Editor
Dennis Fisher is an award-winning journalist and author. He is one of the co-founders of Decipher and Threatpost and has been writing about cybersecurity since 2000. Dennis enjoys finding the stories behind the headlines and digging into the motivations and thinking of both defenders and attackers. He is the author of 2.5 novels and once met Shaq. Contact: dennis at decipher.sc.
Michael Clark, director of Threat Research at Sysdig, talks about a recent LLM-driven extortion campaign dubbed JADEPUFFER, touching on how the team discovered it, how attackers’ “intent is now legible,” and what that means for defenders. Links Sysdig research: https://www.sysdig.com/blog/jadepuffe… https://www.sysdig.com/blog/jadepuffe…
This week we have some old-school disclosure drama when a researcher used full disclosure after months of silence from Cursor, then we discuss the enormous Patch Tuesday from Microsoft–662 bugs–and what it might mean going forward, and finally some news about DoJ sanctions and Scattered Spider members being sentenced. Links Cursor bug: https://decipher.sc/2026/07/15/bug-in… First VPN […]
Lesley Carhart has been cleaning up malware, intrusions, ransomware, and other messes in OT networks for the better part of two decades and recently joined Dennis Fisher on the Decipher podcast to talk about the special challenges OT networks present
This exploit occurs entirely in the background, requiring no user approval, dialogue prompts, or interaction.
We’re back from a fun July 4th break, and this week’s news brings us the emergence of a nasty bug in many AI coding assistants, the approaching tipping point for macOS malware, and how AI-enabled phishing kits are changing the game. Plus: Some weird news about a former ransomware negotiator who was working with threat […]
The bug is a modern twist on a Clinton-era piece of known Unix badness: following symbolic links.
