Decipher
All stories
Every story since Decipher went independent.
- 186
- stories
- OCT 20
- latest
Everything · page 2
Russian National Extradited to US to Face Bank Account Takeover Charges
A Russian web developer allegedly behind a massive bank account takeover scheme was extradited to the U.S.
Lindsey O'Donnell-Welch · 2 min
MicroTik Routers Under Attack in New Campaign
Labeled “MikroTrick” by researchers at CERT Polska who discovered and disclosed six vulnerabilities in the software, the campaign targets devices with SSH services reachable from the public internet
Dennis Fisher · 3 min
New Campaign Weaponizes Microsoft Teams for Remote Access
Unlike standard commodity malware that aims for quick credential theft, this campaign features a manual, hands-on-keyboard scheme designed to escalate rapidly from a single compromised workstation to broad, network-wide access.
Dennis Fisher · 2 min
One Year of Decipher (Relaunched)
It’s been one year since we relaunched Decipher in September 2025. Here are the videos, podcasts, and articles that best reflect our mission statement: Security without fear.
Decipher · 4 min
Critical Artifactory Bug Under Attack
CVE-2026-82329 is a simple authentication bypass that can allow an attacker to get admin privileges quite easily
Dennis Fisher · 1 min
Linux Foundation Backs New TRACE AI Security Standard
TRACE aims to help prove that sensitive data in organizations is being handled “according to policy” by AI agents and open weight models.
Lindsey O'Donnell-Welch · 2 min
Unauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520
The chain leverages two distinct vulnerabilities—an authentication bypass and an unsafe .NET type instantiation flaw—to provide full server control without valid credentials.
Dennis Fisher · 2 min
Inside ExploitGym: How Researchers Are Measuring AI Agent Exploitation Capabilities
A research collaboration, directed by UC Berkeley, led to the development of ExploitGym, a large-scale benchmark for measuring AI agents’ abilities to develop exploits. Here’s the story of how ExploitGym came to be.
Lindsey O'Donnell-Welch · 9 min
MLflow Bug Actively Exploited to Steal Credentials
This flaw allows remote, unauthenticated attackers to read sensitive data from internal network services or cloud metadata endpoints.
Dennis Fisher · 2 min
Researchers Find Persistent Backdoor in Zbtlink Routers
The vulnerability, named EndlessDoors, affects more than 20 specific models of networking hardware sold globally under both the Zbtlink and Wiflyer brand names.
Dennis Fisher · 2 min
OpenAI, Anthropic AI Agents Performed ‘Unsanctioned’ Actions During Cyber Tests
OpenAI and Anthropic models made “unsanctioned” actions during tests by the AI Security Institute. Here’s what we know.
Lindsey O'Donnell-Welch · 5 min
Exploits Target N-able CVE-2026-18577 Flaw
The vulnerability, which effectively provides unauthenticated administrative access to the RMM console, stems from two related security issues
Dennis Fisher · 3 min
OpenAI-Hugging Face Breach: Five New Things We Learned
New details emerged this week about an intrusion by OpenAI models on Hugging Face’s infrastructure.
Lindsey O'Donnell-Welch · 4 minYour LLM Is Showing: New Data Finds Sharp Rise in Exposed AI Tools
Exposures of AI/LLM tools has risen by more than 60 percent over the last nine months.
Dennis Fisher · 2 min
Critical SharePoint Bug Under Attack
The flaw (CVE-2026-50522) affects SharePoint Enterprise Server 2016 and 2019 as well as SharePoint Subscription service. Microsoft released the fix for this vulnerability on July 14.
Dennis Fisher · 1 minThe Joy and Pain of OT Cybersecurity: A Conversation With Lesley Carhart
Lesley Carhart has been cleaning up malware, intrusions, ransomware, and other messes in OT networks for the better part of two decades and recently joined Dennis Fisher on the Decipher podcast to talk about the special challenges OT networks present
Dennis Fisher · 4 min
Bug in Cursor Allows Simple RCE
This exploit occurs entirely in the background, requiring no user approval, dialogue prompts, or interaction.
Dennis Fisher · 3 min
Unsealed DoJ Indictment Targets Bulletproof Hosting Services
Media Land and ML.Cloud offer bulletproof hosting services that help keep threat actors and their infrastructure hidden from law enforcement.
Lindsey O'Donnell-Welch · 2 min
US Sanctions First VPN Cybercriminal Service
First VPN has been active for more than a decade and is specifically designed for ransomware operators, fraud groups, and other cybercriminals trying to hide malicious activity from law enforcement.
Lindsey O'Donnell-Welch · 2 minNew Forg365 PhaaS Kit Emerges
Like EvilTokens and Kali365, Forg365 is distributed through Telegram and offered as a commoditized service for attackers who want to target Microsoft 365 environments.
Lindsey O'Donnell-Welch · 2 min
