Xygeni Blog

Must-Read Posts

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

secure software supply chain, ai bom, mcp security

OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM

OWASP GLOBAL Appsec AI Security

AI Security at OWASP Global AppSec EU 2026: Meet Xygeni in Vienna

Shadow AI Security

AI

Shadow AI Security: All You Need to Know

March 6, 2026

npm Infostealer

Attacks Analysis

New npm Infostealer Discovery: Nyx Stealer Hijacks Discord Sessions

February 27, 2026

Xygeni Launches MCP Server for AI Security in the IDE

AI

Xygeni Launches MCP Server for AI Security in the IDE

February 26, 2026

Malicious npm Package

Attacks Analysis

Malicious npm Package in Baileys Fork (Skyzopedia Case)

February 25, 2026

Code Security

Mobile App Security with Swift and Kotlin SAST

February 20, 2026

allintextlogin filetypelog

Attacks Analysis

allintext:login filetype:log – How Exposed Logs Leak Credentials

February 18, 2026

vibe coding

AI

Vibe Coding Security: Why Traditional AppSec Breaks

February 13, 2026

Why We Built Known-Exploit Intelligence Fix What Attackers Actually Use

Open-Source Security

Known-Exploit Intelligence for Vulnerability Management

February 11, 2026

ASPM

DAST Meets ASPM: Closing the Gap Between Code and Runtime Exposure

February 4, 2026

AI

AI-Powered Malware Detection in SSCS

January 22, 2026

OWASP GenAI Security Project - generative AI security - gen AI security

AI

OWASP GenAI Security Project

January 20, 2026

Shai-Hulud 3.0 - npm Malware Worn - shai-hulud malware

Attacks Analysis

Shai-Hulud 3.0: npm Malware Worn

January 16, 2026