Curated security research, vulnerabilities, advisories and tools for practitioners.

#semgrep

Security coverage tagged semgrep.

1.

Local AI for Penetration Testing & Research

research | 2026-06-28 04:34 | CVE-2026-12194 | projectblack.io | original ↗ | #ai-security | #agentic-ai | #vulnerability-research

2.

One year of Opengrep: What we built and what’s next

blog | 2026-05-12 00:00 | aikido.dev | original ↗ | #appsec | #open-source | #sast

3.

Uncovering memory corruption in NVIDIA Triton (as a new hire)

blog | 2025-08-05 11:00 | blog.trailofbits.com | original ↗ | #ai-security | #memory-corruption | #vulnerability-disclosure

4.

LiquidFiles Vulnerabilities: From Discovery to Disclosure

research | 2025-02-12 21:00 | projectblack.io | original ↗ | #vulnerability-research | #ruby | #semgrep

5.

Launching Opengrep | Why we forked Semgrep

blog | 2025-01-24 00:00 | aikido.dev | original ↗ | #open-source | #sast | #semgrep

6.

35 more Semgrep rules: infrastructure, supply chain, and Ruby

blog | 2024-12-09 14:00 | blog.trailofbits.com | original ↗ | #supply-chain | #ruby | #infrastructure-as-code

7.

Announcing the Trail of Bits and Semgrep partnership

blog | 2024-09-19 13:00 | blog.trailofbits.com | original ↗ | #sast | #partnership | #static-analysis

8.

Wordpress Plugin Vulnerability Hunting

vulnerability | 2024-08-27 05:01 | projectblack.io | original ↗ | #vulnerability-research | #wordpress | #sast

9.

Streamline your static analysis triage with SARIF Explorer

blog | 2024-03-20 13:30 | blog.trailofbits.com | original ↗ | #triage | #static-analysis | #tool-release

10.

30 new Semgrep rules: Ansible, Java, Kotlin, shell scripts, and more

blog | 2024-01-17 13:30 | blog.trailofbits.com | original ↗ | #java | #sast | #static-analysis

11.

How to introduce Semgrep to your organization

blog | 2024-01-12 14:00 | blog.trailofbits.com | original ↗ | #devsecops | #secure-coding | #ci-cd

12.

HackerOne Partners With Semgrep to Combine Expert Code Review With Powerful Automation

blog | 2024-01-11 17:17 | hackerone.com | original ↗ | #devsecops | #code-review | #sast

13.

Publishing Trail of Bits’ CodeQL queries

blog | 2023-12-06 13:30 | blog.trailofbits.com | original ↗ | #cryptography | #c | #go

14.

Secure your Apollo GraphQL server with Semgrep

blog | 2023-08-29 12:00 | blog.trailofbits.com | original ↗ | #graphql | #csrf | #static-analysis

15.

Announcing the Trail of Bits Testing Handbook

blog | 2023-07-26 11:00 | blog.trailofbits.com | original ↗ | #devsecops | #ci-cd | #security-tools

16.

Secure your machine learning with Semgrep

blog | 2022-10-03 13:00 | blog.trailofbits.com | original ↗ | #ai-security | #supply-chain | #machine-learning

17.

Discovering goroutine leaks with Semgrep

blog | 2021-11-09 04:28 | blog.trailofbits.com | original ↗ | #go | #static-analysis | #concurrency