Semgrep is now part of Cursor Origin - bringing automated security scanning directly to repositories hosted in Cursor. If ...
It's been a busy week for supply chain incidents. Yesterday the PHP Foundation disclosed PHP2Shell, a vulnerability that has existed in PHP for over a decade. We broke down how that worked in our post ...
Most security advice stops at prevention. Readiness is knowing what to do when a password leaks, your phone vanishes, or ...
It is with a complicated mixture of grief, relief, and the quiet satisfaction of an "I told you so" held in for over a decade that we record the passing of automatic lifecycle script execution in npm, ...
We're shipping something new: an open-source Model Context Protocol (MCP) for Semgrep that works with any IDE based MCP client, like Cursor. With our MCP server, LLMs can use Semgrep to quickly find ...
The Semgrep Summer '26 release is built around three ideas, at a moment when frontier models like Mythos are shifting the balance toward attackers: (i) AI & SAST are better together (ii) Security ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results