|
Inside the AI Memories Security Teams Are Writing
|
Braden Riggs |
2026-05-06 |
1,191 |
--
|
|
Dynamically Resolve Dependencies for a Full Picture of Your Inventory
|
Katie Kent, Nabeel Saeed |
2026-05-07 |
797 |
--
|
|
TanStack Router Packages Hit by Mini Shai-Hulud TheBeautifulSandsOfTime Supply Chain Attack
|
-- |
2026-05-11 |
770 |
--
|
|
Children of Shai-Hulud: An Analysis of the The Evolution, Delivery and Spread of the TanStack Shai-Hulud Campaign
|
Katie Paxton-Fear |
2026-05-12 |
3,219 |
--
|
|
Operationalizing AI-Powered Detection
|
Jack Moxon, Erik Buchanan |
2026-05-13 |
1,080 |
--
|
|
Not Your IPC, but node-ipc: npm Hit Again with Supply Chain Attack (But This Time It's Not a Worm)
|
Katie Paxton-Fear, Diptendu Kar |
2026-05-14 |
524 |
--
|
|
Mini Shai-Hulud Resurfaces; Compromised Maintainer of antv, timeago, and size-sensor Packages Revives Worm Activity
|
Jayson DeLancey |
2026-05-18 |
635 |
--
|
|
Why Do Worms Work
|
Katie Paxton-Fear |
2026-05-19 |
2,067 |
--
|
|
Getting Ready for Mythos with Semgrep
|
Edwin Amador Artiles |
2026-05-19 |
1,146 |
--
|
|
The AI Hackathon Effect: Faster Builds, Better Demos, and Real Products
|
Cathy Polinsky |
2026-05-22 |
787 |
--
|
|
Security that Ships: The ROI of AppSec for Engineering Teams
|
Jayson DeLancey |
2026-05-27 |
1,555 |
--
|
|
28 Years Later: Some Things Changed. The Important Stuff Didn't.
|
Cris Thomas (Space Rogue) |
2026-05-28 |
1,291 |
--
|
|
Forking Shai-Hulud: RedHat npm Packages Are The Next Victim After GitHub Actions Compromise and Worm
|
Katie Paxton-Fear |
2026-06-01 |
633 |
--
|
|
Announcing Pyro Caml: A Continuous Profiler for OCaml
|
Austin Theriault |
2026-06-02 |
3,477 |
26
|
|
Miasma v2: Self-Spreading npm Worm Now Uses Malicious binding.gyp file and Compromises 57 Packages
|
Katie Paxton-Fear |
2026-06-04 |
711 |
--
|
|
How We Cut Semgrep’s Taint Analysis Time by 75%
|
Austin Theriault |
2026-06-05 |
2,583 |
3
|
|
Making Semgrep rip: How Ripgrep inspired us to shave hours off (some) scans
|
Ben Kettle |
2026-06-10 |
2,895 |
7
|
|
RIP post/preinstall scripts: An obituary for the npm feature only TeamPCP will miss
|
Katie Paxton-Fear |
2026-06-11 |
1,363 |
--
|
|
3.5x more true positives: How we benchmark AI-powered detection
|
Erik Buchanan, Shelley Wu, Pablo Estrada |
2026-06-12 |
1,421 |
--
|
|
We have Mythos at Home: GLM 5.2 beats Claude in our Cyber Benchmarks
|
Katie Paxton-Fear, Seth Jaksik, Brenden Noblitt, Erik Buchanan |
2026-06-22 |
2,117 |
1,113
|
|
Introducing Semgrep Guardian: Security for AI-Generated Code
|
Milan Williams |
2026-06-23 |
573 |
4
|
|
Black Hat USA 2026: A Space Rogue Survival Guide
|
Cris Thomas (Space Rogue) |
2026-06-25 |
1,546 |
--
|
|
AI-Native vs. AI-Washed: How to Tell the Difference in AppSec Tooling
|
Brandon Green |
2026-07-07 |
1,722 |
--
|
|
So it's your first time at Hacker Summer Camp, and you want to make the most of it
|
Katie Paxton-Fear |
2026-07-08 |
3,042 |
--
|
|
You Can't Reverse Engineer Your Way Out of the AI Supply Chain Problem
|
Isaac Evans, Cris Thomas (Space Rogue), Katie Paxton-Fear |
2026-07-10 |
822 |
4
|
|
Evaluating GPT-5.6 Luna, Terra, and Sol Against GPT-5.5 for AI Code Security
|
Brenden Noblitt, Erik Buchanan, Jayson DeLancey |
2026-07-13 |
1,068 |
4
|
|
Miasma v3 Hit 4 AsyncAPI Packages — Did NPM's Defenses Work, or Just Get Dodged?
