Decipher
All stories
Every story since Decipher went independent.
- 186
- stories
- OCT 20
- latest
Everything · page 5
The $285M Drift Protocol Heist Was ‘6 Months in the Making’
During the largest DeFi hack of 2026, it only took attackers 12 minutes to drain millions in user assets – but the build up to the attack took six months of meticulously planned social engineering.
Lindsey O'Donnell-Welch · 5 min
Fortinet CVE-2026-35616 Actively Exploited
The company published an advisory on Saturday and urged all customers who are running affected versions of the software to install the hotfix as quickly as possible. The bug affects versions 7.4.5 and 7.4.6 of FortiClient EMS.
Dennis Fisher · 1 min
Supply Chain Attack Hits Axios NPM Packages
Axios is a dependency in nearly 80% of all cloud and code environments and sees approximately 100 million downloads per week.
Dennis Fisher · 4 min
Command Injection Bug in OpenAI Codex Exposed GitHub OAuth Tokens
The bug is a command injection issue and lies in the way that Codex processed GitHub branch names during the execution of tasks.
Dennis Fisher · 3 min
TeamPCP’s Supply Chain Attack Spree Continues
TeamPCP’s latest victim is the Telnyx Python SDK on PyPl, coming after a wave of supply chain hits on Aqua Trivy, Checkmarx KICS/OpenVSX, and LiteLLM.
Lindsey O'Donnell-Welch · 3 min
For AI and Security, ‘The Storm is Coming’
Technology moves quickly, and as we’re discovering yet again, threat actors move just as quickly, and are adopting AI tools and platforms at an astonishing rate.
Dennis Fisher · 3 min
DoJ Sentences Russian Initial Access Broker to 6 Years in Prison
Aleksei Volkov, 26, has been sentenced to almost seven years in prison for his role in facilitated Yanluowang ransomware group attacks.
Lindsey O'Donnell-Welch · 2 min
Mark Watney: Space Hacker
Wendy Nather joins Dennis Fisher to dig into the nutrient-rich narrative soil that produced a modern classic that truly epitomizes the hacker ethos. We are the greatest podcasters on Mars!
Dennis Fisher · 1 min
EU Sanctions Iranian and Chinese Companies for Targeting Member Nations
The new sanctions list includes two China-based technology companies, two of their co-founders, and an Iranian firm, all implicated in a range of attacks from corporate espionage and critical infrastructure disruption to disinformation campaigns.
Dennis Fisher · 2 min
US, Europol Crack Down on SocksEscort Residential Proxy Network
The US and other international partners seized 34 SocksEscort domains and 23 servers in seven countries. The U.S. also froze $3.5 million in cryptocurrency.
Decipher · 2 min
APT28 Reemerges with Modern Espionage Arsenal, Code Tied to 2010s Operations
The modern Sednit arsenal is centered on two highly-developed implants, deployed systematically in tandem to ensure persistent access.
Dennis Fisher · 3 min
Mister Decipher’s Neighborhood
It’s a beautiful day in the neighborhood for hacking! Come along on a magical adventure as Mr. Decipher teaches you about the dangers of brute-force attacks!
Dennis Fisher · 1 min
Google: Commercial Surveillance Vendors Dominated Zero-Day Exploitation in 2025
Out of 42 unique zero days tracked by Google in 2025, 18 were attributed to CSVs, while 15 were linked to state-sponsored espionage groups.
Decipher · 3 min
Microsoft, Europol Disrupt Tycoon 2FA Phishing Service
The comprehensive effort, which involved seizing 330 active domains, cuts off a critical pipeline for account takeovers that targeted over 500,000 organizations and sent tens of millions of fraudulent emails monthly.
Dennis Fisher · 3 min
Q&A: Tod Beardsley on How to Use CISA’s KEV Catalog
Without context, the KEV catalog is just a very large collection of data. Tod Beardsley is the former CISA KEV section chief, and he recently released a paper called KEVology that provides key context and evaluates the value of certain enrichment signals.
Dennis Fisher · 4 min
Cisco, NSA Warn of Attacks Targeting Catalyst SD-WAN Zero Day
Cisco released software updates on Feb. 25 to fix the vulnerability, which affects both on-premises and cloud deployments of the Catalyst SD-WAN Controller.
Dennis Fisher · 2 min
Microsoft Uncovers New Malicious Campaign Targeting Developers
This campaign is an offshoot of the more familiar and pervasive fake job interview and phony tech worker scams that have been coming from North Korea for several years.
Dennis Fisher · 3 min
Google Disrupts ‘Prolific, Elusive’ China-Linked Actor
Google said it has found 53 victims that have been impacted by the group, which it has tracked since 2017.
Decipher · 2 minFormer US Defense Contractor Sentenced to Jail For Selling Exploits
In a parallel Tuesday announcement, the Treasury Department also sanctioned the exploit broker network that had acquired the tools.
Decipher · 3 minResearchers Warn of ‘Widespread’ Ivanti EPMM Exploitation
Exploitation of CVE-2026-1281 and CVE-2026-1340 is “widespread and mostly automated,” according to Unit 42 researchers.
Decipher · 2 min
