Decipher Security Podcast

Welcome to Source Code: Decipher’s behind the scenes look at the weekly news with input from our sources.  Topping the headlines this week, Microsoft researchers released details for a recently patched vulnerability in macOS. Also in the news,  U.S. Cyber Command exposed a number of open-source tools that it said are being used by the MuddyWater APT.  And, researchers with Cisco Talos highlighted...

Robert Hansen (aka RSnake) joins Dennis Fisher to talk about his new research on NaN injection in Python and the issues with the software supply chain. Support the show

In a podcast discussion with Lindsey O'Donnell-Welch, Crane Hassold with Abnormal Security discusses how business email compromise attackers are getting savvier and best practices to defend against BEC attacks. Support the show

Lindsey O'Donnell-Welch and Dennis Fisher look back on a wild year in cybersecurity and discuss the ongoing ransomware problem, the increase in zero days used in the wild, our favorite stories and podcasts of the year, and more. Support the show

Zoe Lindsey, Pete Baker, and Dennis Fisher sit down to talk about Die Hard 2, the forgotten member of the Die Hard series, which is not a Christmas movie. It is, however, a movie with a lot of great hacking and social engineering scenes, and Bruce Willis spewing one-liners like a 1950s standup comic. Support the show

Sherrod DeGrippo, vice president of threat research and detection at Proofpoint, talks about Emotet's return; how attackers are fine tuning their malware campaigns to be more targeted; and why "your point of view is the most valuable thing that you bring" in cybersecurity. Support the show

Welcome to Source Code: Decipher’s behind the scenes look at the weekly news with input from our sources.  The Log4j flaw - and its impact on millions of third-party applications and services - dominated this week's security news, with researchers pointing to challenges in deploying fixes and exploitation attempts from nation-state actors .  Also this week, Microsoft issued its Patch Tuesday...

John Hammond of Huntress joins Dennis Fisher to discuss the critical Log4j vulnerability, the community response, and the potential long-term effects of the bug. Support the show

Welcome to Source Code: Decipher’s behind-the-scenes look at the weekly news with input from our sources. Topping the news this week, Microsoft and Google both announced disruption operations for infrastructure used by attackers. Microsoft said it seized 42 websites that were used by the Nickel threat group, while Google targeted Glupteba botnet servers . Researchers also highlighted new tactics b...

Wade Baker and Ben Edwards of the Cyentia Institute join Dennis Fisher to discuss the process of designing and interpreting the data from the Cisco Security Outcomes study, what surprised them from the data, and how organizations can use the study. Support the show

Welcome to Source Code: Decipher’s behind the scenes look at the weekly news with input from our sources. Topping the news this week, researchers detailed a ransomware operator that has repeatedly rebranded itself in order to evade detection. Also making headlines is a threat group’s use of a unique RAT , which can communicate directly with other compromised hosts via a peer-to-peer network. Final...

Casey Ellis joins Lindsey O'Donnell-Welch to discuss the evolution, adoption and standardization of vulnerability disclosure programs - both in the U.S. and across the globe. Support the show

Welcome to Source Code: Decipher’s behind the scenes look at the weekly news with input from our sources.  Topping the headlines this week,  the Emotet malware has returned almost a year after law enforcement disrupted its infrastructure. In other news, CISA warned that Iranian threat actors are exploiting known vulnerabilities in Fortinet security appliances and the ProxyShell flaw in Microsoft E...

Nick Selby joins Dennis Fisher to talk about his long and varied career in security, the challenges that law enforcement faces in investigating cybercrime, and what the future may hold for enterprise security teams.  Support the show

Welcome to Source Code: Decipher’s behind the scenes look at the weekly news with input from our sources.  Topping the headlines this week, Microsoft's Patch Tuesday updates   addressed 55 vulnerabilities, including two actively exploited flaws. Siemens also patched a set of 13 vulnerabilities in the TCP/IP network communication stack, which impacts safety-critical devices, such as anesthesia...

Amanda Gorton, CEO and cofounder of Corellium, joins Dennis Fisher to discuss her path from studying classics to found two security startups, the challenges of building a unique platform, and the opportunity to help address IoT security.  Support the show

Welcome to Source Code: Decipher’s new behind the scenes look at the weekly news with input from our sources. Topping the headlines this week are two key cybersecurity-related moves by the U.S. government. These include the government blocking exports to NSO Group, Positive Technologies and other companies , and creating a catalog of known, actively exploited vulnerabilities that federal agencies...

Kristina Balaam, of Lookout, joins Lindsey O'Donnell-Welch to discuss the ins and outs of reverse engineering malware, as well as how spyware has proliferated and evolved over the past few years. Support the show

Courtney Nash of Verica joins Dennis Fisher to talk about the new Verica Open Incident Database, which centralizes reports of software outages, security incidents, and near misses, and why studying the way systems fail is so valuable. Support the show

On the 25th anniversary* of the release of Hackers , Zoe Lindsey and Pete Baker join Dennis Fisher to talk about the cultural influence of the movie, the effect it's had on hacker culture, and why it is still so beloved today. *because 2020 never happened Support the show

Carolina Terrazas joins Dennis Fisher to talk about getting into security, the importance of diversity in hiring practices, and  why Tom Brady is the worst. Support the show

Amélie Koran joins Dennis Fisher to talk about her start in computing with a Commodore 64, her early years in the private sector, and her security and policy work in several federal government agencies. Support the show

Dennis Fisher talks with Zoe Lindsey, one of the early Duo Security employees, about her entrance into hacker culture, finding her way in the tech world, and the importance of lifelong learning. Support the show

Jonathan Mayer, assistant professor of computer science at Princeton University, joins Dennis Fisher to discuss the technical and legal challenges of Apple's announced CSAM scanning system. Note : This episode deals with sensitive topics.  Support the show

Jules Okafor, CEO of RevolutionCyber, joins Dennis Fisher to talk about her unconventional career arc, the importance of empathy in leadership and communications, and why conventional security awareness programs don't work.  Support the show