corpus.blog
41554 blogs · [ { "id": "01a0dd98-b813-73d3-a6c1-f4c5eab40f61", "title": "Intent, Not Sophistication: The AI Attacker Is on the Record", "url": "https://simonroses.com/2026/09/intent-not-sophistication-the-ai-attacker-is-on-the-record/", "published_at": "2026-09-24T07:54:59+00:00" }, { "id": "01a0d238-8437-7121-a09c-5ec64af0518d", "title": "Pace the Frontier, Defend the Valley: A Security Reply to Dario Amodei", "url": "https://simonroses.com/2026/09/pace-the-frontier-defend-the-valley-a-security-reply-to-dario-amodei/", "published_at": "2026-09-15T19:28:55+00:00" }, { "id": "01a08ce8-2e5b-72de-af9e-a64df49cb1d0", "title": "“Systems That Can Hack Anything”: An AI-Safety Resignation, Read From the Security Chair", "url": "https://simonroses.com/2026/09/systems-that-can-hack-anything-an-ai-safety-resignation-read-from-the-security-chair/", "published_at": "2026-09-10T10:23:36+00:00" }, { "id": "01a087e1-4d63-7072-9e76-2b953ec30554", "title": "Tracking the Fleet of the Rich: Maritime OSINT, a Radio, and an AI Agent", "url": "https://simonroses.com/2026/09/tracking-the-fleet-of-the-rich-maritime-osint-a-radio-and-an-ai-agent/", "published_at": "2026-09-03T17:02:30+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e59c5d35e4", "title": "Information Warfare Strategies (SRF-IWS): Spyware as Statecraft — How States Blackmail States", "url": "https://simonroses.com/2026/08/information-warfare-strategies-srf-iws-spyware-as-statecraft-how-states-blackmail-states/", "published_at": "2026-08-28T16:57:22+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e59d188c22", "title": "The Death of the Job: How AI and Robots Will Rewrite Work in the Next 10 Years", "url": "https://simonroses.com/2026/08/the-death-of-the-job-how-ai-and-robots-will-rewrite-work-in-the-next-10-years/", "published_at": "2026-08-20T19:22:58+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e59de1df8a", "title": "When a Missing Patch Becomes a Defective Product: The New EU Product Liability Directive", "url": "https://simonroses.com/2026/08/when-a-missing-patch-becomes-a-defective-product-the-new-eu-product-liability-directive/", "published_at": "2026-08-14T10:02:10+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e59df4a1aa", "title": "The Day the AI Act Grew Teeth: GPAI Enforcement Goes Live", "url": "https://simonroses.com/2026/08/the-day-the-ai-act-grew-teeth-gpai-enforcement-goes-live/", "published_at": "2026-08-08T10:53:50+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e59df93558", "title": "The Future of Vibe Coding Security (Part 10)", "url": "https://simonroses.com/2026/07/the-future-of-vibe-coding-security-part-10/", "published_at": "2026-07-30T08:51:17+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e59e9d1997", "title": "Do Open Weight Models Dream of Tokens?", "url": "https://simonroses.com/2026/07/do-open-weight-models-dream-of-tokens/", "published_at": "2026-07-25T10:31:06+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e59eabd233", "title": "When the Model Is the Attacker: The Hugging Face / OpenAI Model-Evaluation Incident", "url": "https://simonroses.com/2026/07/when-the-model-is-the-attacker-the-hugging-face-openai-model-evaluation-incident/", "published_at": "2026-07-22T16:15:09+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e59ec3159f", "title": "Securing the AI Coding Pipeline (Part 9)", "url": "https://simonroses.com/2026/07/securing-the-ai-coding-pipeline-part-9/", "published_at": "2026-07-09T09:00:28+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e59ed5c65b", "title": "The Founder’s Security Checklist: Shipping a Vibe-Coded MVP Without Getting Hacked (Part 8)", "url": "https://simonroses.com/2026/07/the-founders-security-checklist-shipping-a-vibe-coded-mvp-without-getting-hacked-part-8/", "published_at": "2026-07-02T08:18:07+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e59f25aa24", "title": "The AI Strategy Vacuum: Why “We Use ChatGPT” Isn’t a Plan", "url": "https://simonroses.com/2026/06/the-ai-strategy-vacuum-why-we-use-chatgpt-isnt-a-plan/", "published_at": "2026-06-25T15:05:26+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e59f841d88", "title": "Prompt Engineering for Secure Code (Part 7)", "url": "https://simonroses.com/2026/06/prompt-engineering-for-secure-code-part-7/", "published_at": "2026-06-20T10:00:53+00:00" }, { "id": "01a087e1-4d64-7346-90ce-34e5a038026e", "title": "Information