Blogs

Attackers Are Still Coming for Security Companies. Here's Where We Stand.

Semgrep

The TeamPCP supply chain campaign that began with Trivy in March has now reached Checkmarx's Docker images, VS Code extensions, and Bitwarden CLI.

Visit Site

London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Semgrep × Cursor Hooks: Making Security Reliable for AgentsSemgrep How we built an AppSec AI that security researchers agree with 96% of the timeSemgrep Security AlertSemgrep Cloud Security Trends & Challenges: Complete GuideCybersecurity Exchange Security Implementation for Responsible AI: A Practical FrameworkCybersecurity Exchange Q&A with Deepgram’s New CPO, Ed AnuffDeepgram How to Conduct an AI Agent Security Audit [+ Checklist]Zapier How to implement AI training for employeesZapier Workato integrations: What's included and when to use ZapierZapier Google Anthos from the Eyes of a Kubernetes DeveloperThenewstack DevSecOps: Why Security Shouldn’t be Sacrificed for SpeedThenewstack Security Considerations for API-Driven Apps Deployed to CloudThenewstack Oso Unbundles Security AuthorizationThenewstack Pulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi IaC Best Practices: Implementing RBAC and SecurityPulumi Unpacking sandbox startup latency: why started ≠ readyModal Anthropic integration with Modal brings scalable compute to Claude ScienceModal