Xygeni Blog

Cloud Security Tips

20 Cloud Security Tips for Modern DevSecOps Teams

Cloud security tips for DevSecOps teams to protect apps, secrets, IaC, CI/CD pipelines, and supply chains.
12 min read
MTTR

MTTR in AppSec: How to Reduce it with AI & Automation

Stop the backlog. Reduce MTTR with AI-driven remediation, automate fixes, and move from detection to resolution in minutes.
5 min read
inject environment variables to the build process

Inject Environment Variables to the Build Process Securely

Inject environment variables to the build process securely. Learn how to prevent leaks and protect secrets in CI/CD pipelines.
7 min read
Axios npm Compromise

Axios npm Compromise: What Happened, Who Is Affected, and How to Prevent It

Axios npm compromise explained. Discover how attackers access secrets and how to prevent runtime data leaks.
8 min read
Global InfoSec Awards

Xygeni Wins Two Global InfoSec Awards for ASPM and GenAI Application Security

Xygeni wins two Global InfoSec Awards for ASPM and GenAI Application Security with DevAI and code-to-cloud risk prioritization.
7 min read
ReDoS

ReDoS Explained: What Regular Expression DoS Is and How to Prevent It

ReDoS attacks can crash your apps. Discover how vulnerable regex patterns work and how to detect and prevent them with modern AppSec practices.
9 min read
Autofix in AppSec

Autofix in AppSec: How to Remediate Vulnerabilities Without Breaking Builds

Autofix in AppSec helps remediate vulnerabilities automatically while avoiding breaking changes. Learn how to fix issues safely in DevSecOps.
15 min read
LiteLLM Supply Chain Attack

LiteLLM Attack: How Xygeni Stops Secret Exposure Fast

LiteLLM attack exposed critical secrets. See how Xygeni detects, verifies, and revokes credentials before attackers use them.
7 min read
LiteLLM Supply Chain Attack

LiteLLM Supply Chain Attack: How TeamPCP Backdoored AI Infrastructure

Explore the security breach of LiteLLM, affecting millions of users with multi-stage payloads and devastating consequences.
AI Coding Assistant Security

AI Coding Assistant Security: How to Prevent Vulnerabilities in AI-Generated Code

AI coding assistant security guide: prevent vulnerabilities in AI-generated code, detect risks early, and secure your pipelines in real time.
7 min read
How to Implement AI Remediation

How to Implement AI Remediation in DevSecOps

Explore how AI remediation enhances DevSecOps by prioritizing security fixes to reduce risk effectively and efficiently.
7 min read
Shadow AI Security

Shadow AI Security: All You Need to Know

Shadow AI security: OpenClaw takeovers, skills supply chain risk, and DevSecOps fixes you can ship this quarter.
9 min read