- #173 Technologie
- #173beste Platzierung
- mehrmals pro WocheErscheinungsrhythmus
- 39 mintypische Länge
- vor 14 Std.letzte Folge
Every week, Dennis Fisher and Lindsey O'Donnell-Welch, the editors of Decipher, bring you exclusive, in-depth conversations with security researchers, CISOs, founders, and security experts to hellp you understand the threat landscape and better protect your organizations.
Folgen
Volt Typhoon's Operational Framework Driving Strategic Access | Michael Horka
Michael Horka with Black Lotus Labs joins Lindsey O'Donnell-Welch with Decipher to talk about Silent Train, Volt Typhoon's operational framework that helps the group strategically avoid detection and attribution. Timestamps0:00 (https://www
In Cybersecurity, Every Month is Black October
It may be spooky season, but we start by discussinf the fact that the frightening prospect of mass PHP2Shell exploitation has not materialized. Some good news! Then we dig into the Silent Train operational infrastructure report that Black L
Threat Intel That Delivers | Tom Hegel
Tom Hegel of SentinelLabs joins Dennis Fisher for a deep discussion of the value of a broad background, not just in tech but in life, how threat intelligence teams function, and the wide range of effects AI is having on how defenders and at
PHP2Shell and a Big CA Compromise
This week was a tale of two stories: the PHP2Shell vulnerabilities and the compromise of several certificates issued by CA eMudhra in India. Timestamps00:00 (https://www.youtube.com/watch?v=SZVcFoxQqb0) — A wild week in security news02:50 (
PHP2Shell Bugs and The Impact for Defenders | Ben Harris
The newly disclosed PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) are as serious as everyone feared, and Ben Harris of watchTowr joins Dennis Fisher to discuss their long-term impact.Timestamps00:00 - Introduction and why
When Hackers Meet Policymakers | Beau Woods
Cybersecurity policy can stall when technical experts and lawmakers speak different languages. Beau Woods, CEO and founder of Stratigos Security (https://www.linkedin.com/in/beauwoods) joins Lindsey O’Donnell-Welch to explain how Hackers on
Hacked Fridges, North Korean Laptop Farms, and Mercenary Spyware
This week, we're talking about hacked refrigerators, the FBI disrupting a North Korean laptop farm run by Famous Chollima, and a stealthy network of ads used to deliver mercenary spyware via a zero-click exploit. imestamps0:00 (https://www.
The ClickFix Epidemic and AI-Enabled Attacks | John Hammond
John Hammond of Huntress joins Dennis Fisher to dive into the ClickFix attack episdemic, how these attacks work, what the payloads are, and what individuals and organizations can do to protect themselves against them.
Why Patching Faster Doesn't Work, Ransomware Negotiation War Stories, and the NSA View of AI Threats
This week we talk about all the news from THREATCON1, including why the idea of just patching faster doesn't work, how analysts handle threat actor communications in ransomware incidents, and what the NSA thinks of AI threats.
Catch Me If You Can with Shea Serrano!
Bestselling author, podcaster, and all around great guy Shea Serrano joins Dennis Fisher and Lindsey O’Donnell-Welch to explore why Catch Me If You Can is more than a con-artist story: it’s a hacker classic and master class in social engine
Edge Devices Under Attack, a Threatcon Preview, and Communication Breakdowns
Today we have for you a buffet of zero days being exploited in edge security products, including Citrix and Fortinet, then we discuss the importance of communications from vendors when bad things happen, and finally we preview VulnCheck's T
The Citrix NetScaler Zero Day Saga | Ben Harris
Ben Harris of watchTowr joins Dennis Fisher to walk through the Citrix NetScaler zero days that emerged over the weekend, from first detection of exploitation to reporting to finally some patches and why vendor communication is so vital in
The Malware That Asks AI What to Do Next | Ryan Fetterman
Ryan Fetterman from Cisco Talos sits down with Decipher’s Lindsey O’Donnell-Welch to talk about ClosedQuorum, the first reported malware binary with an autonomous command-and-control. They talk about the wide range of ways threat actors are
FBI Hack Fallout, EvilTokens Takedown, and the F5 Zero Day
This week we dig into the ShinyHunters hack of the FBI and what it means not just for the FBI personnel but for the attackers, then we discuss the disruption of the EvilTokens phishing operation by Microsoft, and finally we talk about the F
Assessing AI Model Security From the Outside In | Matt Fredrikson
The security and reliability of the code in AI models is a huge question mark, because the models are black boxes that aren't accessible to outsiders. Matt Fredrikson, professor at Carnegie Mellon University and founder of Gray Swan AI, joi
The Real Story on AI Security Live From LabsCon!
