Skip to content

Decipher

Decipher

15
stories
SEP 2
latest
Decipher is everyone in white, mint and coral stencil letters on black fabric
AI

One Year of Decipher (Relaunched)

It’s been one year since we relaunched Decipher in September 2025. Here are the videos, podcasts, and articles that best reflect our mission statement: Security without fear.

DECIPHER · SEP 2 · 4 min
Intrusions

Google Disrupts ‘Prolific, Elusive’ China-Linked Actor

Google said it has found 53 victims that have been impacted by the group, which it has tracked since 2017.

Decipher · 2 min
Policy

Former US Defense Contractor Sentenced to Jail For Selling Exploits

In a parallel Tuesday announcement, the Treasury Department also sanctioned the exploit broker network that had acquired the tools.

Decipher · 3 min
Vulnerabilities

Researchers Warn of ‘Widespread’ Ivanti EPMM Exploitation

Exploitation of CVE-2026-1281 and CVE-2026-1340 is “widespread and mostly automated,” according to Unit 42 researchers.

Decipher · 2 min
Vulnerabilities

Chinese Actors Exploited Dell RecoverPoint for VMs Flaw Since 2024

The hardcoded credential vulnerability (CVE-2026-22769) exists in Dell RecoverPoint for Virtual Machines and has been exploited since mid-2024.

Decipher · 2 min
Vulnerabilities

Microsoft Fixes Six Exploited Bugs in February Patch Tuesday Updates

The exploited vulnerabilities in question exist across various products, from Microsoft Word to Windows Shell.

Decipher · 3 min
Policy

Singapore Says China-Linked Threat Actors Targeted Telecom Sector

UNC3886 is a Chinese espionage group known for targeting defense, tech, and telecom organizations across both the U.S. and Asia-Pacific-Japan regions.

Decipher · 2 min
Policy

US Gov Directive Cracks Down on Unsupported Edge Devices

CISA said potential exploitation of flaws in unsupported edge devices creates “a significant threat to federal property.”

Decipher · 2 min
Intrusions

Google Mandiant: ShinyHunters Attacks Target SaaS Platforms Via SSO, MFA Abuse

The series of incidents detailed by Mandiant researchers started in early to mid-January, and included a previously disclosed campaign involving Okta customers.

Decipher · 2 min
Vulnerabilities

Ivanti Discloses Exploited Critical EPMM Flaws

The vulnerabilities (CVE-2026-1281 and CVE-2026-1340) could lead to unauthenticated remote code execution if successfully exploited.

Decipher · 2 min
Vulnerabilities

Fortinet Warns of Critical Flaw After FortiCloud SSO Exploitation

Fortinet is rolling out updates for CVE-2026-24858, with fixes for some versions available as of Tuesday, and others in releases that are upcoming at an unspecified date.

Decipher · 2 min
Vulnerabilities

Cisco Fixes Unified Communications RCE Flaw Under Attack

Threat actors are attempting to exploit the Cisco remote code execution flaw (CVE-2026-20045) in the wild, according to a new security advisory.

Decipher · 2 min
Policy

UK Warns of DoS Attacks by Russian Hacktivist Group NoName057(16)

The network was linked to various attacks in 2023 and 2024, including ones against Swedish authorities and bank websites, and a wave of 14 different attacks on more than 250 German companies.

Decipher · 2 min

Newsletter

The Decipher Brief

Every week: the stories, the episode, the clips.

Newsletter sign-up is coming soon.