Warfare Strategies (SRF-IWS): Offensive Operations Against a Papal Visit — Pope Leo XIV in Madrid 2026", "url": "https://simonroses.com/2026/06/information-warfare-strategies-srf-iws-offensive-operations-against-a-papal-visit-pope-leo-xiv-in-madrid-2026/", "published_at": "2026-06-05T07:52:00+00:00" }, { "id": "01a0cfe4-35e6-7255-882e-0ff5d75f672d", "title": "Scanning Vibe-Coded Apps: Why Traditional SAST/DAST Falls Short (part 6)", "url": "https://simonroses.com/2026/05/scanning-vibe-coded-apps-why-traditional-sast-dast-falls-short-part-6/", "published_at": "2026-05-28T07:20:50+00:00" }, { "id": "01a0cfe4-35e6-7255-882e-0ff5d7f2014a", "title": "When Agents Fix Agents: How Hermes Patched OpenClaw After a Bad Update", "url": "https://simonroses.com/2026/05/when-agents-fix-agents-how-hermes-patched-openclaw-after-a-bad-update/", "published_at": "2026-05-23T08:31:51+00:00" }, { "id": "01a0cfe4-35e6-7255-882e-0ff5d887551b", "title": "Authentication & Secrets: What AI Gets Wrong Every Time (Part 5)", "url": "https://simonroses.com/2026/05/authentication-secrets-what-ai-gets-wrong-every-time-part-5/", "published_at": "2026-05-21T07:27:38+00:00" }, { "id": "01a0cfe4-35e6-7255-882e-0ff5d92e2755", "title": "The Dependency Trap: Supply Chain Risks in AI-Generated Code (Part 4)", "url": "https://simonroses.com/2026/05/the-dependency-trap-supply-chain-risks-in-ai-generated-code-part-4/", "published_at": "2026-05-08T09:59:43+00:00" }, { "id": "01a0cfe4-35e6-7255-882e-0ff5d996dc42", "title": "Anatomy of a Vibe Coding Breach: Lessons from 2026’s Worst Incidents (Part 3)", "url": "https://simonroses.com/2026/04/anatomy-of-a-vibe-coding-breach-lessons-from-2026s-worst-incidents-part-3/", "published_at": "2026-04-30T14:05:29+00:00" }, { "id": "01a0cfe4-35e6-7255-882e-0ff5da3f40fc", "title": "The OWASP Top 10 for Vibe-Coded Applications (Part 2)", "url": "https://simonroses.com/2026/04/the-owasp-top-10-for-vibe-coded-applications-part-2/", "published_at": "2026-04-23T17:33:14+00:00" }, { "id": "01a0cfe4-35e6-7255-882e-0ff5daa98d2a", "title": "How to Weaponize AI Agent Skills", "url": "https://simonroses.com/2026/04/how-to-weaponize-ai-agent-skills/", "published_at": "2026-04-17T08:16:41+00:00" }, { "id": "01a0cfe4-35e6-7255-882e-0ff5db0e579e", "title": "What Is Vibe Coding Security? A Field Guide for 2026 (Part 1)", "url": "https://simonroses.com/2026/04/what-is-vibe-coding-security-a-field-guide-for-2026-part-1/", "published_at": "2026-04-10T07:42:37+00:00" }, { "id": "01a0cfe4-35e6-7255-882e-0ff5db5b873b", "title": "AI Must Make Superhumans, Not Unemployed: The Case Against Layoffs and Unaffordable Agents", "url": "https://simonroses.com/2026/04/ai-must-make-superhumans-not-unemployed-the-case-against-layoffs-and-unaffordable-agents/", "published_at": "2026-04-04T11:45:17+00:00" }, { "id": "01a0cfe4-35e6-7255-882e-0ff5db9b16a5", "title": "Moltbook: When AI Agents Build Their Own Social Network, What Could Go Wrong?", "url": "https://simonroses.com/2026/03/moltbook-when-ai-agents-build-their-own-social-network-what-could-go-wrong/", "published_at": "2026-03-27T10:14:51+00:00" }, { "id": "01a0cfe4-35e6-7255-882e-0ff5dc264012", "title": "Professional Vibe Coding vs. Vibe Coding: Why Developers Should Embrace It (On Their Own Terms)", "url": "https://simonroses.com/2026/03/professional-vibe-coding-vs-vibe-coding-why-developers-should-embrace-it-on-their-own-terms/", "published_at": "2026-03-05T07:36:34+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6d5629200", "title": "AI Agent Skill Poisoning: The Supply Chain Attack You Haven’t Heard Of", "url": "https://simonroses.com/2026/02/ai-agent-skill-poisoning-the-supply-chain-attack-you-havent-heard-of/", "published_at": "2026-02-26T06:59:44+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6d64d2082", "title": "The Shadow Twin Threats: When AI and Vibe Coding Go Rogue in Your Network", "url": "https://simonroses.com/2026/02/the-shadow-twin-threats-when-ai-and-vibe-coding-go-rogue-in-your-network/", "published_at": "2026-02-19T09:24:56+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6d6d30a6a", "title": "My Experience Using OpenClaw: A Security Professional’s Journey", "url": "https://simonroses.com/2026/02/my-experience-using-openclaw-a-security-professionals-journey/", "published_at": "2026-02-13T10:11:30+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6d788e4f8", "title": "Information