- #198 -25Technologie
- #173beste Platzierung
- mehrmals pro WocheErscheinungsrhythmus
- 39 mintypische Länge
- vor 22 Std.letzte Folge
Folgenzu den neuesten
RSA 2026 Preview
With the RSA Conference on the horizon, Dennis and Lindsey are here with a preview of the conference's more interesting sessions and keynotes, a discussion of the recent and ancient history of the conference, and a quick game: Is this a sec
Mark Watney Is a Space Hacker in The Martian
Sure, space pirate is a cool title, but what about space hacker? Way cooler! With the imminent release of Project Hail Mary, Wendy Nather joins Dennis Fisher to dig into the nutrient-rich narrative soil that produced a modern classic that t
Fancy Tools From Fancy Bear, Another Proxy Network Takedown, and A Look Ahead
This week's news includes a reappearance by an old favorite, APT28, aka Fancy Bear, which is back with some nasty new implants and tools it is deploying against targets in Ukraine (2:10), and we also have another law enforcement disruption
The Wild, Wild World of Exploits With Caitlin Condon
The process of developing and deploying exploits is a complex and controversial one and it's often a black box to outside observers. To help shine a light on how this all works, Caitlin Condon of VulnCheck joins Dennis Fisher for a deep div
The Zero Day Landscape, Tycoon 2FA Disruption, and KEVology
Every day is zero day, and this week we talked about the new Google Threat Intelligence Group report on the zero day exploit landscape in 2025 (2:22) and who's exploiting what, then we discuss Microsoft's disruption of the Tycoon 2FA cyberc
We Need to Talk About KEV With Tod Beardsley
Tod Beardsley, VP of security research at runZero and former KEV section chief at CISA, joins Dennis Fisher to talk about the evolution of the Known Exploited Vulnerabilities catalog, how much value defenders should place on a specific bug
Cisco SD-WAN Zero Day, Google Disrupts Chinese Campaign, and More Cyber on The Pitt
This week Lindsey rejoins Dennis to talk about the attacks targeting a zero day in Cisco's Catalyst SD-WAN Controller (2:17), Google's disruption of a China-linked cyber espionage campaign targeting telecom infrastructure (6:30), and the ne
China Targets Dell Flaw, New Ivanti Exploitation, and Cyber Shenanigans on The Pitt!
It's a light news week, but we have some fun content for you! This week, we talk about our latest hacker movie episode--STAR WARS (https://youtu.be/FHZC6i-co8Y?si=5hegjcz6B7DFdH5i)--which is up on the site and all of our feeds now (0:25), t
The Hacker Movie Canon: Star Wars
STAR WARS isn't just one of the more successful and iconic movies of all time and the basis for a worldwide sci-fi empire, it's also a true hacker story. Wade Baker and Rich Mogull, two Star Wars scholars, join Dennis Fisher to break down t
Six Zero Days From Microsoft, One From Apple, and a CSI: Cyber Throwback
This week was a cornucopia of zero days. We talk about the six (!) actively exploited vulnerabilities that Microsoft patched this week in its February update (https://decipher.sc/2026/02/11/microsoft-fixes-six-exploited-bugs-in-february-pat
How to Stay Ahead of Attackers With watchTowr's Ryan Dewhurst
Attackers are moving faster and faster every day, and the challenge of keeping pace is a daunting one. But it's not impossible. watchTowr's Ryan Dewhurst joins Dennis Fisher to talk about how the "magic" of computers first captured his imag
Dumping Edge Security Devices, the SystemBC Botnet, and the Joy of Joybubbles
This week we talk about the new CISA Binding Operational Directive that sets a deadline for removing end of support edge security devices (https://decipher.sc/2026/02/05/us-gov-directive-cracks-down-on-unsupported-edge-devices/) from federa
Fortinet and WinRAR Exploitation, Google's IPIDEA Disruption, and Our Favorite Cybersecurity Creators
It was a busy week in the cybers! Today we start with the targeted exploitation of another Fortinet vulnerability (https://decipher.sc/2026/01/28/fortinet-warns-of-critical-flaw-after-forticloud-sso-exploitation/) (CVE-2026-24858) that enab
The RedVDS Takedown, Yet Another Chinese APT Emerges, and the StackWarp AMD Bug
This week, we talk about how Microsoft disrupted a long-running, large-scale cybercrime-as-a-service platform called RedVDS that has been active since 2019 and was used in high-volume phishing and BEC scams (1:00), then we discuss the resea
The Future of Vulnerability Management With Jeremiah Grossman and Robert "RSnake" Hansen
Jeremiah Grossman and Robert Hansen, two of the more influential and accomplished leaders and entrepreneurs in the cybersecurity community, have seen and done it all in their careers. From their roles as the driving forces behind pioneering
