
Katie Paxton-Fear
20.8K posts

Katie Paxton-Fear
@InsiderPhD
Dr, apparently. Security Adovcate @semgrep & Hacker. #BugBounty hunter & #infosec YouTuber. APIs & Interlinked OffSec, PhD in AI+Sec @hacknotcrime. she/her



🚨 Ransom group "Qilin" publishes "SEMGREP" - United States 🇺🇸 📍 Location: San Francisco, California, USA 🏢 Industry: Cybersecurity / Application Security 🔗 Website: semgrep.dev Semgrep, Inc., founded in 2017, delivers the Semgrep AppSec Platform combining SAST, SCA, and secrets scanning. It also maintains the open-source Semgrep static analysis tool used across 30+ programming languages by developers and security teams.



Just finished an experiment using @claude Opus 4.7 xhigh on a popular open source C/C++ repo from a top tech company: - @cramforce's excellent deepsec: does not support C/C++ - A random gist with a code security prompt: 1 critical, 3 high vulnerabilities for $18.09 - Semgrep's new Mandoline tool in "hunt" mode: 3 critical unauthenticated RCE, 15 high, 20 medium, 11 low, a persistent threat model, and a full security report: $7.13 Responsibly reported to the repo owner. Will share details on the vulnerabilities when public






🕹️ SPEAKER ANNOUNCEMENT 🎮️ We're thrilled to have @insiderphd, Security Advocate at Semgrep, presenting her talk 'Creative Use of Game Mechanics, Game Hacking that isn't TECHNICALLY Hacking'. Catch Katie's talk on Track 1, and keep an eye out for the full schedule release!

Very niche post, but if you have an xteink and you use BookFusion, thanks to the new Koreader plugin for BookFusion I now have cross-platform reading between my Mac, iPad, Boox and now xteink too 😂



Should AppSec engineers still learn how to code in the age of AI? 👀 And how do leaders mentor junior engineers when AI can already write large portions of code? In this Security Rulez session, Dr. Katie Paxton-Fear (@InsiderPhd) and Lyft Tech Lead Anshuman Bhartiya share practical insights and strong opinions on how AppSec teams should adapt. 📆 May 20 | 8:00 AM PT / 4:00 PM UTC Register now👉 semgrep.dev/events/securit… #CyberSecurity #AppSec #AI #EngineeringLeadership






