Decipher: security news that informs and inspires

Latest

OCT 23 · 29:19NewPHP2Shell and a Big CA Compromise OCT 21 · 11:03NewPHP2Shell Bugs and The Impact for Defenders | Ben Harris OCT 20 · 38:42NewWhen Hackers Meet Policymakers | Beau Woods OCT 16 · 43:13NewHacked Fridges, North Korean Laptop Farms, and Mercenary Spyware OCT 13 · 46:00NewThe ClickFix Epidemic and AI-Enabled Attacks | John Hammond OCT 11 · 42:14NewWhy Patching Faster Doesn't Work, Ransomware Negotiation War Stories, and the NSA View of AI Threats OCT 7NewPatching Faster Has Never Been the Answer

Laptop screen showing colourful source code in a dark editor under purple light

NewVulnerabilities

Critical PHP Flaws Disclosed, Patches Out Now

The two flaws are CVE-2026-109618 and CVE-2026-109619 and are said to affect PHP versions 5, 6, 7, and 8.

By Dennis Fisher · OCT 20

Ongoing Microsoft 365 Campaign Abuses ConnectWise App

Giant dark wooden Trojan horse statue against a blue sky with wispy clouds

The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust

Blurred, warped lines of colourful source code on a screen in purple and blue

NewVulnerabilities

Ivanti Connect Secure Zero-Day Exploited in Attacks

Brass padlock with its key in the lock, shackle open, on a dark table

Healthcare Cybersecurity Has a Problem. This Bill Wants to Fix It

This week on Decipher

Week 43

October 19–23, 2026

1 story · 3 episodes · 9 clips. Assembled automatically every week.

Get it by email →

The WeekPHP2Shell and a Big CA Compromise

Decipher TV

Watch

Subscribe on YouTube

The ClickFix Epidemic and AI-Enabled Attacks | John HammondConversations · OCT 13

Why Patching Faster Doesn't Work, Ransomware Negotiation War Stories, and the NSA View of AI ThreatsThe Week · OCT 11

Catch Me If You Can with Shea Serrano!The Week · OCT 6

Edge Devices Under Attack, a Threatcon Preview, and Communication BreakdownsThe Week · OCT 2

60 Seconds

We have a problem -- Wayne

Bigger threat: PHP2Shell or compromised certs?

Cloudflare helped avert PHP2Shell disaster

PHP2Shell shows how fragile the internet can be

How PHP2Shell can be reproduced quickly

LLMs finding vulnerabilities in core deployments now

Decipher Security Podcast

Listen

Decipher Security Podcast

Every episode, in audio. 394 episodes since 2018.

All episodes →

The WeekPHP2Shell and a Big CA CompromiseOCT 2329:19
ConversationsPHP2Shell Bugs and The Impact for Defenders | Ben HarrisOCT 2111:03
ConversationsWhen Hackers Meet Policymakers | Beau WoodsOCT 2038:42

Intrusions

Ongoing Microsoft 365 Campaign Abuses ConnectWise App

OCT 15 · Intrusions

The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust

OCT 7 · Intrusions

Healthcare Cybersecurity Has a Problem. This Bill Wants to Fix It

OCT 6 · Intrusions

FBI Warns of FortiBleed Attacks Leading to Lockouts, Ransomware

Vulnerabilities

Laptop screen showing colourful source code in a dark editor under purple light

NewVulnerabilities

Critical PHP Flaws Disclosed, Patches Out Now

OCT 13 · Vulnerabilities

Ivanti Connect Secure Zero-Day Exploited in Attacks

OCT 3 · Vulnerabilities

New Citrix NetScaler Issue Emerges

OCT 1 · Vulnerabilities

Cisco Warns of Critical, Exploited Catalyst SD-WAN Manager Flaw

AI

Patching Faster Has Never Been the Answer

AI May Be the Future, But Talent is What Builds Security

Researchers Find Windows Malware With Autonomous C2 Functionality

‘We Have Enough AI’: Realism in a Time of Relentless Hype