Black Hat is almost here. Forget the vendor swag and AI buzzword bingo. The real value is knowing which talks, Arsenal demos, summits, and hallway convos are worth your time before you land. I put together my insider's guide to Black Hat See you at Mandalay Bay. semgrep.dev/blog/2026/bl...

In NYC today, speaking at #aws summit Section 207-S at 4:00p in the Expo Spotlight Lounge. "Stop Fighting Security, Start Shipping Secure Code" Stop by and say hi, you might lean something.

#Babylon5 #microsoft #nightmareeclipse #infosec #fulldisclosure

Dropping 0day isn’t the worst thing a researcher can do. It’s not ideal, but at least orgs can take steps to mitigate. Non disclosure is far worse. What drives researchers toward non disclosure? Threats from vendors. Researchers aren’t criminals unless their crime is curiosity.

Not that ‘responsible’ disclosure shit again 🙄 No vendor uses that term unless they want to call someone irresponsible. Even if someone drops 0day, patch & move on. Going after a researcher is a great way to turn 1 bad relationship into many terrible relationships.

Today is L0pht Day. In 1998 7 hackers in black t-shirts told the US Senate the internet was a house of cards. They looked at us like we'd landed from another planet. 28 yrs later, the gap between what infosec knows and what lawmakers act on remains a problem. The work isn't done. It never was.

1st blog post for the new job! Security Should Be the Path of Least Resistance Security creates friction that frustrates developers and users, this can actually make systems less secure, when security is difficult, noisy, or just gets in the way, people bypass it. semgrep.dev/blog/2026/se...

I was at the first #bsidessf however many years ago, I’ve missed a few but it’s good to be back. I’ll be walking around or chilling at the #Semgrep booth, come say hi.

damn, Semgrep really signing up the big guns in the industry!

What if we got security tools to devs that were easy to use, that could catch, flag, and fix real vulnerabilities before they ship? I’ve joined Semgrep as a Staff Security Advocate! See you at RSA and BSidesSF!

Latest episode of 'Where Warlocks Stay up Late" dropped Featuring yours truly. It goes pretty deep, growing up in Maine, working at Lotus, stories about L0pht you may not have heard, getting fired from @stake. Most personal interview I have ever given. www.youtube.com/watch?v=j6jh...

🟢 Semgrep version 1.147.0 is live! Check out all the details here👇 https://github.com/semgrep/semgrep/releases/tag/v1.147.0

Throughout my career I have fought to protect users, help orgs understand how attackers think, and build defenses that stop them. If your team wants someone who can speak fluently in hacker circles and in boardroom, will call out nonsense and knows how to make security actually work We should talk.

I've decided to stop pussy footing around and I am now openly looking for my next challenge. Interested in a company on the small to mid-size range with a cool story. Ideal position would be a combination of customer outreach, marketing and thought leadership. What ya got? #CyberSecurity

Nick, Space Rogue, and Dave discuss the beautiful vulnerability in Oracle EBS, the despicable attack on the British nursery chain, Kido, and the rise of passkeys, here to stay or a fad? www.youtube.com/watch?v=5aSU...

30 yrs ago today the greatest military SciFi space opera to ever air on TV premiered. Space Above and Beyond, nominated for 2 Emmy’s and a Saturn award, tells the story of the 58th Sqd Space Marines and their fight against the ‘invading’ Chigs. #spaceaboveandbeyond www.youtube.com/watch?v=ppdX...

National Postal Museum? Never Ending Pasta Machine? National Park of Monfrague? Nippon Paper Mills? Nice People Manager? Node Package Manager! in the latest episode of 'Not The Situation Room'! www.youtube.com/watch?v=_Elb...

Dropping another episode of 'Not The Situation Room'. Today we ask is ethical hacking ok? Is ethical hacking even a thing? We invite you to share your opinions on the RBI (aka Burger King) system compromise and the ethics of hacking in general. www.youtube.com/watch?v=J5Tb...

A social engineers dream vehicle. Buy it now for $2K. Hard to believe that #FedEx didn't scrub the logo or paint over it or something before selling. But, here we are. www.salvagebid.com/vehicle/4277...

Join Nick, Dave, and I as we discuss the latest threat in the cyber world. Three notorious groups, ShinyHunters, Scattered Spider, and LAPSUS$, have allegedly joined forces to launch a new ransomware as a service. All in Episode 16 of "Not The Situation Room"! www.youtube.com/watch?v=uSnJ...

