We're hosting a few of our customers, including Blackstone's security team, in Semgrep's private suite for Nets vs. Bulls at Barclays Center. We'd love for you to join us.

Forrester has named Semgrep a Strong Performer in the first edition of The Forrester Wave™: Agentic Development Security ...

Set your status to OOO. Between trainings and the main conference, patch out the stress with massages, chill vibes, bites and drinks. This is our night to recognize the people who contribute to making ...

Semgrep Guardian goes self-serve with Codex support, plus incident-first advisories and transitive Autofix. See everything ...

Semgrep is sponsoring our friends at OWASP Netherlands Chapter's next meetup – taking place on 29th October at KvK HQ, Utrecht. We're looking forward to catching up with the Dutch AppSec community!

One Brotli decoder bug. A lot of copies. TL;DR - CVE-2026-111497 is an out-of-bounds write in the Brotli decompressor in google/brotli, fixed upstream in 1.2.1. It is not a separate Node, PHP, or npm ...

Semgrep is now part of Cursor Origin - bringing automated security scanning directly to repositories hosted in Cursor. If your repositories live in Cursor, every pull request can now get a Semgrep ...

intercom/intercom-php 5.0.2 was compromised and converted into a Composer plugin that exfiltrates credentials at install time, extending the Mini Shai-Hulud campaign to PHP. After compromising ...

This blog post provides code examples for both ASP.Net and .Net Core, emphasizing the importance of security headers and encouraging readers to refer to OWASP Security Headers Guidance for more ...

DEF CON 33 ran 874 sessions across 61 tracks and villages, which is over 900 scheduled hours packed into four days. If you never slept, never waited in line, and never spoke to another human, you ...