Decipher
Lindsey O'Donnell-Welch
Lindsey O’Donnell-Welch is an award-winning journalist who strives to shed light on how security issues impact not only businesses and defenders on the front line, but also the daily lives of consumers.
- 59
- stories
- OCT 13
- latest
Stories by Lindsey · page 3
Google: Threat Actors Testing AI During Malware Execution
Threat actors are now using LLMs in malware during execution, as a way to alter the malware’s behavior to enable detection evasion and more.
Lindsey O'Donnell-Welch · 3 min
Google Chrome to Enable HTTPS Default Browsing
In October 2026, Google will change the default settings in Chrome to include its existing “Always Use Secure Connections” feature.
Lindsey O'Donnell-Welch · 2 min
US Facing ‘Unprecedented Setback’ in Cyber Policy Priorities: CSC Report
“For the first time, there has been a substantial reversal of the advances made in previous years,” warned the Cyberspace Solarium Commission report.
Lindsey O'Donnell-Welch · 3 min
Microsoft Fixes Actively Exploited Flaws in Patch Tuesday Release
Microsoft issued fixes for several actively exploited vulnerabilities in its latest patch Tuesday release.
Lindsey O'Donnell-Welch · 2 min
Oracle Warns of E-Business Suite Bug
A Saturday advisory from Oracle’s CISO warned of a vulnerability impacting some deployments of E-Business Suite (CVE-2025-61884).
Lindsey O'Donnell-Welch · 1 min
Oracle Clop Data Theft Campaign Started Months Ago
The Clop extortion campaign on Oracle customers last week stemmed from months of intrusion activity tracking back to July 10.
Lindsey O'Donnell-Welch · 2 min
Attackers Exploit Critical GoAnywhere Bug to Spread Medusa Ransomware
A critical GoAnywhere flaw (CVE-2025-10035) is being targeted in attacks by a threat group known for deploying Medusa ransomware.
Lindsey O'Donnell-Welch · 2 min
Oracle Patches E-Business Suite Zero-Day Amid Clop Extortion Attacks
Oracle has patched a critical zero-day remote code execution flaw in its E-Business Suite, which was being exploited by the Clop gang in a rash of data theft and extortion attacks.
Lindsey O'Donnell-Welch · 2 min
GitHub Aims to Improve npm Security After Malware Campaigns
GitHub said the changes will help “fortify the security of the software supply chain” after a recent surge of attacks targeting the npm ecosystem.
Lindsey O'Donnell-Welch · 4 min
Mac Malware Campaign Uses Fake GitHub Pages, LastPass Lure
LastPass researchers who found the “ongoing, widespread” campaign said that it involves two fake GitHub pages that deliver the Atomic Stealer malware.
Lindsey O'Donnell-Welch · 3 min
Two British Teens Charged Over Scattered Spider Hacks
Two British teenagers have been arrested by UK authorities for their alleged ties to the Scattered Spider cybercriminal collective.
Lindsey O'Donnell-Welch · 3 min
Microsoft, Cloudflare Disrupt RaccoonO365 Phishing Kit Service
Microsoft and Cloudflare this week announced that they paired up to disrupt RaccoonO365, a phishing-as-a-service cybercriminal enterprise.
Lindsey O'Donnell-Welch · 3 min
Senator Flags Microsoft’s Role in the Ascension Ransomware Hack
Sen. Ron Wyden (D-Ore.) wants the U.S. government to hold Microsoft responsible “for contributing to ransomware attacks against critical U.S. infrastructure” like Ascension.
Lindsey O'Donnell-Welch · 2 minUS Indicts LockerGoga, MegaCortex, Nefilim Ransomware Admin
The Justice Department has charged a Ukrainian national who is behind ransomware attacks of at least 200 U.S. companies tied to LockerGoga, MegaCortex, and Nefilim.
Lindsey O'Donnell-Welch · 3 min
Wyden Slams Federal Judiciary After Court Hack
In a scathing letter, Sen. Ron Wyden (D-Ore.) blasted the federal judiciary for its handling of a (second) hack of the federal courts’ case management system earlier this year.
Lindsey O'Donnell-Welch · 3 min
US Gov Links Private Chinese Firms to Salt Typhoon Hacks
Salt Typhoon has not been observed exploiting zero-day flaws, but instead targeting known bugs in exposed network edge devices – some of which are years old.
Lindsey O'Donnell-Welch · 3 min
DoJ Seizes $2.8M Linked to Zeppelin Ransomware
The DoJ raked back $2.8 million in crypto, as well as cash and a stolen vehicle, belonging to an alleged operator of the Zeppelin ransomware.
Lindsey O'Donnell-Welch · 2 min
The Emerging Ecosystem Dedicated to AI Accountability
A new ecosystem of security researchers is emerging, looking to sniff out data security and privacy issues in AI systems and grappling with issues like a lack of transparency into and understanding of LLMs.
Lindsey O'Donnell-Welch · 7 minChallenges Remain in Evaluating Ransomware Crackdowns
While law enforcement disruptions certainly have a positive impact, there are deep-rooted difficulties in measuring substantial long-term changes.
Lindsey O'Donnell-Welch · 7 min