|
Semgrep Community Edition Fall Release 2025
|
Jaweed Metz, Milan Williams |
2025-11-06 |
535 |
--
|
|
Five Considerations When Building Cross-Platform Tools for Windows and macOS
|
Jayson DeLancey, Nat Mote |
2025-11-07 |
1,059 |
--
|
|
Boosting Security Scan Performance for Monorepos with Multicore Parallel Processing
|
Jayson DeLancey |
2025-11-11 |
1,114 |
--
|
|
Catching IDORs, Broken Authorization, and Other Logic Issues with Semgrep AI-Powered Detection
|
Jack Moxon |
2025-11-11 |
871 |
--
|
|
Security Regulations: From Scary Stories to Strategic Advantage
|
Katie Paxton-Fear |
2025-11-18 |
1,400 |
--
|
|
Secrets Story: The Prefixed Secrets That Tried%20to%2BGet\nAway
|
Lewis Ardern |
2025-11-19 |
2,502 |
--
|
|
Sha1-Hulud: The Second Coming of the NPM Worm is Digging For Secrets
|
Katie Paxton-Fear, Pieter De Cremer |
2025-11-24 |
4,113 |
--
|
|
What a Hackathon Reveals About AI Agent Trends to Expect in 2026
|
Jayson DeLancey, Braden Riggs |
2025-11-25 |
1,340 |
--
|
|
Detect Open Source Malware Attacks with Semgrep Supply Chain
|
Nabeel Saeed |
2025-12-02 |
1,709 |
--
|
|
Protect Against Open Source Malware Attacks with Semgrep Supply Chain
|
Nabeel Saeed |
2025-12-02 |
1,709 |
--
|
|
Remote Code Execution Security Bug in React Server Components Patched
|
Jayson DeLancey, Diptendu Kar, Katie Paxton-Fear |
2025-12-03 |
629 |
--
|
|
New React2Shell Offspring Patched: React Server Components (DoS) and Source Code Exposure
|
Jayson DeLancey, Lewis Ardern, Kurt Boberg, Katie Paxton-Fear |
2025-12-12 |
619 |
--
|
|
What You Should Know About Dependency Reachability in SCA
|
Nabeel Saeed |
2025-12-15 |
1,143 |
--
|
|
From Gatekeepers to Guardrails: Automating Your PCI DSS v4.0.1 Strategy
|
Braden Riggs |
2025-12-16 |
1,978 |
--
|
|
A Security Engineer's Guide to the A2A Protocol
|
Kurt Boberg |
2025-12-17 |
1,658 |
--
|
|
Respond to Malware Incidents Faster with Advisory Impact Analysis in Semgrep Supply Chain
|
Nick Hakmiller, Nabeel Saeed |
2025-12-19 |
590 |
--
|
|
Semgrep × Cursor Hooks: Making Security Reliable for Agents
|
Chushi Li, Milan Williams |
2025-12-22 |
461 |
--
|
|
Choosing AI AppSec Tools: 9 Deciding Factors
|
Jayson DeLancey |
2026-01-09 |
1,546 |
--
|
|
Your Window of Exposure is the Attacker's Window of Opportunity
|
Diptendu Kar, Derian Stenglein |
2026-01-12 |
1,232 |
--
|
|
AI Can Do More Than Build Web Apps: What Hardware Hacking Teaches Us About LLM Capabilities
|
Katie Paxton-Fear |
2026-01-20 |
1,236 |
--
|
|
New Sandbox Escape Affecting Popular nodejs Sandbox library vm2
|
Katie Paxton-Fear, Kurt Boberg |
2026-01-27 |
948 |
5
|
|
Security Like It's 1977: Capabilities for the Modern Agentic Web
|
Kurt Boberg |
2026-01-28 |
2,057 |
--
|
|
OWASP Top 10 2025: What's New
|
Milan Williams |
2026-02-04 |
428 |
--
|
|
OpenClaw Security Engineer's Cheat Sheet
|
Kurt Boberg |
2026-02-10 |
2,383 |
--
|
|
Open Source Security: Chaos, Collaboration, and the Cost of “Free”
|
Katie Paxton-Fear |
2026-02-12 |
1,193 |
--
|
|
Semgrep x Cursor: Introducing Cursor Plugins
|
Milan Williams |
2026-03-11 |
490 |
--
|
|
Accelerate and Automate Remediation with Semgrep Autofix
|
Nabeel Saeed, Braden Riggs |
2026-03-16 |
662 |
--
|
|
Introducing Semgrep Custom Workflows
|
Vivek Khimani, Braden Riggs |
2026-03-18 |
1,265 |
--
|
|
Attackers Can't Have All the Advantage: Introducing Semgrep Multimodal
|
Pablo Estrada |
2026-03-19 |
659 |
--
|
|
Will there be more security engineers in the future, or fewer?