Warfare Strategies (SRF-IWS): Offensive Operations at the Davos Forum 2026 (Part 3)", "url": "https://simonroses.com/2026/01/information-warfare-strategies-srf-iws-offensive-operations-at-the-davos-forum-2026-part-3/", "published_at": "2026-01-16T17:12:36+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6d7aa0eb0", "title": "Information Warfare Strategies (SRF-IWS): Offensive Operations at the Davos Forum (Part 2)", "url": "https://simonroses.com/2025/01/information-warfare-strategies-srf-iws-offensive-operations-at-the-davos-forum-part-2/", "published_at": "2025-01-21T19:46:37+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6d7f97a02", "title": "The Evolution of Software Development: From Manual Coding to AI-Generated Code and the Security Implications", "url": "https://simonroses.com/2024/08/the-evolution-of-software-development-from-manual-coding-to-ai-generated-code-and-the-security-implications/", "published_at": "2024-08-02T11:33:07+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6d839e31b", "title": "Information Warfare Strategies (SRF-IWS): Offensive Operations at the Davos Forum", "url": "https://simonroses.com/2024/01/information-warfare-strategies-srf-iws-offensive-operations-at-the-davos-forum/", "published_at": "2024-01-19T08:07:47+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6d8764483", "title": "Modern Wardriving", "url": "https://simonroses.com/2023/12/modern-wardriving/", "published_at": "2023-12-22T17:05:11+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6d91ee18d", "title": "Fun in a Wild West shooting range with the Flipper Zero", "url": "https://simonroses.com/2023/09/fun-in-a-wild-west-shooting-range-with-the-flipper-zero/", "published_at": "2023-09-29T14:16:31+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6d948bfbf", "title": "Information Warfare Strategies (SRF-IWS): Unveiling the Risks: Paris Protests and the potential to compromise the cybersecurity of companies while looting their stores", "url": "https://simonroses.com/2023/07/information-warfare-strategies-srf-iws-unveiling-the-risks-paris-protests-and-the-potential-to-compromise-the-cybersecurity-of-companies-while-looting-their-stores/", "published_at": "2023-07-14T20:54:31+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6d9dfaec2", "title": "Infrared Dominance with Flipper Zero", "url": "https://simonroses.com/2023/03/infrared-dominance-with-flipper-zero/", "published_at": "2023-03-03T11:54:56+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6da952302", "title": "Offensive Security Wireless Professional (OSWP): my experience", "url": "https://simonroses.com/2022/08/offensive-security-wireless-professional-oswp-my-experience/", "published_at": "2022-08-10T22:18:08+00:00" }, { "id": "01a0cfe4-ecdb-73e4-8080-89a6db2680fb", "title": "KringleCon / Holiday Hack 2021 Writeup", "url": "https://simonroses.com/2022/01/kringlecon-holiday-hack-2021-writeup/", "published_at": "2022-01-11T22:59:13+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-943988d159c7", "title": "Cool podcasts on cyber security, red team, and startups (1)", "url": "https://simonroses.com/2021/10/cool-podcasts-on-cyber-security-red-team-and-startups-1/", "published_at": "2021-10-07T17:23:50+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-943989930039", "title": "Your own Spy Numbers Station on a Raspberry PI", "url": "https://simonroses.com/2020/10/your-own-spy-numbers-station-on-a-raspberry-pi/", "published_at": "2020-10-13T16:17:49+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-94398a3e3528", "title": "The Ten Top Computer Science Papers You Must Read", "url": "https://simonroses.com/2020/05/the-ten-top-computer-science-papers-you-must-read/", "published_at": "2020-05-07T19:25:48+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-94398a752e0f", "title": "Hacker Entertainment for COVID-19 Times", "url": "https://simonroses.com/2020/03/hacker-entertainment-for-covid-19-times/", "published_at": "2020-03-27T15:33:33+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-94398ad19c1d", "title": "October, European Cyber Security Month 2018: Success or Failure?", "url": "https://simonroses.com/2018/11/october-european-cyber-security-month-2018-success-or-failure/", "published_at": "2018-11-08T09:29:29+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-94398af69c98", "title": "Book Review: