Decipher
All stories
Every story since Decipher went independent.
- 187
- stories
- OCT 27
- latest
Everything · page 7
A New Chinese APT Takes the Stage
Active since at least 2022, UAT-7290 demonstrates a significant capacity for conducting deep-seated espionage while simultaneously functioning as an initial access group.
Dennis Fisher · 2 min
React2Shell Attacks Continue to Build
After a peak of more than 430,000 attack sessions in late December, daily volumes targeting React2Shell have stabilized in the 300,000 to 400,000 range.
Dennis Fisher · 1 min
IBM Warns of Critical Auth Bypass Bug in API Connect
IBM published updates for the affected versions of API Connect on Jan. 2., and urged organizations to update affected versions as soon as possible.
Dennis Fisher · 1 min
Serious MongoDB Flaw CVE-2025-14847 Under Exploitation
MongoDB disclosed the vulnerability (CVE-2025-14847) on Dec. 19 and a few days later, a public exploit for it appeared online.
Dennis Fisher · 1 min
Is Kevin McCallister the Greatest Hacker in Movie History?
There may not be any computers in Home Alone, but few movie characters embody the old-school hacker ethos like Kevin McCallister does.
Dennis Fisher · 1 min
Threat Actors Target Unpatched Cisco AsyncOS Zero-Day
Threat actors are exploiting an unpatched zero-day vulnerability in Cisco AsyncOS software.
Lindsey O'Donnell-Welch · 2 min
Russian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure Attacks
Amazon researchers highlighted a “tactical pivot” by Russian GRU hackers who have been moving away from zero-day and N-day exploitation.
Lindsey O'Donnell-Welch · 2 min
The Enduring Hacker Legacy of Heat
It was 30 years ago this week that Michael Mann’s masterpiece Heat hit theaters like a semi T-boning an armored car. In addition to being a masterful heist movie and insightful depiction of the toll that obsession can exact, Heat is also a criminally underrated hacker movie.
Dennis Fisher · 1 min
Broad Exploit Activity Targets React2Shell Flaw
The vulnerability was disclosed publicly on Dec. 3 and researchers and threat intelligence teams immediately began seeing opportunistic and targeted exploitation attempts.
Dennis Fisher · 3 min
Government, Private Sector Officials Mull Telecom Security Woes
A year after Salt Typhoon’s telecom hack, private and public sector officials discussed next steps.
Lindsey O'Donnell-Welch · 4 min
Critical Flaw CVE-2025-55182 Affects React Server Components
All developers using React Server Components are urged to upgrade immediately, and some apps that don’t include React Server Function endpoints could be vulnerable, as well.
Dennis Fisher · 2 minNew MuddyWater Campaign Hits Israeli Targets
The victims in Israel span multiple industries, including technology, engineering, manufacturing, local government, and education.
Dennis Fisher · 2 min
New Shai Hulud NPM Worm Emerges
Researchers from Wiz are currently tracking more than 25,000 affected repositories across approximately 350 unique users.
Dennis Fisher · 2 min
DoJ Sanctions Bulletproof Hosting Provider Used By Ransomware Groups
The provider, Media Land LLC, has been used by ransomware actors like Lockbit, BlackSuit, and Play, and its infrastructure has been leveraged across several distributed denial-of-service (DDoS) attacks against US companies and critical infrastructure.
Lindsey O'Donnell-Welch · 2 min
Fortinet CVE-2025-64446 Under Active Attack
That vulnerability (CVE-2025-64446) affects several versions of FortiWeb and CISA has added it to its Known Exploited Vulnerabilities catalog.
Dennis Fisher · 2 min
Marks and Spencer’s Profit Drop: The Financial Toll of Cyberattacks
The financial impacts of cyberattacks are hard to measure – but they lend critical context to conversations around security risk at the boardroom level.
Lindsey O'Donnell-Welch · 5 min
Google Wants to Snuff Out ‘Lighthouse’ Phishing Kit
Google is taking legal action “designed to dismantle the core infrastructure” of the Lighthouse phishing-as-a-service operation.
Lindsey O'Donnell-Welch · 2 min
APT Targets Cisco and Citrix Zero Days
The chain of discovery began with Amazon’s security honeypot service, MadPot, which detected exploitation attempts for the Citrix Bleed Two vulnerability (CVE-2025-5777) before its public disclosure
Dennis Fisher · 2 minMicrosoft Warns of Exploited Windows Kernel Zero-Day
The important-severity flaw (CVE-2025-62215) has been exploited, said Microsoft.
Lindsey O'Donnell-Welch · 2 min
Q&A: Sean Zadig of Yahoo on Employing AI in Security
There are plenty of challenges and pitfalls for security teams looking to deploy AI tools and Zadig said Yahoo is taking a measured, careful approach. This is a condensed and edited portion of our discussion.
Dennis Fisher · 4 min