|
Isaac Evans |
2026-03-19 |
974 |
--
|
|
Hackers Supply Chain Attack Moves From npm to PyPI as Trivy Breach Extends into LiteLLM Package
|
Katie Paxton-Fear |
2026-03-24 |
2,543 |
--
|
|
Security Companies Under Attack: Defense in the Agentic Era
|
Kurt Boberg |
2026-03-26 |
744 |
--
|
|
Client SDKs Like The Telnyx Python Package Are a Supply Chain Blind Spot
|
Jayson DeLancey |
2026-03-27 |
975 |
--
|
|
Axios Supply Chain Incident: Indicators of Compromise
|
Lewis Ardern, Pieter De Cremer, Jayson DeLancey |
2026-03-31 |
893 |
--
|
|
The best free, open-source supply-chain security tool? The lockfile (updated 2026)
|
Isaac Evans |
2026-03-31 |
1,743 |
--
|
|
Preventing Vulnerable Code From Merging Without Blocking Developers
|
Braden Riggs |
2026-04-02 |
998 |
--
|
|
Codebase-Aware Reachability Analysis Coverage for Rust
|
Max Vonblankenburg, Katie Kent |
2026-04-03 |
1,264 |
--
|
|
Security Should Be the Path of Least Resistance
|
Cris Thomas (Space Rogue) |
2026-04-13 |
1,137 |
--
|
|
Semgrep chosen to be part of OpenAI’s Trusted Access for Cyber Program
|
Pablo Estrada |
2026-04-17 |
420 |
--
|
|
Mythos & Semgrep
|
Isaac Evans |
2026-04-17 |
745 |
--
|
|
Needles and haystacks: Can open-source & flagship models do what Mythos did?
|
Kurt Boberg |
2026-04-17 |
1,602 |
--
|
|
Mythos: Bad Takes, Facts, and Fear
|
Isaac Evans |
2026-04-20 |
1,868 |
--
|
|
Security Advisory: $foo compromised on $packagemanager
|
Jayson DeLancey, Cris Thomas (Space Rogue) |
2026-04-22 |
703 |
--
|
|
Attackers Are Still Coming for Security Companies. Here's Where We Stand.
|
Katie Paxton-Fear |
2026-04-23 |
1,529 |
--
|
|
How-to Write Skills That Make Your AI-Generated Code More Secure
|
Jayson DeLancey |
2026-04-28 |
2,204 |
--
|
|
NIST No Longer Enriching CVEs, Signaling Industry-Wide Shift Away from NVD.
|
Nabeel Saeed |
2026-04-29 |
616 |
--
|
|
SAP Cloud Build Tool Packaged A Mini Shai-Hulud Malicious Dependency That Uses Bun
|
-- |
2026-04-29 |
411 |
--
|
|
Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library
|
-- |
2026-04-30 |
1,127 |
465
|
|
Malicious Intercom PHP Package Spreads Mini Shai-Hulud Attack to Packagist via Composer Plugin
|
-- |
2026-04-30 |
723 |
4
|
|
AppSec in Pole Position: A Week of Customers, Conversations, and Code Security across EMEA
|
Jaweed Metz |
2026-05-05 |
1,086 |
--
|
