- #195 -22Technologie
- #173beste Platzierung
- mehrmals pro WocheErscheinungsrhythmus
- 39 mintypische Länge
- vor 20 Std.letzte Folge
Folgenzu den neuesten
JADEPUFFER: The Era of Agentic Ransomware Has Begun | Michael Clark
Michael Clark, director of Threat Research at Sysdig, talks about a recent LLM-driven extortion campaign dubbed JADEPUFFER, touching on how the team discovered it, how attackers’ “intent is now legible,” and what that means for defenders. L
The Cursor Bug Drama, Microsoft's Massive Patch Tuesday, and Scattered Spider Takes a Hit
This week we have some old-school disclosure drama when a researcher used full disclosure after months of silence from Cursor, then we discuss the enormous Patch Tuesday from Microsoft--662 bugs--and what it might mean going forward, and fi
Industrial Cybersecurity and Malware Archaeology with Lesley Carhart
Old malware like Conficker never really dies, and in industrial control and SCADA environments it can live forever undisturbed. Lesley Carhart of Dragos joins Dennis Fisher to talk about the myriad challenges of incident response in ICS net
Our AI Coding Future with Jack Cable
Jack Cable, co-founder and CEO of Corridor and a former senior technical advisor at CISA, discusses AI's impact on cybersecurity, vulnerability discovery, and coding practices.
Fable 5 Export Controls, the Dual Use Paradox, and the ARToken Phishing Framework
It's a pre-July 4th extravaganza! To celebrate, we dive into a little cybersecurity history with a story about the MySpace Samy worm, then we jumpe into the news of the week, including an update on the Fable 5 export control drama, and the
The (Bug) Disclosure Day Conundrum and How AI is Changing the Game with Katie Moussouris
Hacker and legendary vulnerability disclosure expert Katie Moussouris of Luta Security joins Dennis to talk about the Fable 5 munitions classification controversy, the recent re-emergence of the disclosure debate, how AI-assisted bug huntin
The Gaslight macOS Backdoor, Cisco Zero Day Exploit, and Operation Endgame
It's a non-AI podcast! This week we dig into the new Gaslight macOS implant that tries to trick security researchers with some anti-forensics techniques, then we discuss the Operation Endgame takedown of some malware infrastructure, and fin
How Much Do Data Breaches Really Cost? | Alex Pinto
Alex Pinto, one of the lead authors of the Verizon Data Breach Investigations Report, joins Dennis to talk about his organization's newest publication, the Breach Impact Study, which digs into the real world cost of breaches, both in dollar
The Shrinking Exploit Window, Patch Schedule Changes, and the Vulnpocalypse
This week was blessedly free of any major supply chain compromises, so we start by talking about new research from Anthropic on the shrinking window between bug disclosure and exploitation, then we discuss the changing patch schedule for Ci
How The Conversation Predicted Our Surveillance Society 50 Years Ago
Perhaps no film captures the paranoia and anxiety of the 1970s better than The Conversation, Francis Ford Copolla's masterpiece about reclusive surveillance expert Harry Caul, a man who it's safe to say has some demons. Decades before we al
Shai Hulud Returns, How Attackers are Using AI, and More Weird MSRC Behavior
We regret to inform you that there are more npm supply chain attacks this week, and a new variant of the Shai Hulud worm (https://decipher.sc/2026/06/01/new-shai-hulud-variant-hits-red-hat-npm-packages/) is involved. We also talk about the
Microsoft Has Forgotten Its Vulnerability Disclosure History
The recent Nightmare-Eclipse zero day drop and attendant drama has stirred up all kinds of trouble and unfortunately spurred Microsoft to publish a post scolding security researchers for not using the "proper channels" to disclose bugs, thr
Lessons in Resilience, Perseverance, and Leadership With Matt Eversmann
After being caught in one of the more notorious battles in modern American history, Matt Eversmann's military career has become the stuff of legend. The Battle of Mogadishu, immortalized in the book and movie Black Hawk Down, was a pivotal
Chain Chain Chain of Compromises
In the spring, a young attacker's fancy turns to supply chain compromises, and this season's crop includes the GitHub breach and the Grafana intrusion, which are connected and trace back to the TanStack supply chain attack and...TeamPCP. Li
What the Data Tells Us About Claude Mythos and Bug Exploitability | Jay Jacobs and Michael Roytman
Finding a huge pile of bugs with Claude Mythos is great, but the logical next step is figuring out how many of those vulnerabilities are likely to be exploited in the near future. Jay Jacobs and Michael Roytman of Empirical Security join De
