Decipher
All stories
Every story since Decipher went independent.
- 186
- stories
- OCT 20
- latest
Everything · page 4
Grafana Investigating Token Compromise and Extortion Attempt
An “unauthorized party” obtained a token with access to the Grafana Labs GitHub environment and downloaded Grafana’s codebase.
Lindsey O'Donnell-Welch · 2 min
Ongoing Supply Chain Attack Expands to PyPi
Researchers have linked the compromise to the “Mini Shai-Hulud” campaign, which has been ongoing for several weeks and is associated with TeamPCP.
Dennis Fisher · 3 min
Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973
The vulnerability (CVE-2026-6973) exists in Ivanti Endpoint Manager Mobile (EPMM) is being exploited by threat actors.
Lindsey O'Donnell-Welch · 2 min
New Dirty Frag Linux Bug Emerges
The vulnerability class is a potent new iteration of kernel bugs that corrupt the page cache of read-only files and is a follow-on to the recently disclosed Copy Fail Linux LPE bug.
Dennis Fisher · 3 min
Palo Alto CVE-2026-0300 Actively Exploited
PAN released an advisory about the vulnerability on Tuesday and said it will release a patch in an upcoming version of PAN-OS.
Dennis Fisher · 1 min
Karakurt Ransomware Negotiator Sentenced to 8 Years Prison
Deniss Zolotarjovs, 35, of Moscow, Russia, was a member of a ransomware group called Karakurt, which was led by the former operators of Conti.
Lindsey O'Donnell-Welch · 3 min
Serious Apache Web Server Bug Patched
The vulnerability (CVE-2026-23918) only affects version 2.4.66 and the Apache Software Foundation has released a fix for the bug in version 2.4.67.
Dennis Fisher · 1 min
A Copy Fail FAQ
The latest branded bug is a slick, portable LPE in many Linux kernels going back to 2017.
Dennis Fisher · 3 min
Researchers Warn of Critical cPanel Flaw CVE-2026-41940
cPanel published a terse advisory saying that there was an issue with “session loading and saving” and that it affects every version of the software.
Dennis Fisher · 2 min
Windows CVE-2026-32202 Exploited in the Wild
The current exploits are targeting CVE-2026-32202, a bug in the Windows Shell that allows an attacker to gain access to some sensitive data on the target network.
Dennis Fisher · 2 min
Stealthy Deep#Door Stealer Targets Windows Machines, Credentials
Deep#Door stealer is being used in intrusions targeting Windows machines, using an obfuscated deployment chain.
Dennis Fisher · 3 min
Alleged Silk Typhoon Hacker Extradited to US
The hacker was allegedly involved in Hafnium campaigns that targeted Exchange server flaws and in attacks against COVID-19 research institutions.
Lindsey O'Donnell-Welch · 2 min
Firestarter Malware Sparks Updated CISA Emergency Directive
CISA is warning of a persistent backdoor called Firestarter that’s being used in attacks against Cisco Firepower and Secure Firewall products.
Lindsey O'Donnell-Welch · 4 min
Attackers Target Checkmarx KICS Ecosystem
Yet another supply chain attack has hit the open source ecosystem, this time impacting the Checkmarx KICS Docker Hub repository.
Lindsey O'Donnell-Welch · 3 minCisco CVE-2026-20133 Targeted in Active Attacks
The three newly added bugs are CVE-2026-20122, CVE-2026-20128, and CVE-2026-20133, the last of which had not been identified in active attacks before.
Dennis Fisher · 2 min
Vercel Says Internal Systems Hit in Breach
The incident came to light on Sunday and the company says it has brought in an incident response provider to investigate the intrusion. Details of the intrusion are scant at this point.
Dennis Fisher · 3 min
New Campaign Targets Mac Users With Novel Malware
The campaign targets high-value individuals and organizations in the cryptocurrency, digital assets, and finance sectors.
Dennis Fisher · 2 min
Myths and Mythos: An AI Vulnerability Research FAQ
It’s still very early days for all of this, and relatively little is known about Claude Mythos’s real capabilities, so we wanted to dig into what actually is known and what it all means.
Dennis Fisher · 6 min
Anthropic’s Claude Mythos is Just the Beginning
Anthropic’s Project Glasswing initiative, announced this week, sent shockwaves across the cybersecurity world.
Lindsey O'Donnell-Welch · 3 min
US Gov: Iran-Linked Actors Targeting Critical Infrastructure PLCs
The advisory comes amid the ongoing conflict between the U.S. and Iran. CISA said Iran-linked APT campaigns targeting U.S. orgs have recently escalated.
Lindsey O'Donnell-Welch · 2 min