Dennis joins from the last LabsCon conference, which featured amazing keynotes from Prof. James Mickens on AI reality and myths, Katie Moussouris on why humans are more vital than ever in security, and Dino Dai Zovi on using hardware to bre
The Vulnpocalypse Myth | Jeremiah Grossman
You've heard all of the hysteria around the vulnpocalypse caused by AI-assisted bug hunting and the shrinking time to exploit window. Now Jeremiah Grossman dispels those myths and shows exactly what the data reveals about how many bugs are
Anthropic's Threat Report, AI's Effect on Cybercrime, and How 9/11 Changed Cybersecurity
This week we dive into Anthropic's new threat intelligence report, how cybercriminals are using AI in their campaigns, and the profound effect that 9/11 had on the cybersecurity industry. Then, Dennis is joined by Ryan Naraine to preview La
Securing Communications in an AI-Assisted World | Christine Gadsby
Christine Gadsby of BlackBerry, a longtime security executive, joins Dennis to talk about her extensive experience in cybersecurity, the evolution of security practices, the challenges of securing mobile communications, and the impact of AI
Microsoft Teams Phishing, a Botnet Takedown 23 Years in the Making, and The Cuckoo's Egg's Lessons
It's our one year anniversary! This week we talk about the highlights of the last year, a new high-level phishing campaign that uses Microsoft Teams as an initial access vector, and the takedown of the ancient Sality P2P botnet. Then we off
Cybercrime Disruption: Making a “Real Impact” | Ken Bagnall
Ken Bagnall, founder and CEO of Silent Push, talks about the August National Security Presidential Memorandum (NSPM) on transnational cyber-enabled crime, how organizations can make “real impact” with cybercriminal disruption, and the chall
TeamPCP Arrests, the QTFY Attacks, and the OpenAI Post-Mortem
This week we discuss the two arrests in Australia of alleged members of the TeamPCP cybercrime group that has targeted the open source ecosystem, the US government's disclosure of intrusion activity by the Chinese QTFY threat actor, and fin
The Future of Surveillance and Privacy in the Age of AI | Nicole Ozer
Nicole Ozer, who took the helm this year as the new executive director at the Electronic Frontier Foundation (EFF), talks to Lindsey O’Donnell-Welch about the fine line between AI empowering us and undermining our rights and privacy – and w
The Politics of Hacking Back, the Origins of ExploitGym, and Water Plant Attacks
This week we discuss the new White House memo on using private sector operators in offensive cyber operations, Lindsey's deep dive into the origins of the ExploitGym AI benchmark, and the rash of attacks on water utilities in the U.S.LinksI
How AI is reshaping attacker and defender behavior | Adam Meyers
Adam Meyers of CrowdStrike joins Dennis to dive into the rapidly changing nature of both attacker and defender behavior in the AI age and how organizations need to shift their priorities to combat agentic threats. Then we talk about the new
The truth about AI model security and what's coming next | Gary McGraw
AI security pioneer and machine learning expert Gary McGraw helps Dennis separate the facts from fiction about the recent OpenAI, Meta, and Anthropic model escapes, what the real risks to enterprises are from agentic AI, and what he sees as
More AI Model Escapes and New Backdoored Chinese Routers
We can't go a week without an AI model escaping its bounds, and this week we talk about a new test by the AI Security Institute in which OpenAI and Anthropic models escaped the evaluation environment and tried to start a supply chain attack
The OpenAI and Hugging Face Intrusion Wasn't Enough, So Now Anthropic Wants In
This week we talk about the OpenAI-Hugging Face incident and what it means for those companies and the way that AI models are tested, and then we discuss Anthropic's entry into the race with its own admission that some of its models escaped
Project Hail Mary is a Hacker Movie. Amaze Amaze Amaze.
Project Hail Mary is many things: an instant classic, a heartwarming buddy movie, a brilliant scientific tale. And it's also a pure hacker movie. Wendy Nather and David Mortman join Dennis and Lindsey to talk about Ryland Grace's hacker eth
How Cybercrime Groups Have Become APTs | Michael Sweeney
Cybercrime has become professionalized and industrialized to the point that these groups are essentially at the level of state-backed APTs. Mike Sweeney of Silent Push joins Dennis Fisher to talk about this evolution, how AI is enabling thi
