Hello Vegas my old friend youtube.com/shorts/zKqZh...

The Sound of Vegas

YouTube video by Space Rogue

youtube.com

"Despite AWS's efforts, Cris Thomas (Space Rogue), security advocate at Semgrep, argued that attribution is best left to governments and law enforcement." www.scworld.com/news/amazon-...

Amazon attributes axios, debug, chalk NPM attacks to DPRK’s Sapphire Sleet

Amazon linked the campaigns through overlapping C2 indicators, TTPs and code.

scworld.com

Friendly #DEFCON34 reminder: Meta-style glasses with recording capabilities are prohibited at DEF CON. There is no exception for recording glasses with prescription lenses. Be sure to pack non-violating eyewear if you need them. Please see our Photo policies for more. defcon.org/html/links/d...

Thursday night in Vegas? This is where you want to be. Signup now if you haven't already. events.semgrep.dev/semgrep/rsvp...

We have an opening for a Senior/Staff Security Researcher! Come talk to us in Vegas. (Not senior? apply anyway, ya never know.) semgrep.dev/about/career...

Careers

Semgrep is on a mission to make it expensive for attackers to exploit software. Backed by top investors and found on Best Places to Work lists.

semgrep.dev

Black Hat is almost here. Forget the vendor swag and AI buzzword bingo. The real value is knowing which talks, Arsenal demos, summits, and hallway convos are worth your time before you land. I put together my insider's guide to Black Hat See you at Mandalay Bay. semgrep.dev/blog/2026/bl...

Black Hat USA 2026: The Hacker Summer Camp Survival Guide

Heading to Black Hat USA 2026 at Mandalay Bay? Get the inside track on must-see briefings, Arsenal demos, Summits, and how to survive Hacker Summer Camp.

semgrep.dev

In NYC today, speaking at #aws summit Section 207-S at 4:00p in the Expo Spotlight Lounge. "Stop Fighting Security, Start Shipping Secure Code" Stop by and say hi, you might lean something.

#Babylon5 #microsoft #nightmareeclipse #infosec #fulldisclosure

Dropping 0day isn’t the worst thing a researcher can do. It’s not ideal, but at least orgs can take steps to mitigate. Non disclosure is far worse. What drives researchers toward non disclosure? Threats from vendors. Researchers aren’t criminals unless their crime is curiosity.

Not that ‘responsible’ disclosure shit again 🙄 No vendor uses that term unless they want to call someone irresponsible. Even if someone drops 0day, patch & move on. Going after a researcher is a great way to turn 1 bad relationship into many terrible relationships.

Today is L0pht Day. In 1998 7 hackers in black t-shirts told the US Senate the internet was a house of cards. They looked at us like we'd landed from another planet. 28 yrs later, the gap between what infosec knows and what lawmakers act on remains a problem. The work isn't done. It never was.

1st blog post for the new job! Security Should Be the Path of Least Resistance Security creates friction that frustrates developers and users, this can actually make systems less secure, when security is difficult, noisy, or just gets in the way, people bypass it. semgrep.dev/blog/2026/se...

Security Should Be the Path of Least Resistance

Security often creates friction that frustrates developers and users, this can actually make systems less secure because when security is difficult, noisy, or just gets in the way, people bypass or ig...

semgrep.dev

I was at the first #bsidessf however many years ago, I’ve missed a few but it’s good to be back. I’ll be walking around or chilling at the #Semgrep booth, come say hi.

damn, Semgrep really signing up the big guns in the industry!

What if we got security tools to devs that were easy to use, that could catch, flag, and fix real vulnerabilities before they ship? I’ve joined Semgrep as a Staff Security Advocate! See you at RSA and BSidesSF!

Latest episode of 'Where Warlocks Stay up Late" dropped Featuring yours truly. It goes pretty deep, growing up in Maine, working at Lotus, stories about L0pht you may not have heard, getting fired from @stake. Most personal interview I have ever given. www.youtube.com/watch?v=j6jh...

