It's been a busy week for supply chain incidents. Yesterday the PHP Foundation disclosed PHP2Shell, a vulnerability that has existed in PHP for over a decade. We broke down how that worked in our post ...
We want using Semgrep to be like hiring an AppSec engineer to do the boring work. To be the best platform for code scanning, Semgrep must go beyond finding issues. It must autonomously remove noise, ...
None of the three Grok 4.6 variants beat the frontier leaders, but they do perform similarly to Kimi K3 and older Claude Opus models at a fraction of the price. Grok 4.6 Exacto’s 35.5% F1 is very ...
Finding vulnerabilities is not the problem anymore. Every code scan, pipeline, and dashboard produces more results than security teams can manage. The real challenge is knowing which vulnerabilities ...
This post describes the thought process behind writing a new Semgrep rule and gives a methodology for doing so effectively. There’s no one right way or process for writing a Semgrep rule. Do what ...
In the first part of this series, I argued that after 22 years, it's time to replace Cybersecurity Awareness Month with Cybersecurity Readiness Month. Awareness made sense in 2004, but today everybody ...
Taint mode is now generally available (GA)! If you'd like a 4 minute overview of writing a rule in taint mode, check out our introductory video. We think of Semgrep as a powerful tool, not only for ...
Our deep dive into AI Coding Agents capabilities for finding vulnerabilities reveals surprising strengths, critical weaknesses, and a serious problem with consistency. TL;DR: We evaluated how ...
Semgrep is now part of Cursor Origin - bringing automated security scanning directly to repositories hosted in Cursor. If ...
At least 1.4k people are learning today that keys, wallets, and credentials were compromised from install of the nx build tool. Semgrep observed the NX Console Extension that can be used in VSCode, ...
Open weight and open source models are having a field day right now. They're smashing benchmark after benchmark, making waves on social media, and are now the subject of proposed US bans framed as ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results