Decipher Security Podcast

In this week's Source Code news wrap podcast, we discuss the newly approved SEC cyber rules and new revelations about the JumpCloud breach. Support the show

Dave Lewis, Global Advisory CISO at Cisco, talks about the importance of communication, transparency and relationships for CISOs trying to juggle the technical aspects of the role with the business side of things. Support the show

In this week's Source Code podcast, we discuss the recent blacklisting by the U.S. government of spyware companies , the White House's announcement of the  U.S. Cyber Trust Mark for IoT devices and recent changes to a financially motivated attacker's backdoor. Support the show

In this week's Source Code podcast, we discuss a new undocumented malicious driver , an unpatched Microsoft zero day under active attack , Chinese cyberattacks against U.S. government agencies and a new implementation plan released this week by the White House for the National Cybersecurity Strategy.  Support the show

Jackie Burns Koven, head of cyber threat intelligence at Chainalysis, talks about the "cat and mouse game" between law enforcement and threat actors in cryptocurrency-related cybercrime. Support the show

In this week's Source Code podcast, we discuss the latest tactics from the Charming Kitten APT , a warning from CISA on the TrueBot malware and a recent Interpol investigation into the OPERA1ER cybercriminal group . Support the show

This week, Decipher talks to security researchers about how they use crypters to track cybercriminals in a post-Conti world , and a new RAT found being deployed by a subgroup of the Lazarus Group.  Support the show

In this week's Source Code podcast, we discuss a custom malware tool that targets RDP's client drive mapping feature, a new cyber unit announced by the DoJ, and intelligence-gathering campaigns launched by APT15. Support the show

Matt Johansen joins Dennis Fisher to discuss his path from infosec n00b to senior security roles at White Hat, Bank of America, Reddit, and his new newsletter and podcast venture, Vulnerable U .  Support the show

During this week's Source Code podcast, Lindsey O'Donnell-Welch with Decipher discusses CISA's directive for federal agencies telling them to secure network devices that are exposed to the public internet, and new details from Mandiant about targeting by a China-linked actor of a flaw in Barracuda ESG appliances. Support the show

In this week’s Source Code podcast, we hear from John Hammond with Huntress on the widely exploited MOVEit Transfer bug, and from Aleksandar Milenkoski with SentinelOne about recent social engineering tactics used by the Kimsuky APT group. Support the show

In this week's Source Code podcast, Decipher editor Lindsey O'Donnell-Welch discusses several actively-exploited vulnerabilities - including ones impacting Zyxel and MOVEit Transfer - and new tactics used by the BlackCat ransomware group. Support the show

Dennis Fisher is joined by Hazel Burton from the Cisco Talos team to talk about the importance of empathy in communications, her non-linear path to infosec, and how her improv comedy training has helped her in her roles.  Support the show

Welcome back to Source Code, Decipher’s weekly news wrap podcast with input from our sources. This week, we discuss  research showing that APTs are increasingly interested in targeting small and medium-sized businesses ;  newly discovered operational technology malware called CosmicEnergy; and a new technique used by BlackCat where the ransomware group leverages a malicious Windows kernel driver i...

Megan Stifel, chief strategy officer for the Institute for Security and Technology and executive director of the Ransomware Task Force, talks about the multitude of efforts being made in tackling the ransomware threat landscape.   Support the show

In this week’s Source Code news wrap podcast, we discuss the DoJ’s charges against an alleged key Russian ransomware actor , a multi-year campaign against government, aviation, education and telecoms organizations in South and Southeast Asia, and a number of incidents involving the abuse of the serial console on Azure virtual machines . Support the show

In this week's Source Code podcast, we discuss the dismantling operation by the U.S. government of Turla's Snake malware ,  a leak of MSI data that exposes firmware signing keys and Intel BootGuard keys for several manufacturers, and several takeaways from Proofpoint's new Voice of the CISO report . Support the show

Lucia Milica, global resident CISO at Proofpoint, discusses the top takeaways from the 2023 Voice of the CISO report, including how the global recession is impacting security budgets  and how boards are increasingly becoming part of the security conversation. Support the show

In this week’s Source Code podcast we discuss ongoing developments by NIST in updating its Cybersecurity Framework, Apple and Google’s draft framework that aims to fight against unwanted Bluetooth trackers and new malware that was discovered stealing Gmail, Outlook and Facebook credentials. Support the show

Decipher talks to Dawn Cappelli, director of OT-CERT at Dragos, about the challenges of securing operational technology, particularly for organizations with limited budget and resources.  Support the show

This week at the RSA Conference, software supply-chain security, CISO liabilities and public-private sector partnerships were some of the key topics. Support the show

Chris Wysopal and Cris Thomas of the L0pht join Dennis Fisher to talk about the 25-year-anniversary of the group's landmark Senate testimony, what's changed since then, and Cris's new book, How the Hackers Known as L0pht Changed the World.  Support the show

In this week's Source Code news wrap podcast, Decipher editor Lindsey O'Donnell-Welch discusses a  malware family called Domino,  the increasing use of custom tools by ransomware groups   and new findings around the 3CX supply chain attack . Support the show

Casey Ellis, founder and CTO of Bugcrowd, joins Dennis Fisher to discuss the newly formed Hacking Policy Council, the challenges of influencing security research policy and legislation, and what the council hopes to achieve. Support the show

Mike Hanley, CSO and SVP of engineering at GitHub, joins Dennis Fisher to talk about the company's move to enforce 2FA for all developers, the changing role of the CISO, and what's ahead for software supply chain security.  Support the show