A New Chinese APT Debuts and React2Shell Attacks Spike
The new year is here! And so are the attacks. The first full week of 2026 brought us new research from Cisco Talos on a China-nexus APT group called UAT-7290 (https://decipher.sc/2026/01/08/a-new-chinese-apt-takes-the-stage/) that is expand
The Hacker Movie Canon: Home Alone
There may not be any computers in Home Alone, but few movie characters embody the old-school hacker ethos like Kevin McCallister does. Resourceful, clever, determined, and creative, Kevin uses all of the tools and talents at his disposal to
Russian Targeting of Edge Devices. Cisco AsyncOS Zero Day, and React2Shell Won't Go Away
As we ease into the holidays, the security news doesn't stop coming. This week we discuss the research from AWS threat intelligence on Russian adversaries targeting a variety of network edge devices (https://decipher.sc/2025/12/16/russian-h
The Hacker Movie Canon: Die Hard
Pete Baker and Zoe Lindsey join Dennis Fisher on the roof of Nakatomi Plaza to discuss one of the great action classics* and a beloved movie in the hacker community: Die Hard. Yippee ki-yay! *NOT a Christmas movie Support the show (https://
More React Bugs Reaction, the Challenge of Vulnerability Management, and CI Attacks
This week gave us the gift of some more React Server Components vulnerabilities and further exploitation of the previously disclosed bugs by a variety of threat groups. There were also a long list of vulnerabilities disclosed by Microsoft,
From CIA Officer to a Career in Cybersecurity With Erin Whitmore
Coming from a military family, Erin Whitmore was prepared for a career of service. But her path took her not into the military, but the intelligence community, first in the private sector supporting the DIA and NGA, and later as a cybersecu
React2Shell, Typhoon Attacks, and Why Our Infrastructure is So Vulnerable
Dennis and Lindsey react (!) to the React2Shell vulnerability disclosure (https://decipher.sc/2025/12/03/critical-flaw-cve-2025-55182-affects-react-server-components/) and the quick exploitation of it by Chinese threat actors, then discuss
Jeff Gothelf on Designing for Users, Enterprise Agility, and the AI Conundrum
Jeff Gothelf, a renowned author and product strategist and co-founder of Sense and Respond Learning (https://www.senseandrespond.co/about-us), joins Dennis to discuss the need to design products with users in mind, how critical thinking can
DoJ Sanctions, the SEC Abandons the SolarWinds Action, and the FCC Reverses Course on Telecom Security
It's an acronym-filled, government-only bonanza this week! We discuss the DoJ sanctioning (https://decipher.sc/2025/11/19/doj-sanctions-bulletproof-hosting-provider-used-by-ransomware-groups/) Russian bulletproof hosting provider Media Land
Rich Mogull on the Cloudflare Outage, Resilience, and Single Points of Failure
Dennis is joined by Rich Mogull (https://slaw.securosis.com/), chief analyst at the Cloud Security Alliance (https://cloudsecurityalliance.org/), cloud security trainer, and all around good guy to talk about the Cloudflare outage, why the i
Lighthouse Phishing Kit Takedown, Zero Day Mysteries, and Measuring Cyber Attack Costs
This week was a bit of a throwback to olden times, with the disclosure by Amazon threat intelligence of zero days in Cisco and Citrix products that were exploited by an unnamed APT, and Google using legal action to disrupt the Lighthouse ph
The Hacker Movie Canon: The Social Network
"You know, you really don't need a forensics team to get to the bottom of this. If you guys were the inventors of Facebook, you'd have invented Facebook." Melanie Ensign joins Dennis Fisher and Lindsey O'Donnell-Welch to discuss David Finch
Yahoo's Sean Zadig on How to Raise a Hacker Safely and How Maybe AI Isn't Changing Everything
Yahoo CISO and Chief Paranoid Sean Zadig (https://www.yahooinc.com/paranoids/suddenly-a-ciso-four-pieces-of-transitional-advice) returns to the podcast for a discussion with Dennis Fisher about how to go about getting kids interested in tec
Shadow AI Is Eating the World, the Return of Hacking Team, and the Commercial Spyware Landscape
We don't do holiday themed episodes in this house, so no tricks, but we have some treats for you. First we discuss the problem of shadow AI (1:00) and how it seems like we're just repeating the mistakes of previous tech waves in ignoring se
US Cybersecurity Going in Reverse, the AWS Outage, and is CISA Okay
This week saw a blessed lack of major vulnerabilities, but there was plenty of other news to dig into. We discuss the fallout from the AWS outage (0:36), the conclusions from the latest Cyberspace Solarium Commission report (https://deciphe
