Decipher Security Podcast

Lindsey O'Donnell-Welch speaks with Jonathan Reiber, Vice President, Cybersecurity Strategy and Policy at AttackIQ. Support the show

In this week's Source Code podcast, Decipher looks at a novice, sophisticated malware loader and a new tactic being used by the BlackCat ransomware to speed up its encryption process. Support the show

Don Smith of the Secureworks CTU joins Dennis Fisher to discuss the effects of the Conti leaks, the ransomware landscape, and how law enforcement and researchers are countering attackers' ploys.  Support the show

Topping this week's Source Code podcast, Lenovo released security updates addressing vulnerabilities related to Unified Extensible Firmware Interface (UEFI) firmware drivers in its products. Also, the U.S. government warned of recent Lazarus APT campaigns   and the BlackCat ransomware-as-a-service . Finally, Decipher this week talked to Justine Bone , CEO of MedSec, about the challenges of se...

Justine Bone, CEO of MedSec, discusses the security threats that hospitals and healthcare providers face, and the challenges of securing medical devices.  Support the show

Martin Roesch, CEO of Netography and creator of Snort and former CEO of Sourcefire, joins Dennis Fisher to talk about why he decided to come out of retirement and what the big challenges are for security right now. Support the show

Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. In this week’s podcast, a Ukrainian man was sentenced to five years in jail this week for his work with the financially motivated FIN7 cybercrime group, which researchers with Mandiant in an analysis revealed continues to evolve its tactics for initial access, first-stage malware delivery and more. Also this w...

Tazin Khan, founder of Cyber Collective , joins Dennis Fisher to talk about the ethos behind the group's work and the challenges of educating people about the safest ways to use technology. Support the show

Topping the news in this week's Source Code podcast were several security warnings and alerts from the U.S. government, including a phishing attack that targeted U.S. election officials, and attacks on UPS devices. Also this week, researchers warned of an IcedID malware attack leveraging compromised Microsoft Exchange servers to send phishing emails. Support the show

Caitlin Condon, vulnerability research manager at Rapid7, talks about the rise of “widespread threats,” how the time to exploitation by attackers has shifted, and what that means for security teams. Support the show

Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. In this week’s podcast, security experts discuss Lapsus$ , a group that made big claims this week that it hacked both Okta and Microsoft. Both Okta and Microsoft confirmed the hacks. Support the show

Welcome to the Source Code podcast by Decipher, where we take a look behind the scenes at top news with input from our sources. This week, researchers disclosed a set of seven vulnerabilities in PTC’s Axeda platform, which is preinstalled on connected devices, particularly in the healthcare industry. In other news, researchers detailed three flaws that affect APC SmartConnect and Smart-UPS devices...

Runa Sandvik discusses her work helping journalists to secure their devices and how more newsrooms are recognizing the need for better cybersecurity measures.  Support the show

Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. In this week’s podcast, security experts discuss a new type of distributed denial-of-service attack technique; as well as the Strengthening American Cybersecurity Act, which was recently passed by the Senate. Support the show

Mike Hanley, CSO at GitHub and former VP of security at Duo Security, joins Dennis Fisher to talk about the open source security summit at the White House, the Log4j response, and how the tech industry can support the open source community. Support the show

Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. Researchers this week uncovered similarities in the code of the Dridex malware and Entropy ransomware . In other news, Nitin Natarajan, deputy director for the Cybersecurity and Infrastructure Security Agency (CISA), talked to Decipher this week about the agency’s top initiatives. Support the show

Nitin Natarajan, deputy director for the Cybersecurity and Infrastructure Security Agency (CISA), talks about how the agency is tackling various emerging security challenges more effectively. Support the show

Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. Topping the news this week, CISA is requiring federal agencies to patch actively exploited vulnerabilities in Google Chrome and the Adobe Commerce and Magento platforms. Also this week, the FBI warned of U.S. critical infrastructure compromises by the BlackByte ransomware group. Support the show

Chris Eng of Veracode joins Dennis Fisher to talk about the company's new State of Software Security report and what's driving the increase in enterprises scanning their apps for vulnerabilities.  Support the show

Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. Topping the news this week, Microsoft plans to block macros obtained from the internet by default for several Office applications, including Access, Excel, PowerPoint, Visio and Word. Also this week,  the U.S., UK, and Australia released a joint security advisory that showcased how ransomware attacks became an...

Allan Liska, intelligence analyst with Recorded Future, discusses the challenges that organizations face in implementing security measures to protect against ransomware, and how ransomware actors are evolving their tactics, services-for-hire models and victimology. Support the show

Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. Topping the news this week, Samba patched a vulnerability that could enable remote, unauthenticated attackers to execute arbitrary code as root on impacted installations. Also this week, the U.S. government launched a Cyber Safety Review Board , which will bring together private and public sector industry lead...

Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. This week, the White House has outlined a number of cybersecurity measures that federal agencies must adopt. Also this week, an easily exploitable vulnerability in a Linux component has been patched. Finally, Jon Callas, director of technology projects with EFF, joined the Decipher podcast this week to talk ab...

Jon Callas, director of technology projects with EFF, talks about invasive data tracking and surveillance during the pandemic. Support the show

Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. Topping the news this week, president Joe Biden signed a new National Security Memorandum that aims to better secure national security systems. Also this week, Europol announced that several law enforcement authorities dismantled a VPN service that was being utilized by cybercriminals in order to deploy ransom...