SAST findings vary widely across 12 OCPP 1.6 language ports
SonarQube, Semgrep, and language-specific analyzers reported two issues in Rust and 1,689 in Java.
Stories per day · 30 days
2 RSS
6 stories, newest first · one card per story
Stories tagged #semgrep
Joern negative reachability misses executed Python functions
In asciinema, 113 of 123 functions Joern called unreachable from entry points still ran; Sublist3r executed 19 of 24.
Top 10 Best SAST Tools in 2026 [Ranked & Scored]
A 2026 editorial ranking puts Snyk Code first among ten SAST tools, ahead of CodeQL and Semgrep.
A Security Risk Assessment Framework for AI-Powered Development Tools
Researchers propose SRF, a framework showing AI-generated code from multiple development tools introduces vulnerabilities, worst in input and file handling tasks.
DeepZero: Open-source hunting for vulnerable Windows drivers
DeepZero, a new open-source engine, automates discovery of exploitable Windows kernel drivers for BYOVD attacks using Ghidra, Semgrep, and an LLM.
Automating Attack Graph Construction for Agentic Pentesting. Towards Neuro-Symbolic Vulnerability Hunting
Semi-automated pipeline converts Trivy, Semgrep, Nmap output into MulVAL attack graphs for agentic pentesting, 53.7% mean vulnerability coverage in CyBench.