Decipher
All stories
Every story since Decipher went independent.
- 188
- stories
- OCT 27
- latest
Everything · page 8
Q&A: Sean Zadig of Yahoo on Employing AI in Security
There are plenty of challenges and pitfalls for security teams looking to deploy AI tools and Zadig said Yahoo is taking a measured, careful approach. This is a condensed and edited portion of our discussion.
Dennis Fisher · 4 min
Google: Threat Actors Testing AI During Malware Execution
Threat actors are now using LLMs in malware during execution, as a way to alter the malware’s behavior to enable detection evasion and more.
Lindsey O'Donnell-Welch · 3 min
With AI and Security, ‘Everyone is Still Learning’
For many organizations, the biggest potential risk that arises from the use of AI tools is the leakage or mishandling of sensitive data.
Dennis Fisher · 3 min
Google Chrome to Enable HTTPS Default Browsing
In October 2026, Google will change the default settings in Chrome to include its existing “Always Use Secure Connections” feature.
Lindsey O'Donnell-Welch · 2 min
New Lazarus Group Campaign Targets EU Defense Companies
The suspected objective of the Lazarus group was the exfiltration of proprietary information and manufacturing expertise, particularly pertaining to UAV technology.
Dennis Fisher · 3 min
US Facing ‘Unprecedented Setback’ in Cyber Policy Priorities: CSC Report
“For the first time, there has been a substantial reversal of the advances made in previous years,” warned the Cyberspace Solarium Commission report.
Lindsey O'Donnell-Welch · 3 min
It’s All Just Electrons: The Enduring Legacy of Sneakers
“The world isn’t run by weapons anymore, or energy, or money. It’s run by little ones and zeroes, little bits of data. It’s all just electrons.”
Dennis Fisher · 1 min
Why WarGames is Still Predicting the Future 40 Years Later
WarGames may be 42 years old but its prescience about our current technocracy and race to take humans out of the loop is as clear as ever
Dennis Fisher · 1 min
F5: Attacker Accessed BIG-IP Source Code, Bug Data
The company discovered the intrusion in August but did not say when the attackers first gained access to F5’s systems or how long they had access.
Dennis Fisher · 2 min
Microsoft Fixes Actively Exploited Flaws in Patch Tuesday Release
Microsoft issued fixes for several actively exploited vulnerabilities in its latest patch Tuesday release.
Lindsey O'Donnell-Welch · 2 min
Oracle Warns of E-Business Suite Bug
A Saturday advisory from Oracle’s CISO warned of a vulnerability impacting some deployments of E-Business Suite (CVE-2025-61884).
Lindsey O'Donnell-Welch · 1 min
Oracle Clop Data Theft Campaign Started Months Ago
The Clop extortion campaign on Oracle customers last week stemmed from months of intrusion activity tracking back to July 10.
Lindsey O'Donnell-Welch · 2 min
Data Connects Scanning Surges for Cisco, Fortinet, PAN Devices
Researchers say that all three campaigns are being driven at least in part by one threat actor.
Dennis Fisher · 1 minAttackers Exploit Critical GoAnywhere Bug to Spread Medusa Ransomware
A critical GoAnywhere flaw (CVE-2025-10035) is being targeted in attacks by a threat group known for deploying Medusa ransomware.
Lindsey O'Donnell-Welch · 2 min
Oracle Patches E-Business Suite Zero-Day Amid Clop Extortion Attacks
Oracle has patched a critical zero-day remote code execution flaw in its E-Business Suite, which was being exploited by the Clop gang in a rash of data theft and extortion attacks.
Lindsey O'Donnell-Welch · 2 min
VMware Patches Bug Exploited By State Actors
The vulnerability (CVE-2025-41244) is easily exploitable, although it requires existing privileges on the target product.
Dennis Fisher · 2 min
Microsoft Releases New Agentic AI Tools
The foundation of the new offerings is MIcrosoft Sentinel, the company’s security platform, that now includes the availability of the massive Sentinel data lake.
Dennis Fisher · 1 minAkira Ransomware Actors Target SonicWall SSLVPN
This aggressive approach aligns with Akira’s historical tactics of exploiting VPN infrastructure as an initial access vector.
Dennis Fisher · 2 min
Cisco Warns of Attacks on Two ASA Flaws
Cisco’s Talos threat intelligence team said this campaign is the work of an actor it tracks as UAT4356, an APT team that has previously targeted ASA devices.
Dennis Fisher · 3 min
GitHub Aims to Improve npm Security After Malware Campaigns
GitHub said the changes will help “fortify the security of the software supply chain” after a recent surge of attacks targeting the npm ecosystem.
Lindsey O'Donnell-Welch · 4 min