PoC||GTFO", "url": "https://simonroses.com/2017/09/book-review-pocgtfo/", "published_at": "2017-09-27T19:32:02+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-94398b8c5737", "title": "Mirai DDoS Botnet: Source Code & Binary Analysis", "url": "https://simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/", "published_at": "2016-10-27T16:03:19+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-94398c29fbd7", "title": "Fristileaks 1.3 CTF Writeup", "url": "https://simonroses.com/2015/12/fristileaks-1-3-ctf-writeup/", "published_at": "2015-12-18T11:48:57+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-94398c393b5b", "title": "Equation APT analysis using Security Data Science platform: BinSecSweeper", "url": "https://simonroses.com/2015/09/equation-apt-analysis-using-security-data-science-platform-binsecsweeper/", "published_at": "2015-09-24T14:24:30+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-94398cceb7ef", "title": "A Security Breach Can Hurt You, More Than You Think!", "url": "https://simonroses.com/2015/09/a-security-breach-can-hurt-you-more-than-you-think/", "published_at": "2015-09-09T06:52:07+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-94398cf901bb", "title": "Race to 0day in Nation State Operating Systems", "url": "https://simonroses.com/2015/01/race-to-0day-in-nation-state-operating-systems/", "published_at": "2015-01-16T08:01:49+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-94398d41c40c", "title": "Cyber Intelligence Universe", "url": "https://simonroses.com/2014/11/cyber-intelligence-universe/", "published_at": "2014-11-26T16:26:10+00:00" }, { "id": "01a0cfe5-414b-728d-a3e4-94398d8fe489", "title": "Theoretical attacks on a Sex Robot: Roxxxy", "url": "https://simonroses.com/2014/07/theoretical-attacks-on-a-sex-robot-roxxxy/", "published_at": "2014-07-01T21:03:04+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9dbc8b37b", "title": "Heartbleed: pain, blood and code", "url": "https://simonroses.com/2014/04/heartbleed-pain-blood-and-code/", "published_at": "2014-04-16T16:56:10+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9dc4acec5", "title": "Spaniards in the Black Hat ASIA", "url": "https://simonroses.com/2014/03/spaniards-in-the-black-hat-asia/", "published_at": "2014-03-31T16:27:43+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9dd4a2190", "title": "The need to evolve defensive security to offensive security", "url": "https://simonroses.com/2014/03/the-need-to-evolve-defensive-security-to-offensive-security/", "published_at": "2014-03-24T12:32:34+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9dde820f0", "title": "VULNEX Award and RSA USA speaker experience!", "url": "https://simonroses.com/2014/03/vulnex-award-and-rsa-usa-speaker-experience/", "published_at": "2014-03-05T19:23:22+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9de0ebc37", "title": "Enterprise Computer Security must CHANGE", "url": "https://simonroses.com/2013/12/enterprise-computer-security-must-change/", "published_at": "2013-12-05T18:29:37+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9de532d72", "title": "AppSecUSA & BinSecSweeper Talk", "url": "https://simonroses.com/2013/11/appsecusa-binsecsweeper-talk/", "published_at": "2013-11-27T10:51:25+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9df0ec5f8", "title": "Book Review: iOS Hacker’s Handbook", "url": "https://simonroses.com/2013/11/book-review-ios-hackers-handbook/", "published_at": "2013-11-14T21:09:14+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9df710447", "title": "AppSec: Myths about Obfuscation and Reversing Python", "url": "https://simonroses.com/2013/10/appsec-myths-about-obfuscation-and-reversing-python/", "published_at": "2013-10-03T09:04:45+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9df8d0fe5", "title": "Book Review: Mob Rules. What the Mafia Can Teach the Legitimate Businessman", "url": "https://simonroses.com/2013/09/book-review-mob-rules-what-the-mafia-can-teach-the-legitimate-businessman/", "published_at": "2013-09-13T08:32:23+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9dfe81c6a", "title": "OWASP Top Ten 2013 free workshop", "url": "https://simonroses.com/2013/07/owasp-top-ten-2013-free-workshop/", "published_at": "2013-07-18T13:54:42+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9e097326c", "title": "A Spanish startup selected by the DARPA Cyber Fast Track (CFT)", "url": "https://simonroses.com/2013/06/a-spanish-startup-selected-by-the-darpa-cyber-fast-track-cft/", "published_at": "2013-06-25T17:35:37+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9e18fe05e", "title": "What’s the point of reporting 0day?", "url": "https://simonroses.com/2013/06/whats-the-point-of-reporting-0day/", "published_at": "2013-06-17T18:09:03+00:00" }, { "id": "01a0cfe5-972e-721b-8bc4-a4f9e23b8fe9", "title": "A tale of Government Trojans", "url": "https://simonroses.com/2013/06/a-tale-of-government-trojans/", "published_at": "2013-06-05T12:15:50+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa31aa53d", "title": "AppSec: Build Rooted Detection in your App", "url": "https://simonroses.com/2013/06/appsec-build-rooted-detection-in-your-app/", "published_at": "2013-06-04T19:40:22+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa32c1b87", "title": "OSINT + Python = Custom Hacking", "url": "https://simonroses.com/2013/05/osint-python-custom-hacking/", "published_at": "2013-05-15T11:28:30+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa33e02ea", "title": "My 10 Cyber Weapons Tool List", "url": "https://simonroses.com/2013/04/my-10-cyber-weapons-tool-list/", "published_at": "2013-04-22T17:23:49+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa38cf204", "title": "AppSec: Improve your software security with GCC Stack Protector Strong", "url": "https://simonroses.com/2013/04/appsec-improve-your-software-security-with-gcc-stack-protector-strong/", "published_at": "2013-04-10T19:20:57+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa489c0f7", "title": "Book Review: The IDA Pro Book, 2nd edition", "url": "https://simonroses.com/2013/03/book-review-the-ida-pro-book-2nd-edition/", "published_at": "2013-03-22T07:34:42+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa5212b02", "title": "Back to Black Hat Europe and my talk on Anti-Theft", "url": "https://simonroses.com/2013/03/back-to-black-hat-europe-and-my-talk-on-anti-theft/", "published_at": "2013-03-18T21:22:26+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa5f48ff9", "title": "Dell, IBM and possible other tech giants should be ashamed", "url": "https://simonroses.com/2012/11/dell-ibm-and-possible-other-tech-giants-should-be-ashamed/", "published_at": "2012-11-20T07:56:28+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa67f885d", "title": "AppSec USA 2012: the experience", "url": "https://simonroses.com/2012/10/appsec-usa-2012-the-experience/", "published_at": "2012-10-31T17:23:51+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa7518316", "title": "Medre, AutoCAD Malware: The spy inside the cad", "url": "https://simonroses.com/2012/07/medre-autocad-malware-the-spy-inside-the-cad/", "published_at": "2012-07-16T14:59:06+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa7f5ea01", "title": "“Find And Call” Smartphone Malware Analysis", "url": "https://simonroses.com/2012/07/find-and-call-smartphone-malware-analysis/", "published_at": "2012-07-11T14:57:25+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa8cb9ac5", "title": "Oh No AIX Security", "url": "https://simonroses.com/2012/07/oh-no-aix-security/", "published_at": "2012-07-05T12:50:49+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa8fc5cf5", "title": "Network Intelligence Analysis", "url": "https://simonroses.com/2012/06/network_intelligence_analysis/", "published_at": "2012-06-20T18:07:51+00:00" }, { "id": "01a0cfe5-e54f-7003-b4d6-acaaa985cfbf", "title": "Blackhat Europe 2012, MundoHackerTV and More", "url": "https://simonroses.com/2012/04/blackhat-europe-2012-mundohackertv-and-more/", "published_at": "2012-04-13T10:18:30+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7bb446ce", "title": "AppSec: Static Application Security Testing (SAST) Free Tool Map", "url": "https://simonroses.com/2012/02/appsec-static-application-security-testing-sast-free-tool-map/", "published_at": "2012-02-23T17:29:33+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7c3822da", "title": "VULNEX, up & running", "url": "https://simonroses.com/2012/02/vulnex-up-running/", "published_at": "2012-02-13T10:34:47+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7ca49044", "title": "Infiltrate 2012 Report", "url": "https://simonroses.com/2012/01/infiltrate-2012-report/", "published_at": "2012-01-18T19:58:58+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7cb2889c", "title": "New Year, New Ideas, New