Semmle Blog

Introduction to variant analysis with QL and LGTM (part 2)

Variant analysis usually starts with a seed vulnerability. In this post, I'll be showing how you can use a seed vulnerability to write and refine a QL query, in order to find potential variants.

Threat Hunting At Microsoft: Using Semmle QL To Eliminate Bugs

For security teams, threat hunting is a constant challenge. Learn how the Microsoft Security Response Center responds to code vulnerabilities quickly with Semmle QL.

Semmle appoints its first CSO to build out world-class security research team and lead product security

Product security veteran Fermín Serna leaves Google to help secure all software by bringing the security and development communities together

LGTM and QL 1.20 Product Updates: Enhanced Performance and Security

Denial of Service (DoS) Vulnerability in Facebook Fizz

Semmle Wins 2019 CDM InfoSec Awards

Join Semmle's first User Group Meetup in San Francisco

February 19, 2019

Ghostscript Vulnerabilities in Postscript & PDF Processings

November 21, 2018

Apple XNU Vulnerabilities Affecting Macs, iPhones, and iPads

October 30, 2018

Apache Struts 2: Remote Code Execution Vulnerability

A new group of security issues have been discovered for applications developed based on Apache Struts, a popular open source framework for developing web applications used by enterprises globally.

October 04, 2018

Apache Struts Vulnerability - CVE-2018-11776

Today, the Apache Software Foundation announced a critical remote code execution vulnerability in Apache Struts, a popular open source framework for developing web applications.

August 22, 2018