semgrep.dev

https://semgrep.dev/blog/rss

01.
Kimi K3's Code Security Results Look Competitive - Until You Look at Precision
semgrep.dev · /blog/rss
▲ 0 · Jul 22
02.
Comparing Open-Source AI Code Security Harnesses
semgrep.dev · /blog/rss
▲ 0 · Jul 20
03.
Grounded or Gamed? We Audited Our Own Cyber Benchmark
semgrep.dev · /blog/rss
▲ 0 · Jul 17
04.
Miasma v3 Hit 4 AsyncAPI Packages — Did NPM's Defenses Work, or Just Get Dodged?
semgrep.dev · /blog/rss
▲ 0 · Jul 14
05.
Evaluating GPT-5.6 Luna, Terra, and Sol Against GPT-5.5 for AI Code Security
semgrep.dev · /blog/rss
▲ 0 · Jul 13
06.
You Can't Reverse Engineer Your Way Out of the AI Supply Chain Problem
semgrep.dev · /blog/rss
▲ 0 · Jul 10
07.
So it's your first time at Hacker Summer Camp, and you want to make the most of it
semgrep.dev · /blog/rss
▲ 0 · Jul 8
08.
AI-Native vs. AI-Washed: How to Tell the Difference in AppSec Tooling
semgrep.dev · /blog/rss
▲ 0 · Jul 7
09.
GLM 5.2 beats Claude in our benchmarks
semgrep.dev · /blog/rss
▲ 1110 · Jun 28 · 515 comments on HN
10.
Black Hat USA 2026: A Space Rogue Survival Guide
semgrep.dev · /blog/rss
▲ 0 · Jun 25
11.
Introducing Semgrep Guardian: Security for AI-Generated Code
semgrep.dev · /blog/rss
▲ 0 · Jun 23
12.
We have Mythos at Home: GLM 5.2 beats Claude in our Cyber Benchmarks
semgrep.dev · /blog/rss
▲ 0 · Jun 22
13.
3.5x more true positives: How we benchmark AI-powered detection
semgrep.dev · /blog/rss
▲ 0 · Jun 12
14.
RIP post/preinstall scripts: An obituary for the npm feature only TeamPCP will miss
semgrep.dev · /blog/rss
▲ 0 · Jun 11
15.
Making Semgrep rip: How Ripgrep inspired us to shave hours off (some) scans
semgrep.dev · /blog/rss
▲ 0 · Jun 10
16.
How We Cut Semgrep’s Taint Analysis Time by 75%
semgrep.dev · /blog/rss
▲ 0 · Jun 5
17.
Miasma v2: Self-Spreading npm Worm Now Uses Malicious binding.gyp file and Compromises 57 Packages
semgrep.dev · /blog/rss
▲ 0 · Jun 4
18.
Pyro Caml Continuous Profiler for OCaml
semgrep.dev · /blog/rss
▲ 26 · Jun 2 · 0 comments on HN
19.
Announcing Pyro Caml: A Continuous Profiler for OCaml
semgrep.dev · /blog/rss
▲ 0 · Jun 2
20.
Forking Shai-Hulud: RedHat npm Packages Are The Next Victim After GitHub Actions Compromise and Worm
semgrep.dev · /blog/rss
▲ 0 · Jun 1
21.
28 Years Later: Some Things Changed. The Important Stuff Didn't.
semgrep.dev · /blog/rss
▲ 0 · May 28
22.
Security that Ships: The ROI of AppSec for Engineering Teams
semgrep.dev · /blog/rss
▲ 0 · May 27
23.
The AI Hackathon Effect: Faster Builds, Better Demos, and Real Products
semgrep.dev · /blog/rss
▲ 0 · May 22
24.
Why Do Worms Work
semgrep.dev · /blog/rss
▲ 0 · May 19
25.
Getting Ready for Mythos with Semgrep
semgrep.dev · /blog/rss
▲ 0 · May 19
26.
Mini Shai-Hulud Resurfaces; Compromised Maintainer of antv, timeago, and size-sensor Packages Revives Worm Activity
semgrep.dev · /blog/rss
▲ 0 · May 18
27.
Not Your IPC, but node-ipc: npm Hit Again with Supply Chain Attack (But This Time It's Not a Worm)
semgrep.dev · /blog/rss
▲ 0 · May 14
28.
Operationalizing AI-Powered Detection
semgrep.dev · /blog/rss
▲ 0 · May 13
29.
Children of Shai-Hulud: An Analysis of the The Evolution, Delivery and Spread of the TanStack Shai-Hulud Campaign
semgrep.dev · /blog/rss
▲ 0 · May 12
30.
TanStack Router Packages Hit by Mini Shai-Hulud TheBeautifulSandsOfTime Supply Chain Attack
semgrep.dev · /blog/rss
▲ 0 · May 11

Recent polls

when	ms	items	status
Jul 22	18176	10	ok
Jul 21	236	10	ok
Jul 20	415	10	ok
Jul 20	275	10	ok
Jul 19	494	10	ok