Dennis

Decipher

‘We Have Enough AI’: Realism in a Time of Relentless Hype - Decipher

Let’s ask a simple question that seems to be getting lost in all of the credulous fervor around AI: How’s this working out for everyone?

Decipher

One Year of Decipher (Relaunched) - Decipher

It’s been one year since we relaunched Decipher in September 2025. Here are the videos, podcasts, and articles that best reflect our mission statement: Security without fear.

Decipher

Q&A: Tod Beardsley on How to Use CISA’s KEV Catalog - Decipher

Without context, the KEV catalog is just a very large collection of data. Tod Beardsley is the former CISA KEV section chief, and he recently released a paper called KEVology that provides key context and evaluates the value of certain enrichment signals.

The Vercel Intrusion and What is Happening at CISA

Six Zero Days From Microsoft, One From Apple, and a CSI: Cyber Throwback

Decipher

A Copy Fail FAQ - Decipher

The latest branded bug is a slick, portable LPE in many Linux kernels going back to 2017.

Fortinet and WinRAR Exploitation, Google's IPIDEA Disruption, and Our Favorite Cybersecurity Creators

The Era of AI-Led Vulnerability Research With Tom Ptacek

Decipher

Command Injection Bug in OpenAI Codex Exposed GitHub OAuth Tokens - Decipher

The bug is a command injection issue and lies in the way that Codex processed GitHub branch names during the execution of tasks.

Decipher

Palo Alto CVE-2026-0300 Actively Exploited - Decipher

PAN released an advisory about the vulnerability on Tuesday and said it will release a patch in an upcoming version of PAN-OS.

Decipher

Researchers Warn of Citrix NetScaler Exploitation - Decipher

On Saturday, researchers from watchTowr Labs said they had credible information that attackers were exploiting an unknown RCE vulnerability in Citrix NetScaler boxes.

Decipher

Supply Chain Attack Hits Axios NPM Packages - Decipher

Axios is a dependency in nearly 80% of all cloud and code environments and sees approximately 100 million downloads per week.

Decipher

DoJ Sanctions Bulletproof Hosting Provider Used By Ransomware Groups - Decipher

The provider, Media Land LLC, has been used by ransomware actors like Lockbit, BlackSuit, and Play, and its infrastructure has been leveraged across several distributed denial-of-service (DDoS) attacks against US companies and critical infrastructure.

Decipher

Vercel Says Internal Systems Hit in Breach - Decipher

The incident came to light on Sunday and the company says it has brought in an incident response provider to investigate the intrusion. Details of the intrusion are scant at this point.

Decipher

Myths and Mythos: An AI Vulnerability Research FAQ - Decipher

It’s still very early days for all of this, and relatively little is known about Claude Mythos’s real capabilities, so we wanted to dig into what actually is known and what it all means.

Decipher

Fighting Cybercrime With Global Intelligence | Will Dixon

Will Dixon has seen the evolution of cybercrime as both a GCHQ intelligence officer and a private sector executive and analyst, and has seen the way these groups operate up close. He joins Dennis to talk about the ongoing threat from ransomware gangs, how organizations are managing their responses, and…

Decipher

The $285M Drift Protocol Heist Was ‘6 Months in the Making’ - Decipher

During the largest DeFi hack of 2026, it only took attackers 12 minutes to drain millions in user assets - but the build up to the attack took six months of meticulously planned social engineering.

Decipher

‘We Have Enough AI’: Realism in a Time of Relentless Hype - Decipher

Let’s ask a simple question that seems to be getting lost in all of the credulous fervor around AI: How’s this working out for everyone?