Episode 10: Cris Thomas aka Space Rogue

YouTube video by Where Warlocks Stay Up Late

youtube.com

🟢 Semgrep version 1.147.0 is live! Check out all the details here👇 https://github.com/semgrep/semgrep/releases/tag/v1.147.0

Throughout my career I have fought to protect users, help orgs understand how attackers think, and build defenses that stop them. If your team wants someone who can speak fluently in hacker circles and in boardroom, will call out nonsense and knows how to make security actually work We should talk.

I've decided to stop pussy footing around and I am now openly looking for my next challenge. Interested in a company on the small to mid-size range with a cool story. Ideal position would be a combination of customer outreach, marketing and thought leadership. What ya got? #CyberSecurity

Nick, Space Rogue, and Dave discuss the beautiful vulnerability in Oracle EBS, the despicable attack on the British nursery chain, Kido, and the rise of passkeys, here to stay or a fad? www.youtube.com/watch?v=5aSU...

Oracle, Nurserys, and Passkeys…Oh My!

YouTube video by Not the Situation Room

youtube.com

30 yrs ago today the greatest military SciFi space opera to ever air on TV premiered. Space Above and Beyond, nominated for 2 Emmy’s and a Saturn award, tells the story of the 58th Sqd Space Marines and their fight against the ‘invading’ Chigs. #spaceaboveandbeyond www.youtube.com/watch?v=ppdX...

Space: Above and Beyond (1995) - E01&E02 - Pilot - HD AI Remaster - Full Episode

YouTube video by Owen Davies

youtube.com

National Postal Museum? Never Ending Pasta Machine? National Park of Monfrague? Nippon Paper Mills? Nice People Manager? Node Package Manager! in the latest episode of 'Not The Situation Room'! www.youtube.com/watch?v=_Elb...

NPM - The National Postal Museum???

YouTube video by Not the Situation Room

youtube.com

Dropping another episode of 'Not The Situation Room'. Today we ask is ethical hacking ok? Is ethical hacking even a thing? We invite you to share your opinions on the RBI (aka Burger King) system compromise and the ethics of hacking in general. www.youtube.com/watch?v=J5Tb...

Hack It Your Way

YouTube video by Not the Situation Room

youtube.com

A social engineers dream vehicle. Buy it now for $2K. Hard to believe that #FedEx didn't scrub the logo or paint over it or something before selling. But, here we are. www.salvagebid.com/vehicle/4277...

Join Nick, Dave, and I as we discuss the latest threat in the cyber world. Three notorious groups, ShinyHunters, Scattered Spider, and LAPSUS$, have allegedly joined forces to launch a new ransomware as a service. All in Episode 16 of "Not The Situation Room"! www.youtube.com/watch?v=uSnJ...

”Shiny, Happy…Spiders?”

YouTube video by Not the Situation Room

youtube.com

Another episode of Not The Situation Room just dropped. This week Nick, Dave, and myself talk about the Tea App breach, anonymity and privacy. www.youtube.com/watch?v=xDfv...

Who Spilled the Tea!?

YouTube video by Not the Situation Room

youtube.com

Another huge influencer in my life has passed apnews.com/article/tom-...

Tom Lehrer, song satirist and mathematician, dies at 97

Tom Lehrer songs included “Poisoning Pigeons in the Park,” “The Old Dope Peddler,” “Be Prepared” and “The Vatican Rag,” in which he poked at the rites and ceremonies of the Roman Catholic Church.

apnews.com

I joined Nick and Dave on this weeks episode of 'Not The Situation Room' to talk about Sharepoint and the difficulties in patching. What do you think? Should I do more episodes with them? www.youtube.com/watch?v=T_ga...

Not the Situation Room Episode 12

YouTube video by Not the Situation Room

youtube.com

I really need an old logo for the Joint Task Force - Computer Network Operations (JTF-CNO) which was formed out of the JTF-CND in 2000 and later morphed into US Cyber Command. The original logo for this org seems to have disappeared from the Internet. Any help?

Dr. Demento had a major impact in my formative years. Late Sunday nights on WTOS 105.1 "The Rock and Roll Mountain!" sopghreporter.com/2025/06/01/d...

Dr. Demento Announces Retirement After 55-Year Radio Career

Radio personality Barret "Dr. Demento" Hansen announced his retirement this week, ending a 55-year career devoted to comedy and novelty music when his show

sopghreporter.com