Original Post: r2c's Series B funding r2c aims to solve the problem of security tools not being developer-first by introducing a $27 million Series B funding round led by Felicis Ventures, alongside Redpoint Ventures and… Read More »r2c Secures Series B Funding to Drive Future Innovations
Original Post: Slack on scaling static analysis with Semgrep In this DEF CON 29 AppSec Village presentation, Erin Browning and Tim Faraci from Slack cover essential aspects of application security. Key points include strategies for… Read More »How Slack Enhanced Static Code Analysis with Semgrep: A Success Story
Original Post: BSides Las Vegas: the power of guardrails In a talk at BSides Las Vegas, r2c security researchers Colleen Dai and Grayson Hardaway explored the impact of secure guardrails on reducing XSS risks by… Read More »Unlocking Cybersecurity Potential: Insights from BSides Las Vegas on the Power of Guardrails
Original Post: Overcoming the Pitfalls of Inadequate Security Measures in the SDLC |… The content discusses the critical importance of integrating security measures throughout the Software Development Lifecycle (SDLC) to mitigate severe financial repercussions for… Read More »Mastering Secure Development: Navigating Common Security Slip-ups in the SDLC
Original Post: Comprehensive Guide to Penetration Testing Your SaaS Platform | by Centizen Nationwide | Jul, 2024 The content emphasizes the importance of securing a SaaS platform and provides a detailed guide for conducting a… Read More »Ultimate SaaS Security: A Comprehensive Penetration Testing Guide
Original Post: How to secure an S3 bucket on AWS? Amazon Web Services (AWS) Simple Storage Service (S3) is an essential cloud storage service, offering scalability and high performance, but its security requires careful attention.… Read More »Essential Steps for Securing Your AWS S3 Bucket
Original Post: Recording: Semgrep Summer 2021 Meetup Thanks to everyone who attended the summer meetup on August 11! If you missed it, you can watch the recording, which includes an overview of new Semgrep enhancements,… Read More »Highlights from the Semgrep Summer 2021 Meetup: Key Takeaways and Insights
Original Post: Application Integration — A Strategic Roadmap for IT Experts and Business Leaders | by Hivemind Technologies | Jul, 2024 The article by Hivemind Technologies emphasizes the importance of application integration in modern business… Read More »Optimizing Application Integration: Strategic Insights for IT and Business Leaders | July 2024
Original Post: Protect Your GitHub Actions with Semgrep The article discusses concerns surrounding GitHub Actions (GHA) security. The major points are: Security Risks: The author worries about potential code injection attacks and unauthorized access via… Read More »Enhancing Security in GitHub Actions Using Semgrep: A Guide
Original Post: Seattle Java User Group: Detect complex code patterns using Semgrep In this talk, Kurt Boberg from Chegg and Daghan Altas from r2c demonstrate how to use Semgrep for detecting complex code patterns in… Read More »Unveiling Complexity: Seattle Java User Group Explores Semgrep for Code Pattern Detection