RSS Anyway logo
HotLatestFollowingStatusAbout

semgrep.dev

Sign in to follow
semgrep.dev
RSSAtomJSON
  1. 01.
    Kimi K3's Code Security Results Look Competitive - Until You Look at Precision
    semgrep.dev · /blog/rss
    ▲ 0 · Jul 22
  2. 02.
    Comparing Open-Source AI Code Security Harnesses
    semgrep.dev · /blog/rss
    ▲ 0 · Jul 20
  3. 03.
    Grounded or Gamed? We Audited Our Own Cyber Benchmark
    semgrep.dev · /blog/rss
    ▲ 0 · Jul 17
  4. 04.
    Miasma v3 Hit 4 AsyncAPI Packages — Did NPM's Defenses Work, or Just Get Dodged?
    semgrep.dev · /blog/rss
    ▲ 0 · Jul 14
  5. 05.
    Evaluating GPT-5.6 Luna, Terra, and Sol Against GPT-5.5 for AI Code Security
    semgrep.dev · /blog/rss
    ▲ 0 · Jul 13
  6. 06.
    You Can't Reverse Engineer Your Way Out of the AI Supply Chain Problem
    semgrep.dev · /blog/rss
    ▲ 0 · Jul 10
  7. 07.
    So it's your first time at Hacker Summer Camp, and you want to make the most of it
    semgrep.dev · /blog/rss
    ▲ 0 · Jul 8
  8. 08.
    AI-Native vs. AI-Washed: How to Tell the Difference in AppSec Tooling
    semgrep.dev · /blog/rss
    ▲ 0 · Jul 7
  9. 09.
    GLM 5.2 beats Claude in our benchmarks
    semgrep.dev · /blog/rss
    ▲ 1110 · Jun 28 · 515 comments on HN
  10. 10.
    Black Hat USA 2026: A Space Rogue Survival Guide
    semgrep.dev · /blog/rss
    ▲ 0 · Jun 25
  11. 11.
    Introducing Semgrep Guardian: Security for AI-Generated Code
    semgrep.dev · /blog/rss
    ▲ 0 · Jun 23
  12. 12.
    We have Mythos at Home: GLM 5.2 beats Claude in our Cyber Benchmarks
    semgrep.dev · /blog/rss
    ▲ 0 · Jun 22
  13. 13.
    3.5x more true positives: How we benchmark AI-powered detection
    semgrep.dev · /blog/rss
    ▲ 0 · Jun 12
  14. 14.
    RIP post/preinstall scripts: An obituary for the npm feature only TeamPCP will miss
    semgrep.dev · /blog/rss
    ▲ 0 · Jun 11
  15. 15.
    Making Semgrep rip: How Ripgrep inspired us to shave hours off (some) scans
    semgrep.dev · /blog/rss
    ▲ 0 · Jun 10
  16. 16.
    How We Cut Semgrep’s Taint Analysis Time by 75%
    semgrep.dev · /blog/rss
    ▲ 0 · Jun 5
  17. 17.
    Miasma v2: Self-Spreading npm Worm Now Uses Malicious binding.gyp file and Compromises 57 Packages
    semgrep.dev · /blog/rss
    ▲ 0 · Jun 4
  18. 18.
    Pyro Caml Continuous Profiler for OCaml
    semgrep.dev · /blog/rss
    ▲ 26 · Jun 2 · 0 comments on HN
  19. 19.
    Announcing Pyro Caml: A Continuous Profiler for OCaml
    semgrep.dev · /blog/rss
    ▲ 0 · Jun 2
  20. 20.
    Forking Shai-Hulud: RedHat npm Packages Are The Next Victim After GitHub Actions Compromise and Worm
    semgrep.dev · /blog/rss
    ▲ 0 · Jun 1
  21. 21.
    28 Years Later: Some Things Changed. The Important Stuff Didn't.
    semgrep.dev · /blog/rss
    ▲ 0 · May 28
  22. 22.
    Security that Ships: The ROI of AppSec for Engineering Teams
    semgrep.dev · /blog/rss
    ▲ 0 · May 27
  23. 23.
    The AI Hackathon Effect: Faster Builds, Better Demos, and Real Products
    semgrep.dev · /blog/rss
    ▲ 0 · May 22
  24. 24.
    Why Do Worms Work
    semgrep.dev · /blog/rss
    ▲ 0 · May 19
  25. 25.
    Getting Ready for Mythos with Semgrep
    semgrep.dev · /blog/rss
    ▲ 0 · May 19
  26. 26.
    Mini Shai-Hulud Resurfaces; Compromised Maintainer of antv, timeago, and size-sensor Packages Revives Worm Activity
    semgrep.dev · /blog/rss
    ▲ 0 · May 18
  27. 27.
    Not Your IPC, but node-ipc: npm Hit Again with Supply Chain Attack (But This Time It's Not a Worm)
    semgrep.dev · /blog/rss
    ▲ 0 · May 14
  28. 28.
    Operationalizing AI-Powered Detection
    semgrep.dev · /blog/rss
    ▲ 0 · May 13
  29. 29.
    Children of Shai-Hulud: An Analysis of the The Evolution, Delivery and Spread of the TanStack Shai-Hulud Campaign
    semgrep.dev · /blog/rss
    ▲ 0 · May 12
  30. 30.
    TanStack Router Packages Hit by Mini Shai-Hulud TheBeautifulSandsOfTime Supply Chain Attack
    semgrep.dev · /blog/rss
    ▲ 0 · May 11