Semgrep
PulseAugur coverage of Semgrep — every cluster mentioning Semgrep across labs, papers, and developer communities, ranked by signal.
4 day(s) with sentiment data
-
China's GLM-5.2 AI model lowers barrier for advanced cyberattacks
China's new open-source AI model, GLM-5.2, is raising concerns among security researchers about the increasing accessibility of advanced AI hacking capabilities. Released by Z.ai, GLM-5.2 reportedly rivals models like C…
-
Developer's code security tool finds critical flaw in its own dependencies
A developer building a code security analyzer named vibeanalyzer discovered a critical vulnerability in their own tool's dependencies using Semgrep. The vulnerability, a path traversal in the vitest dependency, could al…
-
LLMs outperform static analysis tools in code security review
A recent benchmark comparing traditional static analysis tools with large language models for application code security review revealed that LLMs like GPT-4.1, Mistral Large, and DeepSeek V3 significantly outperform too…
-
Semgrep launches Pyro Caml, OCaml's first continuous profiler
Semgrep has released Pyro Caml, a new continuous profiling tool for the OCaml programming language. This tool is designed to run in production environments, continuously monitoring program performance and sending data t…
-
Shai-Hulud malware infects PyTorch Lightning AI training library
A supply chain attack has compromised the PyTorch Lightning AI training library, affecting versions 2.6.2 and 2.6.3. The malicious code, themed after "Shai-Hulud" from Dune, executes automatically upon import and steals…
-
Replit launches AI Security Agent to audit code vulnerabilities
Replit has launched a new AI-powered Security Agent designed to automatically scan applications for vulnerabilities during the development process. This agent aims to reduce the time for a comprehensive security review …
-
Replit bolsters AI coding security with defense-in-depth strategy
Replit is enhancing its platform's security to address concerns about AI-generated code, a practice they term "vibe coding." The company is implementing a defense-in-depth strategy across its infrastructure, from develo…
-
DeepSource open-sources Globstar static analysis toolkit with AI-assisted checks
DeepSource has open-sourced Globstar, a static analysis toolkit designed for creating custom code quality and security checkers. The toolkit leverages tree-sitter for parsing code and utilizes AI assistants like ChatGPT…