Decipher
All stories
Every story since Decipher went independent.
- 186
- stories
- OCT 20
- latest
Critical PHP Flaws Disclosed, Patches Out Now
The two flaws are CVE-2026-109618 and CVE-2026-109619 and are said to affect PHP versions 5, 6, 7, and 8.
DENNIS FISHER · OCT 20 · 3 min
Everything
Ivanti Connect Secure Zero-Day Exploited in Attacks
Ivanti warns of active exploitation of CVE-2026-104935, a high-severity Connect Secure flaw.
Lindsey O'Donnell-Welch · 2 min
Healthcare Cybersecurity Has a Problem. This Bill Wants to Fix It
Two years after the largest healthcare cybersecurity incident in history, the senate has passed The Health Care Cybersecurity and Resiliency Act of 2025.
Lindsey O'Donnell-Welch · 4 min
Patching Faster Has Never Been the Answer
Patching is a necessary evil and doing it manually in any decent sized organization was essentially impossible in the pre-AI times and is now pure folly.
Dennis Fisher · 3 min
FBI Warns of FortiBleed Attacks Leading to Lockouts, Ransomware
FortiBleed attacks are continuing, with the FBI and Secret Service warning of compromised Fortinet firewalls, account lockouts and potential ransomware activity.
Lindsey O'Donnell-Welch · 2 min
AI May Be the Future, But Talent is What Builds Security
While AI is reshaping the threat landscape, the people defending against those threats remain vital.
Dennis Fisher · 3 min
Catch Me If You Can is the Social Engineeer’s Playbook
The reality is that a lot of what hackers actually do is just social engineering in one form or another.
Dennis Fisher · 1 min
New Citrix NetScaler Issue Emerges
The vendor says this is a configuration-dependent issue rather than a failure of the security patches themselves.
Dennis Fisher · 3 min
Cisco Warns of Critical, Exploited Catalyst SD-WAN Manager Flaw
Cisco “strongly recommends” customers apply a patch for a critical API authentication bypass that’s being exploited.
Lindsey O'Donnell-Welch · 1 min
Inside the Citrix NetScaler Zero Day Saga
This case is yet another reminder just how important vendor communication is in such incidents and how much uncertainty can hamper security.
Dennis Fisher · 1 min
Researchers Warn of Citrix NetScaler Exploitation
On Saturday, researchers from watchTowr Labs said they had credible information that attackers were exploiting an unknown RCE vulnerability in Citrix NetScaler boxes.
Dennis Fisher · 3 min
F5 CVE-2026-94127 Targeted in Active Attacks
This vulnerability allows for unauthenticated remote code execution and shows how a missing bounds check—a classic programming error.
Dennis Fisher · 2 min
Researchers Find Windows Malware With Autonomous C2 Functionality
Cisco Talos researchers identified ClosedQuorum, a Windows implant that uses multiple LLMs to autonomously select attack actions. The catch: there’s no confirmation that it’s actually been deployed in the wild.
Lindsey O'Donnell-Welch · 3 minFake LastPass Authenticator Pages Deliver Rapuncel Infostealer
Attackers impersonated LastPass Authenticator on fake GitHub pages to deliver the Rapuncel infostealer in a campaign involving 40 fake brands.
Lindsey O'Donnell-Welch · 2 min
‘We Have Enough AI’: Realism in a Time of Relentless Hype
Let’s ask a simple question that seems to be getting lost in all of the credulous fervor around AI: How’s this working out for everyone?
Dennis Fisher · 3 min
New SparroWocky Backdoor Targets Latin America
Active since at least August 2025, the malware represents a functional pivot from the threat actor’s existing SparrowDoor backdoor.
Dennis Fisher · 3 min
US, UK Agencies Detail Iranian Malware Campaign Targeting Dissidents
A new joint advisory from multiple law enforcement agencies this week warned of an Iranian cyber campaign targeting dissidents and journalists in the U.S., UK, and elsewhere.
Lindsey O'Donnell-Welch · 2 minHere Come the AI-Generated BEC Scams
Messages delivered through legitimate third-party email infrastructure had C-suite sender display names, custom signatures, and direct approval notes.
Dennis Fisher · 2 min
