🔐 Cyber threats in Europe aren’t slowing down; they’re evolving. The EU’s Cybersecurity Threat Landscape 2025 shows attackers converging, automating, and industrializing their methods, from AI-driven phishing to state-sponsored ransomware. 💡 Phishing is still the #1 entry

Recently, we hosted our 2025 Semgrep Customer Advisory Board! 🎉 At Semgrep, we know that our users are the judge. Their feedback, ideas, and experiences help shape everything we build. Thank you to everyone who took the time to join us and share your insights. From roadmap

AI can reason, but can it secure? Our new research explores how LLMs handle IDOR detection. They find real flaws, but still need human judgment to scale securely. Read more 👉 semgrep.dev/blog/2025/can-… #AppSec #AI #Security

Tired of wasting time on false positives during AppSec triage? Join Jamie Reid on November 20 at 10:00 AM PT for Real-World Applications of Semgrep Memories: How Customers Are Using AI to Eliminate False Positives. In this live session, you’ll hear how real Semgrep customers

🚀 AI-powered detection is coming to Semgrep. We’re launching Semgrep AI-powered detection — a first-of-its-kind hybrid of deterministic scanning and AI that finds vulnerabilities like IDORs and business logic flaws that other tools miss. Our Private Beta opens today, and spots

🗓️ On Nov 26 at 9AM PT, join Katie Paxton-Fear, Staff Security Advocate (Semgrep) and Aubrey King, Community Evangelist (F5) for a live conversation about some of the most controversial ideas shaping our industry. No slides. No scripts. Just two security pros debating questions

We’ve got a packed lineup of webinars coming up, and you won’t want to miss them! 🔥 📅 November 19 Get a live look at our biggest autumn updates from the experts themselves — plus roadmap sneak peeks, Q&A, and a chance to win a R2-D2™ LEGO® Star Wars™ set! 🎟️ Register here:

🚀 New Whitepaper: How Squarespace Scaled AppSec with Semgrep We’re excited to share a deeper look at how Squarespace strengthened its developer-first security program and scaled AppSec across thousands of repositories while maintaining the engineering velocity their teams rely

The Semgrep team is heading to Las Vegas! ✈️✨ We’ll be at AWS re:Invent from December 1st - 4th, and we can’t wait to meet you there. Stop by Booth #486 to meet the team, grab some great swag, and see how Semgrep helps engineering and security teams ship faster and stay secure

A new variant of the Shai-Hulud worm is now impacting 500+ npm packages, introducing not only large-scale secret exfiltration but a persistent GitHub Actions backdoor capable of executing code on self-hosted runners. This second wave shows a clear pattern: ➡️ Attackers are

🇧🇪OWASP Benelux Days – see you tomorrow! 🇧🇪 We’re excited to touch down in Mechelen, Belgium soon – for a day of AppSec talks, followed by our ‘Brews & Bytes’ evening event afterwards… Say hello to our team at their booth, to chat about how you can achieve zero false-positive

The Semgrep team has officially landed in Las Vegas for AWS re:Invent! ✈️🎉 We’ll be at Booth #486 all week. Come meet the team, grab some great swag, and see how Semgrep helps engineering and security teams ship faster and stay secure with low-noise results and AI-powered

With all eyes on Sha1-Hulud, it’s easy to forget that this is merely the latest in a series of attacks that suggest a new normal where malicious dependencies can wreak havoc on organizations. That’s why Malicious Dependency Detection is now generally available for Semgrep Supply

Last chance to join us! ⏰ Tomorrow at 9:00 AM PT, grab your coffee and tune in for a live, no-slides, no-scripts conversation on the ideas shaping (and shaking up) cybersecurity in 2026. Katie Paxton-Fear (Semgrep) and Aubrey King (F5) will go head-to-head on the industry’s