Xygeni Blog

Must-Read Posts

RuntimeBroker npm Typosquat Plants Crypto Clipper

RuntimeBroker: an npm Typosquat Plants a 40-Chain Crypto-Clipper as a Cross-OS \”System Runtime Helper”\

AuditorTrap

AuditorTrap: A 22-Package Fake Crypto Security Guild on npm With Two Parallel Payloads

PhantomBot From Credential Theft to Botnet

PhantomBot: A Typosquat Campaign That Pivoted From Credential Theft to a Turnkey Botnet Kit

AWS Lambda npm Dependency Confusion Attack The 24712-pl Campaign

AWS Lambda npm Dependency Confusion Attack: The 24712-pl Campaign

alone5511 npm Dependency Confusion Attack

alone5511 npm Dependency Confusion Attack

AI Security Risks in DevSecOps

AI Security Risks in DevSecOps: Code, Pipelines, and Agents

dockerfile secrets - dockerfile secrets environment variables

Secrets Security

Dockerfile Secrets: Why Layers Keep Your Sensitive Data Forever

November 19, 2025

docker build args - build args docker - docker build build arg

Secrets Security

Docker Build Args: The Hidden Vector for Secret Leaks in Images

November 19, 2025

task.run c# - async programming - parallel execution

Code Security

Task.Run in C#: The Wrong Way to Parallelize Secure Code

November 18, 2025

path traversal attack - file upload vulnerability

Code Security

Path Traversal in File Uploads: How Developers Create Their Own Exploits

November 18, 2025

bepinex.configurationmanager

Code Security

BepInEx.ConfigurationManager: How Insecure Settings Expose Sensitive Data

November 17, 2025

hangfire .net - background job processing c#

Code Security

Hangfire .NET Jobs: How Background Tasks Create Hidden Vulnerabilities

November 17, 2025

c# httpclient - httpclient c# - c sharp httpclient

Code Security

C# HttpClient: Common Security Pitfalls and Safe Practices

November 14, 2025

c# regex - regex for c# - regex c#

Code Security

C# Regex DoS: When Patterns Become Attack Vectors

November 14, 2025

ilspy - what is decompile in assembly - dotnet decompiler

Code Security

ILSpy and .NET Decompiler Risks: What Your Assemblies Reveal

November 13, 2025

system.text.json - jsonserializer - system text json serialization

Code Security

System.Text.Json Defaults in .NET: When Convenience Opens Data Exposure

November 13, 2025

AI

MCP Security: Protecting the Model Context Protocol

November 12, 2025

Spring Boot security - Java Spring Boot - Spring Boot security best practices

Open-Source Security

Spring Boot Security FAQs

November 12, 2025