Solving Hard Security Problems With an Outsider's Perspective | Sravish Sridhar
Unlike a lot of founders in the industry, Sravish Sridhar hasn't spent his career in the security world. He comes from a background in distributed computing and advanced math, and is a successful entrepreneur who's now bringing that experie
AI Has a Security Measurement Problem | Gary McGraw
Few people (if any) have spent more time thinking about and working on the hard problems in security and software than Gary McGraw, and he also happens to have a PhD in cognitive science and computer science and has been studying neural net
Inside the $285M Drift Protocol Heist | Ari Redbord
Ari Redbord, Global Head of Policy at TRM Labs, talks about the insane background behind the $285 million Drift Protocol crypto heist, how law enforcement agencies are investigating ransomware-linked cryptocurrency wallets, and how effectiv
The Canvas Attack, Ivanti and Palo Alto Exploits, and Dirty Frag
If we needed any more evidence that the internet was a mistake, this week provided it. We kick things off with a discussion of the Canvas breach that has affected thousands of schools worldwide, then we dig into the disclosure of two new vu
Fighting Cybercrime With Global Intelligence | Will Dixon
Will Dixon has seen the evolution of cybercrime as both a GCHQ intelligence officer and a private sector executive and analyst, and has seen the way these groups operate up close. He joins Dennis to talk about the ongoing threat from ransom
The fast16 Mystery, Stuxnet, and the History of Cyber Espionage | Juan Andres Guerrero-Saade
JAGS joins Dennis Fisher to unpack the complex history of fast16, a highly targeted cyber espionage platform that goes back as far as 2005, many years before Stuxnet, and was deployed against targets in Iran. JAGS has been in the APT huntin
cPanel Exploits, Copy Fail, and the History of Branded Bugs
The security news was out of hand this week, so we had to pick our spots. We start with the nasty cPanel/WHM vulnerability (https://decipher.sc/2026/04/29/researchers-warn-of-critical-cpanel-flaw-cve-2026-41940/)that affects tens of million
Defeating Online Scams and Disrupting the Cybercrime Chain | Ariana Mirian
Ariana Mirian, cofounder of startup Beesafe, joins Dennis to talk about the mechanics of online romance and finance scams, how the scammers draw in victims over weeks or months, and why user awareness isn't the complete solution to the prob
The Vercel Intrusion and What is Happening at CISA
This week we dig deep into the Vercel intrusion that emerged last weekend, how it happened, what the response was, and what the downstream effects may be for defenders. Then we talk about CISA's bizarre delayed response to the Axios npm com
Claude Mythos, Automated Bug Hunting, and AI Eating Everything
It's been A WEEK. Security news never sleeps, and neither does AI, so Dennis and Lindsey dive into all of the storylines coming from the Claude Mythos and Project Glasswing (https://decipher.sc/2026/04/13/myths-and-mythos-an-ai-vulnerabilit
The Era of AI-Led Vulnerability Research With Tom Ptacek
Dennis sits down with Tom Ptacek of Fly.io, a veteran security researcher, founder, and observer of the vulnerability landscape, to talk about the recent wave of AI-assisted vulnerability discovery and exploit development, specifically from
Mapping the Cybercrime Ecosystem With Andrew Northern of Censys
The internet is dark and full of terrors, but thanks to folks such as Andrew Northern, a principal security researcher at internet-mapping pioneer Censys, it doesn't have to be, Andrew joins Dennis to talk about the cybercrime ecosystem, ge
The Rapid Rise of AI Exploit Development and More Axios Compromise Effects
It's been quite a week in security news, and Dennis and Lindsey dig into the continued effects of the axios supply chain attack, the incredibly fast adoption of AI tools for vulnerability research and what that means for software makers and
Axios NPM Supply Chain Attack
Dennis and Lindsey dig into what we know do far about the supply chain attack on the axios NPM package, including how the attacker gained access to the maintainer's account, the window of exposure for the malicious packages, the behavior of
RSA Recap: Dancing Robots, AI Everywhere, and the Future of Security
Fresh off the plane from RSA, Dennis fills Lindsey in on everything she missed (and didn't miss) at this year's conference (0:23), from the insanity of the expo floor (4:06) to the appearance of a line of synchronized robots or spacemen or