Job", "url": "https://simonroses.com/2012/01/new-year-new-ideas-new-job/", "published_at": "2012-01-09T11:33:55+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7d649dd2", "title": "AppSec: Overview of Fuzzing Frameworks", "url": "https://simonroses.com/2011/12/appsec-overview-of-fuzzing-frameworks/", "published_at": "2011-12-21T15:49:28+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7dda9bcb", "title": "AppSec: Mobile Apps InSecure Development Practices", "url": "https://simonroses.com/2011/12/appsec-mobile-apps-insecure-development-practices/", "published_at": "2011-12-13T17:32:38+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7e11f89e", "title": "FUD on Cloud Security", "url": "https://simonroses.com/2011/11/fud-on-cloud-security/", "published_at": "2011-11-30T16:02:09+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7e4f4eca", "title": "Source Barcelona 2011: magnificent", "url": "https://simonroses.com/2011/11/source-barcelona-2011-magnificent/", "published_at": "2011-11-19T18:25:01+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7ef31002", "title": "AppSec: Security Code Review Process", "url": "https://simonroses.com/2011/11/appsec-security-code-review-process/", "published_at": "2011-11-08T15:38:40+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7fe692e7", "title": "Reversing Android Crackmes for Fun", "url": "https://simonroses.com/2011/10/reversing-android-crackmes-for-fun/", "published_at": "2011-10-25T14:14:29+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7fece8fc", "title": "Wake Up Call to MBA Schools: Security & Privacy Concepts", "url": "https://simonroses.com/2011/10/wake-up-call-to-mba-schools-security-privacy-concepts/", "published_at": "2011-10-18T14:45:02+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f7ff7c68c", "title": "Cyber Warriors Factories", "url": "https://simonroses.com/2011/09/cyber-warriors-factories/", "published_at": "2011-09-28T17:12:23+00:00" }, { "id": "01a0cfe6-0ca4-71bf-8ab0-219f80c67531", "title": "APT Article Published", "url": "https://simonroses.com/2011/09/apt-article-published/", "published_at": "2011-09-26T15:23:49+00:00" }, { "id": "01a0cfe6-49b9-72d6-9440-59eb48308c65", "title": "AppSec: Static Analysis Using Visual Studio 2010 for Hunting C/C++ Bugs", "url": "https://simonroses.com/2011/09/appsec-static-analysis-using-visual-studio-2010-for-hunting-cc-bugs/", "published_at": "2011-09-14T17:16:15+00:00" }, { "id": "01a0cfe6-49b9-72d6-9440-59eb4916b24d", "title": "Wireless Pentester Guide on Automated Wireless Cracking", "url": "https://simonroses.com/2011/09/wireless-pentester-guide-on-automated-wireless-cracking/", "published_at": "2011-09-06T14:12:54+00:00" }, { "id": "01a0cfe6-49b9-72d6-9440-59eb49591010", "title": "Book Review Week: Practical Lock Picking: A Physical Penetration Tester’s Training Guide", "url": "https://simonroses.com/2011/07/book-review-week-practical-lock-picking-a-physical-penetration-testers-training-guide/", "published_at": "2011-07-29T09:45:03+00:00" }, { "id": "01a0cfe6-49b9-72d6-9440-59eb4981ad90", "title": "Book Review Week: Hacking Exposed Malware & Rootkits", "url": "https://simonroses.com/2011/07/book-review-week-hacking-exposed-malware-rootkits/", "published_at": "2011-07-28T10:09:26+00:00" }, { "id": "01a0cfe6-49b9-72d6-9440-59eb4a1db939", "title": "Book Review Week: A Guide to Kernel Exploitation: Attacking the Core", "url": "https://simonroses.com/2011/07/book-review-week-a-guide-to-kernel-exploitation-attacking-the-core/", "published_at": "2011-07-27T10:07:44+00:00" }, { "id": "01a0cfe6-49b9-72d6-9440-59eb4aa7b437", "title": "Book Review Week: Rootkits: Subverting the Windows Kernel", "url": "https://simonroses.com/2011/07/book-review-week-rootkits-subverting-the-windows-kernel/", "published_at": "2011-07-26T09:49:59+00:00" }, { "id": "01a0cfe6-49b9-72d6-9440-59eb4aec950e", "title": "Book Review Week: Fuzzing for Software Security Testing and Quality Assurance", "url": "https://simonroses.com/2011/07/book-review-week-fuzzing-for-software-security-testing-and-quality-assurance/", "published_at": "2011-07-25T15:42:46+00:00" }, { "id": "01a0cfe6-49b9-72d6-9440-59eb4b46dea8", "title": "Reconstructing JavaScript Exploit", "url": "https://simonroses.com/2011/07/reconstructing-javascript-exploit/", "published_at": "2011-07-20T20:32:00+00:00" } ] posts Claim your blog
Back to simonroses.com
Blog · corpus.blog/blogs/simonroses.com/posts

