Blogs

Should security engineers care about transitive supply chain vulnerabilities?

Semgrep

It's amusing to think that a developer can progress through years of crafting software, stitching together libraries and packages, all the while remaining blissfully unaware of a fundamental truth: with each dependency they happily import or install, they often usher in a parade of other unseen dependencies.

Visit Site

Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep MCP: Model, Context… Propaganda? What security teams need to know about the latest hyped up AI techSemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Cloud Security Trends & Challenges: Complete GuideCybersecurity Exchange Digital Forensics & Emerging Technologies GuideCybersecurity Exchange Security Implementation for Responsible AI: A Practical FrameworkCybersecurity Exchange Trained on 100,000+ Voices: Deepgram Unveils Next-Gen Speaker Diarization and Language DetectionDeepgram The Language of LGBTQ Inclusion and Allyship - Deepgram Blog ⚡️Deepgram 5 Reasons to Keep Contributing to Open-Source Projects - Deepgram Blog ⚡️Deepgram Mind the Gap: The Chasm Between AI Fiction and Fact - Deepgram Blog ⚡️Deepgram How to Conduct an AI Agent Security Audit [+ Checklist]Zapier WooCommerce: App spotlightZapier Workato integrations: What's included and when to use ZapierZapier Grafana Is Not Worried About AWS CommercializationThenewstack Pancakes Are Delicious and Data Centers Are for Free StuffThenewstack DevSecOps: Why Security Shouldn’t be Sacrificed for SpeedThenewstack Lessons Swift Designer Chris Lattner Has Learned about LeadershipThenewstack