Blogs

Security Alert

Semgrep

A cryptostealer malware was pushed to a number of npm packages including debug, chalk, duckdb, and a number of utility packages as a result of the compromise of a single contributor.

Visit Site

London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Semgrep × Cursor Hooks: Making Security Reliable for AgentsSemgrep How we built an AppSec AI that security researchers agree with 96% of the timeSemgrep Fix What Matters, Faster: How Semgrep and Sysdig Are Unifying Security from Code to RuntimeSemgrep Cloud Security Trends & Challenges: Complete GuideCybersecurity Exchange Security Implementation for Responsible AI: A Practical FrameworkCybersecurity Exchange How to Conduct an AI Agent Security Audit [+ Checklist]Zapier DevSecOps: Why Security Shouldn’t be Sacrificed for SpeedThenewstack Security Considerations for API-Driven Apps Deployed to CloudThenewstack Oso Unbundles Security AuthorizationThenewstack Pulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi IaC Best Practices: Implementing RBAC and SecurityPulumi Docker Desktop 4.23: Updates to Docker Init, New Configuration Integrity Check, Quick SearchDocker Docker at Cloud Expo Asia: GenAI, Security, and New InnovationsDocker Docker Networking Drivers - Details and Use CasesDocker Two-factor AuthenticationVercel How to instantly follow up on Facebook Lead Ads with custom notificationsZapier Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket