Blogs

XML Security in Java

Semgrep

— Tl;dr: In this blog post, you can read just how much of a mess Java XML security is. If by the end of this post, you feel confident parsing XML in Java without any tools or cheat sheets, I have done a terrible job conveying our findings.

Visit Site

London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Semgrep × Cursor Hooks: Making Security Reliable for AgentsSemgrep How we built an AppSec AI that security researchers agree with 96% of the timeSemgrep Security AlertSemgrep Cloud Security Trends & Challenges: Complete GuideCybersecurity Exchange Security Implementation for Responsible AI: A Practical FrameworkCybersecurity Exchange How to Conduct an AI Agent Security Audit [+ Checklist]Zapier DevSecOps: Why Security Shouldn’t be Sacrificed for SpeedThenewstack Security Considerations for API-Driven Apps Deployed to CloudThenewstack Oso Unbundles Security AuthorizationThenewstack Pulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi IaC Best Practices: Implementing RBAC and SecurityPulumi Docker at Cloud Expo Asia: GenAI, Security, and New InnovationsDocker Docker Networking Drivers - Details and Use CasesDocker Supporting the jsDelivr open source CDN with bandwidth for developersBunny Two-factor AuthenticationVercel Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket upm Launches as a Fast, Tiny Package Manager Written in TypeScriptSocket