Editor
Dennis Fisher is an award-winning journalist and author. He is one of the co-founders of Decipher and Threatpost and has been writing about cybersecurity since 2000. Dennis enjoys finding the stories behind the headlines and digging into the motivations and thinking of both defenders and attackers. He is the author of 2.5 novels and once met Shaq. Contact: dennis at decipher.sc.
Unlike standard commodity malware that aims for quick credential theft, this campaign features a manual, hands-on-keyboard scheme designed to escalate rapidly from a single compromised workstation to broad, network-wide access.
CVE-2026-82329 is a simple authentication bypass that can allow an attacker to get admin privileges quite easily
This week we discuss the two arrests in Australia of alleged members of the TeamPCP cybercrime group that has targeted the open source ecosystem, the US government’s disclosure of intrusion activity by the Chinese QTFY threat actor, and finally the long report from OpenAI on the Hugging Face incident.
The chain leverages two distinct vulnerabilities—an authentication bypass and an unsafe .NET type instantiation flaw—to provide full server control without valid credentials.
This week we discuss the new White House memo on using private sector operators in offensive cyber operations, Lindsey’s deep dive into the origins of the ExploitGym AI benchmark, and the rash of attacks on water utilities in the U.S. Links Inside ExploitGym: https://decipher.sc/2026/08/20/inside… White House memo: https://www.whitehouse.gov/presidenti… OpenAI post: https://openai.com/index/the-defender…
This flaw allows remote, unauthenticated attackers to read sensitive data from internal network services or cloud metadata endpoints.