Another episode of Not The Situation Room just dropped. This week Nick, Dave, and myself talk about the Tea App breach, anonymity and privacy. www.youtube.com/watch?v=xDfv...

Another huge influencer in my life has passed apnews.com/article/tom-...

I joined Nick and Dave on this weeks episode of 'Not The Situation Room' to talk about Sharepoint and the difficulties in patching. What do you think? Should I do more episodes with them? www.youtube.com/watch?v=T_ga...

I really need an old logo for the Joint Task Force - Computer Network Operations (JTF-CNO) which was formed out of the JTF-CND in 2000 and later morphed into US Cyber Command. The original logo for this org seems to have disappeared from the Internet. Any help?

Dr. Demento had a major impact in my formative years. Late Sunday nights on WTOS 105.1 "The Rock and Roll Mountain!" sopghreporter.com/2025/06/01/d...

We also get this photo of @spacerog.bsky.social complete with cool 1999 blue hair. I had blue hair back in 1999 as well, I should add.

Where is Fruity Rogue when you need him?

Happy Exxon Valdez day for those that celebrate. /s

I should have done this a long time ago but people keep asking. I have assembled all of the clips of HNNCast on YouTube into one playlist. If you want to relive ~14yr old news items then this list is for you. www.youtube.com/watch?v=UdKy...

My Archive Team Warrior is up and running. "I'm doing my part!"

If you are listing the date on your blog post or news article as "last week" or "8 months ago" you get a point for including an age but loose 10 points for not having the actual date.

Did everyone else know that iOS17 can decode those weird laundry tag symbols? youtu.be/SCxnn2TpXQU

I presented #MalwareDB at the last #Shmoocon firetalks. github.com/rjzak/malwar...

@spacerog.bsky.social with some fantastic life wisdom: "Not enough shenanigans"

Thanks to @shmoocon @grecs.bsky.social @spacerog.bsky.social @kympossible.bsky.social @rayredacted.com and all the speakers for a wonderful FINAL #firetalks

#shmoocon #firetalks speakers, schedule, and descriptions are posted! Check them out here: https://www.shmoocon.org/firetalks/

I’m @shmoocon excited to judge the #firetalks this evening starting at 8PM. This year, I only accept charitable donation bribes ($1 is fine). Consider @cjunky.bsky.social ‘s recovery ❤️‍🩹 gofund.me/27112e30 or LA Fire mutual aid ❤️‍🩹 hcb.hackclub.com/donations/st...

Never forget #shmoocon

I’m in denial that it’s the final Shmoocon.

Why do rental cars not come with snow brushes?

If you are in town early for Shmoocon and want to hang out in a cool space for a few hours.... preregister for the IBM X-Force Cyber Range: Schmooze Social www.ibm.biz/schmooze

Register today for the IBM X-Force free webinar "IBM X-Force Inside the Mind of a Hacker Webinar: Holiday Edition" A non-technical discussion of tools used by threat actors today – including AI-generated video and audio content and a peek into holiday themed attacks. www.ibm.com/events/reg/f...

Does blue sky offer selected notifications or is it all or nothing? How do I turn off notifications for every single follow?

Some great research from my co-workers here in X-Force on a new attack by Hive0145 Hive0145 Targets Europe with Advanced Strela Stealer Campaigns www.infosecurity-magazine.com/news/hive014...

I get to work with amazing people, especially the Global Deputy Head of IBM X-Force Jake Paulson! From the US Air Force to IBM X-Force. www.ibm.com/blogs/jobs/f...

Happy F5 day for those who celebrate!

Under appreciated. Her she is in #startrek #terrigarr rip

The IBM X-Force Internship program is now accepting applications for Summer 2025. Looking for strong cyber applicants in their 2nd or 3rd year of a cyber degree program to spend their summer with us. ibm.biz/XFIntern2025

There have been many #hacker groups since the dawn of the computer age, but few as impactful as the L0pht. Today I'll get the inside scoop on key events in hacker history & how L0pht changed the world from one of its OG's, @spacerog.bsky.social. podcast.firewallsdontstopdragons.com/2024/10/14/l...

Tune in Monday when I will talk #hacker history with original L0pht member @spacerog.bsky.social ! We'll of course talk about L0pht's exploits and influence (chronicled in his book), but also #hactivism and the role of hackers in society. Subscribe here: podcast.firewallsdontstopdragons.com