Catch Me If You Can is the Social Engineeer’s Playbook
The reality is that a lot of what hackers actually do is just social engineering in one form or another.
All topics
The reality is that a lot of what hackers actually do is just social engineering in one form or another.
Michael Clark, director of Threat Research at Sysdig, talks about a recent LLM-driven extortion campaign dubbed JADEPUFFER, touching on how the team discovered it, how attackers’ “intent is now legible,” and what that means for defenders. Links Sysdig research: https://www.sysdig.com/blog/jadepuffe… https://www.sysdig.com/blog/jadepuffe…
This week we have some old-school disclosure drama when a researcher used full disclosure after months of silence from Cursor, then we discuss the enormous Patch Tuesday from Microsoft–662 bugs–and what it might mean going forward, and finally some news about DoJ sanctions and Scattered Spider members being sentenced. Links Cursor bug: https://decipher.sc/2026/07/15/bug-in… First VPN […]
We’re back from a fun July 4th break, and this week’s news brings us the emergence of a nasty bug in many AI coding assistants, the approaching tipping point for macOS malware, and how AI-enabled phishing kits are changing the game. Plus: Some weird news about a former ransomware negotiator who was working with threat […]
Jack Cable, co-founder and CEO of Corridor and a former senior technical advisor at CISA, discusses AI’s impact on cybersecurity, vulnerability discovery, and coding practices.
Alex Pinto, one of the lead authors of the Verizon Data Breach Investigations Report, joins Dennis to talk about his organization’s newest publication, the Breach Impact Study, which digs into the real world cost of breaches, both in dollars and in organizational impact. Spoiler: Breaches are expensive. Verizon BIS: https://www.verizon.com/business/resources/reports/2026-breach-impact-study-dbir.pdf