Are you ready to take your coding skills to the next level and ensure that your code is safe and secure on the internet? This exclusive training led by renowned security expert Tanya Janca will cover ...

We find that Semgrep Multimodal finds 3.5x more true positives than a tuned guided prompt, at similar precision and lower cost per finding. This edge is enabled by Semgrep Multimodal using ...

Our deep dive into AI Coding Agents capabilities for finding vulnerabilities reveals surprising strengths, critical weaknesses, and a serious problem with consistency. TL;DR: We evaluated how ...

Hacker Summer Camp means Black Hat, BSidesLV, and DEF CON, back to back, in one wild week in Vegas. This year, Semgrep is showing up everywhere: people on stage at all three conferences, a booth in ...

We show that none of three flagship or two open-source models find two of the vulnerabilities discussed in the Mythos blog post, without extremely revealing hints. Discovery is orders of magnitude ...

This blog post provides code examples for both ASP.Net and .Net Core, emphasizing the importance of security headers and encouraging readers to refer to OWASP Security Headers Guidance for more ...

If your repositories live in Cursor, every pull request can now get a Semgrep security check. Findings land as checks and comments right in the workflow you already use, with no separate tool to set ...

Open weight and open source models are having a field day right now. They're smashing benchmark after benchmark, making waves on social media, and are now the subject of proposed US bans framed as ...

intercom/intercom-php 5.0.2 was compromised and converted into a Composer plugin that exfiltrates credentials at install time, extending the Mini Shai-Hulud campaign to PHP. After compromising ...

"Shift left" was popular, but has largely failed to deliver on its promises. For too many teams, it was a way to take the same old security tools and point the firehose of issues at developers. What ...