|
Katie Paxton-Fear, Max Vonblankenburg |
2026-07-14 |
946 |
--
|
|
Grounded or Gamed? We Audited Our Own Cyber Benchmark
|
Brenden Noblitt |
2026-07-17 |
1,926 |
--
|
|
Comparing Open-Source AI Code Security Harnesses
|
Isaac Evans |
2026-07-20 |
1,985 |
--
|
|
Kimi K3's Code Security Results Look Competitive - Until You Look at Precision
|
Katie Paxton-Fear, Brenden Noblitt, Seth Jaksik |
2026-07-22 |
1,836 |
--
|
|
Summer of Semgrep: Everywhere You'll Find Us at Hacker Summer Camp 2026
|
Carlie Marvel |
2026-07-22 |
1,448 |
--
|
|
Introducing Semgrep Agentic Workflows: Automate Deep Vulnerability Hunting at Scale
|
Pablo Estrada |
2026-07-28 |
773 |
--
|
|
Crypto is Fine. The Code is Not.
|
Diptendu Kar |
2026-07-30 |
939 |
--
|
|
What Happens to Your AppSec Program When Going from Zero to 60k Lines of Code a Day
|
Jayson DeLancey |
2026-08-04 |
1,606 |
--
|
|
It’s not npm-ver yet: NPM worm Chaindrop hits 400+ packages including jaredwray, servicetitan, ornikar, qlik and nebula.js
|
Katie Paxton-Fear |
2026-08-04 |
2,822 |
--
|
|
Speedrunrunning SHA pinning for GitHub Actions org-wide
|
Leif Dreizler |
2026-08-12 |
3,727 |
8
|
|
GLM-5.3 delivers Opus 4.8-level cybersecurity results at a fraction of the cost
|
Pablo Estrada, Erik Buchanan, Seth Jaksik, Brenden Noblitt |
2026-08-14 |
823 |
--
|
|
Rust crates arrayref & append-only-vec compromised via malicious proc-macro1 dependency
|
Diptendu Kar |
2026-08-20 |
260 |
--
|
|
Hacker Summer Camp 2026: A Longitudinal Study of 2,295 Talks
|
Jayson DeLancey, Carlie Marvel |
2026-08-21 |
3,696 |
--
|
|
We benchmarked A LOT of models, here’s how they compare to Mythos
|
Isaac Evans, Katie Paxton-Fear, Brenden Noblitt, Seth Jaksik |
2026-08-25 |
1,612 |
--
|
|
Semgrep Multimodal Goes Beyond Authentication: What we learned from Comparing it with Mythos
|
Brenden Noblitt, Jaweed Metz, Seth Jaksik |
2026-08-27 |
1,907 |
--
|
|
Feeling the heat from Malicious Packages? Cool off with Cooldowns
|
Leif Dreizler |
2026-08-31 |
2,481 |
--
|
|
Shift Right? After 20 Years of Shift Left?
|
Cris Thomas (Space Rogue) |
2026-09-04 |
1,580 |
--
|
|
Meet the Semgrep Interns: Four Projects from Summer 2026
|
Amarin Phaosawasdi |
2026-09-11 |
1,349 |
--
|
|
The AI Ecosystem Has Worms Now: Inside the MemTensor Compromise
|
Katie Paxton-Fear |
2026-09-23 |
1,308 |
--
|
|
Introducing Malware Detection and Response Automation
|
Nabeel Saeed |
2026-09-24 |
795 |
--
|
|
What Application Security Actually Does All Day
|
Katie Paxton-Fear |
2026-09-25 |
1,996 |
--
|
|
Claude Opus 5.5 Writes Working Code but Only Half of It Is Secure
|
Katie Paxton-Fear |
2026-09-29 |
2,310 |
--
|
|
It’s Time to Rename Cybersecurity Awareness Month
|
Cris Thomas (Space Rogue) |
2026-10-02 |
1,316 |
1
|
|
MCP Gives Agents Tools. Hooks Give Security Control.
|
Cris Thomas (Space Rogue) |
2026-10-05 |
1,227 |
--
|
