrap

AuditorTrap: A 22-Package Fake Crypto Security Guild on npm With Two Parallel Payloads

PhantomBot From Credential Theft to Botnet

PhantomBot: A Typosquat Campaign That Pivoted From Credential Theft to a Turnkey Botnet Kit

AWS Lambda npm Dependency Confusion Attack The 24712-pl Campaign

AWS Lambda npm Dependency Confusion Attack: The 24712-pl Campaign

alone5511 npm Dependency Confusion Attack

alone5511 npm Dependency Confusion Attack

AI Security Risks in DevSecOps

AI Security Risks in DevSecOps: Code, Pipelines, and Agents

Broken Access Control - Security Misconfiguration - Managed Object Browser

SDLC

Managed Object Browser and Broken Access Control

December 23, 2025

Open-Source Security

Why purl Matters More Than You Think

December 19, 2025

Risk Based Vulnerability Management- cyber resilience act - cisa known exploited vulnerabilities catalog

Open-Source Security

Risk Based Vulnerability Management and CRA

December 18, 2025

mcp server - model context protocol - mcp ai project

AI

MCP Server in AI: Key Concepts Explained

December 18, 2025

software supply chain security - open source supply chain attacks - AI and software security - AI Security

Software Supply Chain

AI Security and the Expanding Software Supply Chain Attack Surface

December 16, 2025

React2Shell - CVE-2025-55182 - RCE risk

Attacks Analysis

React2Shell: CVE-2025-55182 and the Next.js RCE Risk

December 5, 2025

slsa attestation - slsa framework - SLSA v1.2

Build Security

SLSA v1.2 : Updates to the SLSA Framework Explained

December 5, 2025

OWASP Top 10 2025 -owasp top ten - OWASP Top 10

SDLC

OWASP Top 10 2025 Explained for Developers

December 3, 2025

shai hulud - npm supply chain attack

Attacks Analysis

Shai-Hulud 2.0 NPM Supply Chain Attack

November 28, 2025

AI

AI for Coding Explained: 10 Simple Answers Developers Need

November 21, 2025

AI

Agentic AI: The Complete Guide for Developers, AI Engineers, and AppSec Teams

November 21, 2025

SDLC

Black Hat Europe 2025: Meet Xygeni at Booth 221

November 19, 2025