|
The AI Hackathon Effect: Faster Builds, Better Demos, and Real Products
|
Cathy Polinsky |
2026-05-22 |
787 |
--
|
|
Why Do Worms Work
|
Katie Paxton-Fear |
2026-05-19 |
2,067 |
--
|
|
Getting Ready for Mythos with Semgrep
|
Edwin Amador Artiles |
2026-05-19 |
1,146 |
--
|
|
Mini Shai-Hulud Resurfaces; Compromised Maintainer of antv, timeago, and size-sensor Packages Revives Worm Activity
|
Jayson DeLancey |
2026-05-18 |
635 |
--
|
|
Not Your IPC, but node-ipc: npm Hit Again with Supply Chain Attack (But This Time It's Not a Worm)
|
Katie Paxton-Fear, Diptendu Kar |
2026-05-14 |
524 |
--
|
|
Operationalizing AI-Powered Detection
|
Jack Moxon, Erik Buchanan |
2026-05-13 |
1,080 |
--
|
|
Children of Shai-Hulud: An Analysis of the The Evolution, Delivery and Spread of the TanStack Shai-Hulud Campaign
|
Katie Paxton-Fear |
2026-05-12 |
3,219 |
--
|
|
TanStack Router Packages Hit by Mini Shai-Hulud TheBeautifulSandsOfTime Supply Chain Attack
|
-- |
2026-05-11 |
770 |
--
|
|
Dynamically Resolve Dependencies for a Full Picture of Your Inventory
|
Katie Kent, Nabeel Saeed |
2026-05-07 |
797 |
--
|
|
Inside the AI Memories Security Teams Are Writing
|
Braden Riggs |
2026-05-06 |
1,191 |
--
|
|
AppSec in Pole Position: A Week of Customers, Conversations, and Code Security across EMEA
|
Jaweed Metz |
2026-05-05 |
1,086 |
--
|
|
Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library
|
-- |
2026-04-30 |
1,127 |
465
|
|
Malicious Intercom PHP Package Spreads Mini Shai-Hulud Attack to Packagist via Composer Plugin
|
-- |
2026-04-30 |
723 |
4
|
|
NIST No Longer Enriching CVEs, Signaling Industry-Wide Shift Away from NVD.
|
Nabeel Saeed |
2026-04-29 |
616 |
--
|
|
SAP Cloud Build Tool Packaged A Mini Shai-Hulud Malicious Dependency That Uses Bun
|
-- |
2026-04-29 |
411 |
--
|
|
How-to Write Skills That Make Your AI-Generated Code More Secure
|
Jayson DeLancey |
2026-04-28 |
2,204 |
--
|
|
Attackers Are Still Coming for Security Companies. Here's Where We Stand.
|
Katie Paxton-Fear |
2026-04-23 |
1,529 |
--
|
|
Security Advisory: $foo compromised on $packagemanager
|
Jayson DeLancey, Cris Thomas (Space Rogue) |
2026-04-22 |
703 |
--
|
|
Mythos: Bad Takes, Facts, and Fear
|
Isaac Evans |
2026-04-20 |
1,868 |
--
|
|
Semgrep chosen to be part of OpenAI’s Trusted Access for Cyber Program
|
Pablo Estrada |
2026-04-17 |
420 |
--
|
|
Mythos & Semgrep
|
Isaac Evans |
2026-04-17 |
745 |
--
|
|
Needles and haystacks: Can open-source & flagship models do what Mythos did?
