Decipher
Lindsey O'Donnell-Welch
Lindsey O’Donnell-Welch is an award-winning journalist who strives to shed light on how security issues impact not only businesses and defenders on the front line, but also the daily lives of consumers.
- 60
- stories
- OCT 27
- latest
Hive, Nefilim Ransomware Affiliate Sentenced to 70 Months in Jail
A 36-year-old Ukrainian national who acted as a Nefilim and Hive ransomware affiliate and targeted hospitals and government entities has been sentenced to 70 months in prison.
LINDSEY O'DONNELL-WELCH · OCT 27 · 2 min
Stories by Lindsey
FBI Warns of FortiBleed Attacks Leading to Lockouts, Ransomware
FortiBleed attacks are continuing, with the FBI and Secret Service warning of compromised Fortinet firewalls, account lockouts and potential ransomware activity.
Lindsey O'Donnell-Welch · 2 min
Cisco Warns of Critical, Exploited Catalyst SD-WAN Manager Flaw
Cisco “strongly recommends” customers apply a patch for a critical API authentication bypass that’s being exploited.
Lindsey O'Donnell-Welch · 1 min
Researchers Find Windows Malware With Autonomous C2 Functionality
Cisco Talos researchers identified ClosedQuorum, a Windows implant that uses multiple LLMs to autonomously select attack actions. The catch: there’s no confirmation that it’s actually been deployed in the wild.
Lindsey O'Donnell-Welch · 3 min
Fake LastPass Authenticator Pages Deliver Rapuncel Infostealer
Attackers impersonated LastPass Authenticator on fake GitHub pages to deliver the Rapuncel infostealer in a campaign involving 40 fake brands.
Lindsey O'Donnell-Welch · 2 min
US, UK Agencies Detail Iranian Malware Campaign Targeting Dissidents
A new joint advisory from multiple law enforcement agencies this week warned of an Iranian cyber campaign targeting dissidents and journalists in the U.S., UK, and elsewhere.
Lindsey O'Donnell-Welch · 2 minRussian National Extradited to US to Face Bank Account Takeover Charges
A Russian web developer allegedly behind a massive bank account takeover scheme was extradited to the U.S.
Lindsey O'Donnell-Welch · 2 min
Linux Foundation Backs New TRACE AI Security Standard
TRACE aims to help prove that sensitive data in organizations is being handled “according to policy” by AI agents and open weight models.
Lindsey O'Donnell-Welch · 2 min
Inside ExploitGym: How Researchers Are Measuring AI Agent Exploitation Capabilities
A research collaboration, directed by UC Berkeley, led to the development of ExploitGym, a large-scale benchmark for measuring AI agents’ abilities to develop exploits. Here’s the story of how ExploitGym came to be.
Lindsey O'Donnell-Welch · 9 min
OpenAI, Anthropic AI Agents Performed ‘Unsanctioned’ Actions During Cyber Tests
OpenAI and Anthropic models made “unsanctioned” actions during tests by the AI Security Institute. Here’s what we know.
Lindsey O'Donnell-Welch · 5 minOpenAI-Hugging Face Breach: Five New Things We Learned
New details emerged this week about an intrusion by OpenAI models on Hugging Face’s infrastructure.
Lindsey O'Donnell-Welch · 4 minUnsealed DoJ Indictment Targets Bulletproof Hosting Services
Media Land and ML.Cloud offer bulletproof hosting services that help keep threat actors and their infrastructure hidden from law enforcement.
Lindsey O'Donnell-Welch · 2 min
US Sanctions First VPN Cybercriminal Service
First VPN has been active for more than a decade and is specifically designed for ransomware operators, fraud groups, and other cybercriminals trying to hide malicious activity from law enforcement.
Lindsey O'Donnell-Welch · 2 minNew Forg365 PhaaS Kit Emerges
Like EvilTokens and Kali365, Forg365 is distributed through Telegram and offered as a commoditized service for attackers who want to target Microsoft 365 environments.
Lindsey O'Donnell-Welch · 2 min
DoJ: Alleged Scattered Spider Member Extradited to US
19-year-old Peter Stokes is one of several to be arrested for their alleged participation in Scattered Spider.
Lindsey O'Donnell-Welch · 2 minTargeting Cybercrime ‘Assembly Lines:’ Europol Announces Malware Crackdown
As part of the takedown, SocGholish infrastructure tied to fake browser-update scams was heavily impacted, including remediation of nearly 15,000 compromised WordPress sites.
Lindsey O'Donnell-Welch · 2 min
Oracle Zero-Day Linked to Latest ShinyHunters Attacks
“Because this activity predates Oracle’s June 10, 2026 advisory, the vulnerability was exploited as a zero-day,” said Mandiant researchers.
Lindsey O'Donnell-Welch · 2 min
Anthropic Warns of LLMs’ Impact on (Already Shrinking) N-Day Exploit Gap
Anthropic researchers warned that modern AI tools are further intensifying the existing issue of threat actors creating N-day exploits.
Lindsey O'Donnell-Welch · 4 min