Decipher
Dennis Fisher
Dennis Fisher is an award-winning journalist and author. He is one of the co-founders of Decipher and Threatpost and has been writing about cybersecurity since 2000. Dennis enjoys finding the stories behind the headlines and digging into the motivations and thinking of both defenders and attackers. He is the author of 2.5 novels and once met Shaq. Contact: dennis at decipher.sc.
- 112
- stories
- OCT 27
- latest
No Major PHP2Shell Exploits Seen Yet
There has been little exploit activity targeting the two critical PHP vulnerabilities disclosed last week.
DENNIS FISHER · OCT 27 · 1 min
Stories by Dennis
Patching Faster Has Never Been the Answer
Patching is a necessary evil and doing it manually in any decent sized organization was essentially impossible in the pre-AI times and is now pure folly.
Dennis Fisher · 3 min
AI May Be the Future, But Talent is What Builds Security
While AI is reshaping the threat landscape, the people defending against those threats remain vital.
Dennis Fisher · 3 min
Catch Me If You Can is the Social Engineeer’s Playbook
The reality is that a lot of what hackers actually do is just social engineering in one form or another.
Dennis Fisher · 1 min
New Citrix NetScaler Issue Emerges
The vendor says this is a configuration-dependent issue rather than a failure of the security patches themselves.
Dennis Fisher · 3 min
Inside the Citrix NetScaler Zero Day Saga
This case is yet another reminder just how important vendor communication is in such incidents and how much uncertainty can hamper security.
Dennis Fisher · 1 min
Researchers Warn of Citrix NetScaler Exploitation
On Saturday, researchers from watchTowr Labs said they had credible information that attackers were exploiting an unknown RCE vulnerability in Citrix NetScaler boxes.
Dennis Fisher · 3 min
F5 CVE-2026-94127 Targeted in Active Attacks
This vulnerability allows for unauthenticated remote code execution and shows how a missing bounds check—a classic programming error.
Dennis Fisher · 2 min
‘We Have Enough AI’: Realism in a Time of Relentless Hype
Let’s ask a simple question that seems to be getting lost in all of the credulous fervor around AI: How’s this working out for everyone?
Dennis Fisher · 3 min
New SparroWocky Backdoor Targets Latin America
Active since at least August 2025, the malware represents a functional pivot from the threat actor’s existing SparrowDoor backdoor.
Dennis Fisher · 3 min
Here Come the AI-Generated BEC Scams
Messages delivered through legitimate third-party email infrastructure had C-suite sender display names, custom signatures, and direct approval notes.
Dennis Fisher · 2 min
MicroTik Routers Under Attack in New Campaign
Labeled “MikroTrick” by researchers at CERT Polska who discovered and disclosed six vulnerabilities in the software, the campaign targets devices with SSH services reachable from the public internet
Dennis Fisher · 3 min
New Campaign Weaponizes Microsoft Teams for Remote Access
Unlike standard commodity malware that aims for quick credential theft, this campaign features a manual, hands-on-keyboard scheme designed to escalate rapidly from a single compromised workstation to broad, network-wide access.
Dennis Fisher · 2 min
Critical Artifactory Bug Under Attack
CVE-2026-82329 is a simple authentication bypass that can allow an attacker to get admin privileges quite easily
Dennis Fisher · 1 min
Unauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520
The chain leverages two distinct vulnerabilities—an authentication bypass and an unsafe .NET type instantiation flaw—to provide full server control without valid credentials.
Dennis Fisher · 2 min
MLflow Bug Actively Exploited to Steal Credentials
This flaw allows remote, unauthenticated attackers to read sensitive data from internal network services or cloud metadata endpoints.
Dennis Fisher · 2 min
Researchers Find Persistent Backdoor in Zbtlink Routers
The vulnerability, named EndlessDoors, affects more than 20 specific models of networking hardware sold globally under both the Zbtlink and Wiflyer brand names.
Dennis Fisher · 2 min
Exploits Target N-able CVE-2026-18577 Flaw
The vulnerability, which effectively provides unauthenticated administrative access to the RMM console, stems from two related security issues
Dennis Fisher · 3 min