YouTube video by Decipher

On Saturday, researchers from watchTowr Labs said they had credible information that attackers were exploiting an unknown RCE vulnerability in Citrix NetScaler boxes.

On Saturday, researchers from watchTowr Labs said they had credible information that attackers were exploiting an unknown RCE vulnerability in Citrix NetScaler boxes.

Cisco Talos researchers identified ClosedQuorum, a Windows implant that uses multiple LLMs to autonomously select attack actions. The catch: there's no confirmation that it’s actually been deployed in...

Let’s ask a simple question that seems to be getting lost in all of the credulous fervor around AI: How’s this working out for everyone?

A new joint advisory from multiple law enforcement agencies this week warned of an Iranian cyber campaign targeting dissidents and journalists in the U.S., UK, and elsewhere.

YouTube video by Decipher

A Russian web developer allegedly behind a massive bank account takeover scheme was extradited to the U.S.

Labeled "MikroTrick" by researchers at CERT Polska who discovered and disclosed six vulnerabilities in the software,  the campaign targets devices with SSH services reachable from the public internet

It’s been one year since we relaunched Decipher in September 2025. Here are the videos, podcasts, and articles that best reflect our mission statement: Security without fear.

It’s been one year since we relaunched Decipher in September 2025. Here are the videos, podcasts, and articles that best reflect our mission statement: Security without fear.

YouTube video by Decipher

TRACE aims to help prove that sensitive data in organizations is being handled “according to policy” by AI agents and open weight models.

YouTube video by Decipher

A research collaboration, directed by UC Berkeley, led to the development of ExploitGym, a large-scale benchmark for measuring AI agents’ abilities to develop exploits. Here’s the story of how Exploit...

YouTube video by Decipher

This flaw allows remote, unauthenticated attackers to read sensitive data from internal network services or cloud metadata endpoints.

YouTube video by Decipher

The vulnerability, which effectively provides unauthenticated administrative access to the RMM console, stems from two related security issues.

Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we've seen bad actors leve...

YouTube video by Decipher

Exposures of AI/LLM tools has risen by more than 60 percent over the last nine months.

Exposures of AI/LLM tools has risen by more than 60 percent over the last nine months.

YouTube video by Decipher

Old malware like Conficker never really dies, and in industrial control and SCADA environments it can live forever undisturbed. Lesley Carhart of Dragos joins Dennis Fisher to talk about the myriad ch