simonroses.com

simonroses.com

2026

Intent, Not Sophistication: The AI Attacker Is on the Recordoriginal ↗
24 Sept 2026
Pace the Frontier, Defend the Valley: A Security Reply to Dario Amodeioriginal ↗
15 Sept 2026
“Systems That Can Hack Anything”: An AI-Safety Resignation, Read From the Security Chairoriginal ↗
10 Sept 2026
Tracking the Fleet of the Rich: Maritime OSINT, a Radio, and an AI Agentoriginal ↗
3 Sept 2026
Information Warfare Strategies (SRF-IWS): Spyware as Statecraft — How States Blackmail Statesoriginal ↗
28 Aug 2026
The Death of the Job: How AI and Robots Will Rewrite Work in the Next 10 Yearsoriginal ↗
20 Aug 2026
When a Missing Patch Becomes a Defective Product: The New EU Product Liability Directiveoriginal ↗
14 Aug 2026
The Day the AI Act Grew Teeth: GPAI Enforcement Goes Liveoriginal ↗
8 Aug 2026
The Future of Vibe Coding Security (Part 10)original ↗
30 Jul 2026
Do Open Weight Models Dream of Tokens?original ↗
25 Jul 2026
When the Model Is the Attacker: The Hugging Face / OpenAI Model-Evaluation Incidentoriginal ↗
22 Jul 2026
Securing the AI Coding Pipeline (Part 9)original ↗
9 Jul 2026
The Founder’s Security Checklist: Shipping a Vibe-Coded MVP Without Getting Hacked (Part 8)original ↗
2 Jul 2026
The AI Strategy Vacuum: Why “We Use ChatGPT” Isn’t a Planoriginal ↗
25 Jun 2026
Prompt Engineering for Secure Code (Part 7)original ↗
20 Jun 2026
Information Warfare Strategies (SRF-IWS): Offensive Operations Against a Papal Visit — Pope Leo XIV in Madrid 2026original ↗
5 Jun 2026
Scanning Vibe-Coded Apps: Why Traditional SAST/DAST Falls Short (part 6)original ↗
28 May 2026
When Agents Fix Agents: How Hermes Patched OpenClaw After a Bad Updateoriginal ↗
23 May 2026
Authentication & Secrets: What AI Gets Wrong Every Time (Part 5)original ↗
21 May 2026
The Dependency Trap: Supply Chain Risks in AI-Generated Code (Part 4)original ↗
8 May 2026
Anatomy of a Vibe Coding Breach: Lessons from 2026’s Worst Incidents (Part 3)original ↗
30 Apr 2026
The OWASP Top 10 for Vibe-Coded Applications (Part 2)original ↗
23 Apr 2026
How to Weaponize AI Agent Skillsoriginal ↗
17 Apr 2026
What Is Vibe Coding Security? A Field Guide for 2026 (Part 1)original ↗
10 Apr 2026
AI Must Make Superhumans, Not Unemployed: The Case Against Layoffs and Unaffordable Agentsoriginal ↗
4 Apr 2026
Moltbook: When AI Agents Build Their Own Social Network, What Could Go Wrong?original ↗
27 Mar 2026
Professional Vibe Coding vs. Vibe Coding: Why Developers Should Embrace It (On Their Own Terms)original ↗
5 Mar 2026
AI Agent Skill Poisoning: The Supply Chain Attack You Haven’t Heard Oforiginal ↗
26 Feb 2026
The Shadow Twin Threats: When AI and Vibe Coding Go Rogue in Your Networkoriginal ↗
19 Feb 2026
My Experience Using OpenClaw: A Security Professional’s Journeyoriginal ↗
13 Feb 2026
Information Warfare Strategies (SRF-IWS): Offensive Operations at the Davos Forum 2026 (Part 3)original ↗
16 Jan 2026

2025

Information Warfare Strategies (SRF-IWS): Offensive Operations at the Davos Forum (Part 2)original ↗
21 Jan 2025

2024

The Evolution of Software Development: From Manual Coding to AI-Generated Code and the Security Implicationsoriginal ↗
2 Aug 2024
Information Warfare Strategies (SRF-IWS): Offensive Operations at the Davos Forumoriginal ↗
19 Jan 2024

2023

Modern Wardrivingoriginal ↗
22 Dec 2023
Fun in a Wild West shooting range with the Flipper Zerooriginal ↗
29 Sept 2023
Information Warfare Strategies (SRF-IWS): Unveiling the Risks: Paris Protests and the potential to compromise the cybersecurity of companies while looting their storesoriginal ↗
14 Jul 2023
Infrared Dominance with Flipper Zerooriginal ↗
3 Mar 2023

2022

Offensive Security Wireless Professional (OSWP): my experienceoriginal ↗
10 Aug 2022
KringleCon / Holiday Hack 2021 Writeuporiginal ↗
11 Jan 2022

2021

Cool podcasts on cyber security, red team, and startups (1)original ↗
7 Oct 2021

2020

Your own Spy Numbers Station on a Raspberry PIoriginal ↗
13 Oct 2020
The Ten Top Computer Science Papers You Must Readoriginal ↗
7 May 2020
Hacker Entertainment for COVID-19 Timesoriginal ↗
27 Mar 2020

2018

October, European Cyber Security Month 2018: Success or Failure?original ↗
8 Nov 2018

2017

Book Review: PoC||GTFOoriginal ↗
27 Sept 2017

2016

Mirai DDoS Botnet: Source Code & Binary Analysisoriginal ↗
27 Oct 2016

2015

Fristileaks 1.3 CTF Writeuporiginal ↗
18 Dec 2015
Equation APT analysis using Security Data Science platform: BinSecSweeperoriginal ↗
24 Sept 2015
A Security Breach Can Hurt You, More Than You Think!original ↗
9 Sept 2015
Race to 0day in Nation State Operating Systemsoriginal ↗
16 Jan 2015

