Xygeni Blog

Must-Read Posts

SkillLeak, Browser Credential Theft via MCP Skill

SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Zero Trust SDLC

Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

ai inventory software

What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

DeviceDoor npm Package Shipping a Microsoft 365 Device-Code Phishing Framework

DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework

secure software supply chain, ai bom, mcp security

OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM

OWASP GLOBAL Appsec AI Security

AI Security at OWASP Global AppSec EU 2026: Meet Xygeni in Vienna

weak application security

Software Supply Chain

How Weak Application Security Creates Digital Privacy Risks

January 16, 2026

application control engine - application client container - aspm

ASPM

Application Control Engine vs Client Container in ASPM

January 7, 2026

Broken Access Control - Security Misconfiguration - Managed Object Browser

SDLC

Managed Object Browser and Broken Access Control

December 23, 2025

Open-Source Security

Why purl Matters More Than You Think

December 19, 2025

Risk Based Vulnerability Management- cyber resilience act - cisa known exploited vulnerabilities catalog

Open-Source Security

Risk Based Vulnerability Management and CRA

December 18, 2025

mcp server - model context protocol - mcp ai project

AI

MCP Server in AI: Key Concepts Explained

December 18, 2025

software supply chain security - open source supply chain attacks - AI and software security - AI Security

Software Supply Chain

AI Security and the Expanding Software Supply Chain Attack Surface

December 16, 2025

React2Shell - CVE-2025-55182 - RCE risk

Attacks Analysis

React2Shell: CVE-2025-55182 and the Next.js RCE Risk

December 5, 2025

slsa attestation - slsa framework - SLSA v1.2

Build Security

SLSA v1.2 : Updates to the SLSA Framework Explained

December 5, 2025

OWASP Top 10 2025 -owasp top ten - OWASP Top 10

SDLC

OWASP Top 10 2025 Explained for Developers

December 3, 2025

shai hulud - npm supply chain attack

Attacks Analysis

Shai-Hulud 2.0 NPM Supply Chain Attack

November 28, 2025

AI

AI for Coding Explained: 10 Simple Answers Developers Need

November 21, 2025