|
Kurt Boberg |
2026-04-17 |
1,602 |
--
|
|
Security Should Be the Path of Least Resistance
|
Cris Thomas (Space Rogue) |
2026-04-13 |
1,137 |
--
|
|
Codebase-Aware Reachability Analysis Coverage for Rust
|
Max Vonblankenburg, Katie Kent |
2026-04-03 |
1,264 |
--
|
|
Preventing Vulnerable Code From Merging Without Blocking Developers
|
Braden Riggs |
2026-04-02 |
998 |
--
|
|
Axios Supply Chain Incident: Indicators of Compromise
|
Lewis Ardern, Pieter De Cremer, Jayson DeLancey |
2026-03-31 |
893 |
--
|
|
The best free, open-source supply-chain security tool? The lockfile (updated 2026)
|
Isaac Evans |
2026-03-31 |
1,743 |
--
|
|
Client SDKs Like The Telnyx Python Package Are a Supply Chain Blind Spot
|
Jayson DeLancey |
2026-03-27 |
975 |
--
|
|
Security Companies Under Attack: Defense in the Agentic Era
|
Kurt Boberg |
2026-03-26 |
744 |
--
|
|
Hackers Supply Chain Attack Moves From npm to PyPI as Trivy Breach Extends into LiteLLM Package
|
Katie Paxton-Fear |
2026-03-24 |
2,543 |
--
|
|
Attackers Can't Have All the Advantage: Introducing Semgrep Multimodal
|
Pablo Estrada |
2026-03-19 |
659 |
--
|
|
Will there be more security engineers in the future, or fewer?
|
Isaac Evans |
2026-03-19 |
974 |
--
|
|
Introducing Semgrep Custom Workflows
|
Vivek Khimani, Braden Riggs |
2026-03-18 |
1,265 |
--
|
|
Accelerate and Automate Remediation with Semgrep Autofix
|
Nabeel Saeed, Braden Riggs |
2026-03-16 |
662 |
--
|
|
Semgrep x Cursor: Introducing Cursor Plugins
|
Milan Williams |
2026-03-11 |
490 |
--
|
|
Open Source Security: Chaos, Collaboration, and the Cost of “Free”
|
Katie Paxton-Fear |
2026-02-12 |
1,193 |
--
|
|
OpenClaw Security Engineer's Cheat Sheet
|
Kurt Boberg |
2026-02-10 |
2,383 |
--
|
|
OWASP Top 10 2025: What's New
|
Milan Williams |
2026-02-04 |
428 |
--
|
|
Security Like It's 1977: Capabilities for the Modern Agentic Web
|
Kurt Boberg |
2026-01-28 |
2,057 |
--
|
|
New Sandbox Escape Affecting Popular nodejs Sandbox library vm2
|
Katie Paxton-Fear, Kurt Boberg |
2026-01-27 |
948 |
5
|
|
AI Can Do More Than Build Web Apps: What Hardware Hacking Teaches Us About LLM Capabilities
|
Katie Paxton-Fear |
2026-01-20 |
1,236 |
--
|
|
Your Window of Exposure is the Attacker's Window of Opportunity
|
Diptendu Kar, Derian Stenglein |
2026-01-12 |
1,232 |
--
|
|
Choosing AI AppSec Tools: 9 Deciding Factors
|
Jayson DeLancey |
2026-01-09 |
1,546 |
--
|
|
Semgrep × Cursor Hooks: Making Security Reliable for Agents
|
Chushi Li, Milan Williams |
2025-12-22 |
461 |
--
|
|
Respond to Malware Incidents Faster with Advisory Impact Analysis in Semgrep Supply Chain
|
Nick Hakmiller, Nabeel Saeed |
2025-12-19 |
590 |
--
|
|
A Security Engineer's Guide to the A2A Protocol
|
Kurt Boberg |
2025-12-17 |
1,658 |
--
|
|
From Gatekeepers to Guardrails: Automating Your PCI DSS v4.0.1 Strategy
|
Braden Riggs |
2025-12-16 |
1,978 |
--
|
|
What You Should Know About Dependency Reachability in SCA
|
Nabeel Saeed |
2025-12-15 |
1,143 |
--
|
|
New React2Shell Offspring Patched: React Server Components (DoS) and Source Code Exposure
|
Jayson DeLancey, Lewis Ardern, Kurt Boberg, Katie Paxton-Fear |
2025-12-12 |
619 |
--
|
|
Remote Code Execution Security Bug in React Server Components Patched
|
Jayson DeLancey, Diptendu Kar, Katie Paxton-Fear |
2025-12-03 |
629 |
--
|