2014

Cyber Intelligence Universeoriginal ↗
26 Nov 2014
Theoretical attacks on a Sex Robot: Roxxxyoriginal ↗
1 Jul 2014
Heartbleed: pain, blood and codeoriginal ↗
16 Apr 2014
Spaniards in the Black Hat ASIAoriginal ↗
31 Mar 2014
The need to evolve defensive security to offensive securityoriginal ↗
24 Mar 2014
VULNEX Award and RSA USA speaker experience!original ↗
5 Mar 2014

2013

Enterprise Computer Security must CHANGEoriginal ↗
5 Dec 2013
AppSecUSA & BinSecSweeper Talkoriginal ↗
27 Nov 2013
Book Review: iOS Hacker’s Handbookoriginal ↗
14 Nov 2013
AppSec: Myths about Obfuscation and Reversing Pythonoriginal ↗
3 Oct 2013
Book Review: Mob Rules. What the Mafia Can Teach the Legitimate Businessmanoriginal ↗
13 Sept 2013
OWASP Top Ten 2013 free workshoporiginal ↗
18 Jul 2013
A Spanish startup selected by the DARPA Cyber Fast Track (CFT)original ↗
25 Jun 2013
What’s the point of reporting 0day?original ↗
17 Jun 2013
A tale of Government Trojansoriginal ↗
5 Jun 2013
AppSec: Build Rooted Detection in your Apporiginal ↗
4 Jun 2013
OSINT + Python = Custom Hackingoriginal ↗
15 May 2013
My 10 Cyber Weapons Tool Listoriginal ↗
22 Apr 2013
AppSec: Improve your software security with GCC Stack Protector Strongoriginal ↗
10 Apr 2013
Book Review: The IDA Pro Book, 2nd editionoriginal ↗
22 Mar 2013
Back to Black Hat Europe and my talk on Anti-Theftoriginal ↗
18 Mar 2013

2012

Dell, IBM and possible other tech giants should be ashamedoriginal ↗
20 Nov 2012
AppSec USA 2012: the experienceoriginal ↗
31 Oct 2012
Medre, AutoCAD Malware: The spy inside the cadoriginal ↗
16 Jul 2012
“Find And Call” Smartphone Malware Analysisoriginal ↗
11 Jul 2012
Oh No AIX Securityoriginal ↗
5 Jul 2012
Network Intelligence Analysisoriginal ↗
20 Jun 2012
Blackhat Europe 2012, MundoHackerTV and Moreoriginal ↗
13 Apr 2012
AppSec: Static Application Security Testing (SAST) Free Tool Maporiginal ↗
23 Feb 2012
VULNEX, up & runningoriginal ↗
13 Feb 2012
Infiltrate 2012 Reportoriginal ↗
18 Jan 2012
New Year, New Ideas, New Joboriginal ↗
9 Jan 2012

2011

AppSec: Overview of Fuzzing Frameworksoriginal ↗
21 Dec 2011
AppSec: Mobile Apps InSecure Development Practicesoriginal ↗
13 Dec 2011
FUD on Cloud Securityoriginal ↗
30 Nov 2011
Source Barcelona 2011: magnificentoriginal ↗
19 Nov 2011
AppSec: Security Code Review Processoriginal ↗
8 Nov 2011
Reversing Android Crackmes for Funoriginal ↗
25 Oct 2011
Wake Up Call to MBA Schools: Security & Privacy Conceptsoriginal ↗
18 Oct 2011
Cyber Warriors Factoriesoriginal ↗
28 Sept 2011
APT Article Publishedoriginal ↗
26 Sept 2011
AppSec: Static Analysis Using Visual Studio 2010 for Hunting C/C++ Bugsoriginal ↗
14 Sept 2011
Wireless Pentester Guide on Automated Wireless Crackingoriginal ↗
6 Sept 2011
Book Review Week: Practical Lock Picking: A Physical Penetration Tester’s Training Guideoriginal ↗
29 Jul 2011
Book Review Week: Hacking Exposed Malware & Rootkitsoriginal ↗
28 Jul 2011
Book Review Week: A Guide to Kernel Exploitation: Attacking the Coreoriginal ↗
27 Jul 2011
Book Review Week: Rootkits: Subverting the Windows Kerneloriginal ↗
26 Jul 2011
Book Review Week: Fuzzing for Software Security Testing and Quality Assuranceoriginal ↗
25 Jul 2011
Reconstructing JavaScript Exploitoriginal ↗
20 Jul 2011
Next