Decipher Security Podcast

Dennis Fisher, Zoe Lindsey, Pete Baker, and Casey Ellis convene to honor the 30th anniversary of the release of Sneakers , the greatest hacker movie ever made, and discuss its legacy, popularity in the hacker community, and why it still holds up today.  Support the show

Welcome back to Decipher's Source Code news wrap podcast. Topping the news this week, Albania’s prime minister has blamed Iran for a major cyberattack two months ago that took down parts of the country’s national infrastructure. Also this week, researchers detailed Iranian state-sponsored group APT42 and the software control panel used by the well-known TA505 financial threat group in order t...

Dennis Fisher talks with Meg Gardiner , the coauthor of Heat 2 , the bestselling sequel and prequel to Heat, the greatest crime movie ever made. They discuss the infosec and hacking subplot of the novel, where that idea came from, and how the research into the hacking scene worked.  Support the show

Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. This week, we discuss a recent FTC lawsuit against a data broker ,  a bug bounty program from Google aimed at securing open source software projects, and a recent campaign from a known China-based espionage actor . Support the show

Welcome back to Source Code, Decipher’s news wrap podcast that includes input from our sources. Topping the news this week, the Zero Day Initiative announced it was changing its disclosure policy for ineffective patches. In other news, CISA warned that attackers are exploiting multiple flaws that impact Zimbra’s Collaboration Suite . Finally, a recent report highlighted an uptick in organizations...

Peter Mackenzie, director of incident response at Sophos, and Chester Wisniewski, principal research scientist at Sophos, join the Decipher podcast to talk about why more ransomware attackers are clustering onto vulnerable networks - sometimes simultaneously.  Support the show

Welcome back to Source Code, Decipher’s weekly news wrap podcast with input from our sources. This week, the U.S. government announced sanctions against the Tornado Cash cryptocurrency mixer. In other news, Black Hat kicked off with keynotes from former CISA director Chris Krebs and investigative journalist Kim Zetter. Support the show

Megan Stifel, the chief strategy officer at the Institute for Security and Technology and co-chair of the Ransomware Task Force, talks about how cyber policy has evolved over time and the Ransomware Task Force’s new Blueprint for Ransomware Defense for small and medium-sized businesses. Support the show

Welcome back to Source Code, Decipher's weekly news podcast with input from our sources. In this week's Source Code podcast, security experts discuss a critical VMware authentication bypass bug and a new attack framework called Manjusaka.  Support the show

In this week's Source Code podcast, Decipher discusses a reissued Security Directive from the TSA,  new Microsoft research and a hearing with  the House Select Committee on Intelligence about cyber mercenary groups,  and an actively exploited Atlassian Confluence bug . Support the show

Sean Zadig, CISO of Yahoo and head of the Paranoids, talks with Dennis Fisher about his start in the security field, protecting a massive user base, and thinking about security critically. Support the show

Welcome back to Source Code, Decipher’s weekly security news podcast with input from our sources. In this week's podcast, Decipher goes over a previously unknown macOS backdoor and an announcement by the Department of Justice that it had disrupted the activities of a North Korean state-sponsored group. Support the show

Mark Arena, CEO of Intel 471, joins the Decipher podcast to talk about the journey behind founding Intel 471 in 2014  and how cybercrime has evolved over the past few years.  Support the show

Welcome back to Source Code, Decipher’s weekly news wrap podcast with input from our sources. In this week’s podcast, we go over an actively exploited vulnerability disclosed during Patch Tuesday, a Cyber Safety Review Board report that gives new details about the Log4j flaw and research that sheds light on how the ransomware ecosystem is evolving.  Support the show

Welcome back to this week’s Source Code podcast by Decipher, where we go over the top security news of the week with input from our sources.  This week, we discuss the U.S. government's warning that North Korean-backed actors are using the Maui ransomware to target health care and public health organizations; a software supply-chain attack involving packages hosted on the NPM Package Manager;...

Dennis Fisher talks with Joe Grand, renowned hardware hacker and member of the L0pht , about his recent work hacking hardware crypto wallets, hacking culture, and why curiosity matters.  Support the show

Welcome back to another episode of our weekly Source Code news wrap podcast. This week, Gustavo Palazolo with Netskope talks about how Emotet attackers are still skirting Microsoft's VBA macros security measures while using old delivery methods, and John Hultquist with Mandiant talks about why a Chinese information operations campaign targeted rare earths mining companies in the U.S.    Suppo...

John Hultquist, VP of Mandiant Intelligence, talks about new Mandiant research that exposes a Chinese information operation campaign targeting U.S., Canadian and Australian rare earths mining companies, including a processing facility in Texas, and how these types of information operations can be detrimental to private companies. Support the show

In this week's Source Code podcast, Forescout researchers discuss the impact of 56 vulnerabilities that they discovered in operational technology (OT) devices, and Cisco Talos researchers talk about the top takeaways from a recently exposed AvosLocker ransomware campaign .  Support the show

Daniel dos Santos, head of security research with Forescout, talks about a set of over 50 vulnerabilities discovered in operational technology (OT) devices from 10 different vendors, and why patching levels are so low for OT. Support the show

Welcome back to Source Code, Decipher’s weekly news wrap podcast. This week, researchers exposed a spear-phishing campaign that targeted several high-ranking officials from the U.S. and Israel. Also this week, Microsoft issued a patch for a previously disclosed RCE vulnerability that has been under active exploitation by attackers. Finally, researchers discuss a recently discovered malware family...

On this week's Source Code podcast, security experts discuss attacker exploitation of a vulnerability in certain WSO2 products, a Microsoft zero day in many current versions of Office, Office 365, and Windows, and new research that shows attackers getting quicker at launching ransomware attacks against enterprises. Support the show

Welcome back to Source Code, Decipher’s weekly news wrap podcast. This week, we go over a landmark change to the Computer Fraud and Abuse Act, a serious remote code execution bug in Zyxel firewall products and an emergency directive that orders civilian executive branch agencies to apply updates for several VMware products within five days. Support the show

Welcome back to Source Code, Decipher’s weekly security news podcast. This week, the  State Department said it will offer rewards for more information for the Conti group. Also this week, cybersecurity agencies from the U.S, UK, Australia, Canada and New Zealand warned that cybercriminals are increasingly targeting managed service providers . Finally, researchers released more details on a sophist...

In this week's Source Code podcast, Decipher discusses plans by GitHub to require anyone who contributes code on the platform to use some form of MFA by the end of next year. Also in this week's podcast, researchers talk about a newly discovered threat group that targets companies focusing on corporate development, mergers and acquisitions and large corporate transactions.  Support the s...