Decipher
All stories
Every story since Decipher went independent.
- 188
- stories
- OCT 27
- latest
Hive, Nefilim Ransomware Affiliate Sentenced to 70 Months in Jail
A 36-year-old Ukrainian national who acted as a Nefilim and Hive ransomware affiliate and targeted hospitals and government entities has been sentenced to 70 months in prison.
LINDSEY O'DONNELL-WELCH · OCT 27 · 2 min
Everything
Ongoing Microsoft 365 Campaign Abuses ConnectWise App
Threat actors have compromised a credential within the vendor’s infrastructure, allowing them to abuse a client assertion that bypasses traditional user authentication.
Dennis Fisher · 3 min
The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust
Nolan casts the invention of the Trojan horse as the ultimate violation of “Zeus’s law,” the idea that you should treat any stranger you encounter with kindness and respect, because they could very well be Zeus in disguise.
Susannah Clark Matt · 5 min
Ivanti Connect Secure Zero-Day Exploited in Attacks
Ivanti warns of active exploitation of CVE-2026-104935, a high-severity Connect Secure flaw.
Lindsey O'Donnell-Welch · 2 min
Healthcare Cybersecurity Has a Problem. This Bill Wants to Fix It
Two years after the largest healthcare cybersecurity incident in history, the senate has passed The Health Care Cybersecurity and Resiliency Act of 2025.
Lindsey O'Donnell-Welch · 4 min
Patching Faster Has Never Been the Answer
Patching is a necessary evil and doing it manually in any decent sized organization was essentially impossible in the pre-AI times and is now pure folly.
Dennis Fisher · 3 min
FBI Warns of FortiBleed Attacks Leading to Lockouts, Ransomware
FortiBleed attacks are continuing, with the FBI and Secret Service warning of compromised Fortinet firewalls, account lockouts and potential ransomware activity.
Lindsey O'Donnell-Welch · 2 min
AI May Be the Future, But Talent is What Builds Security
While AI is reshaping the threat landscape, the people defending against those threats remain vital.
Dennis Fisher · 3 min
Catch Me If You Can is the Social Engineeer’s Playbook
The reality is that a lot of what hackers actually do is just social engineering in one form or another.
Dennis Fisher · 1 min
New Citrix NetScaler Issue Emerges
The vendor says this is a configuration-dependent issue rather than a failure of the security patches themselves.
Dennis Fisher · 3 min
Cisco Warns of Critical, Exploited Catalyst SD-WAN Manager Flaw
Cisco “strongly recommends” customers apply a patch for a critical API authentication bypass that’s being exploited.
Lindsey O'Donnell-Welch · 1 min
Inside the Citrix NetScaler Zero Day Saga
This case is yet another reminder just how important vendor communication is in such incidents and how much uncertainty can hamper security.
Dennis Fisher · 1 min
Researchers Warn of Citrix NetScaler Exploitation
On Saturday, researchers from watchTowr Labs said they had credible information that attackers were exploiting an unknown RCE vulnerability in Citrix NetScaler boxes.
Dennis Fisher · 3 min
F5 CVE-2026-94127 Targeted in Active Attacks
This vulnerability allows for unauthenticated remote code execution and shows how a missing bounds check—a classic programming error.
Dennis Fisher · 2 min
Researchers Find Windows Malware With Autonomous C2 Functionality
Cisco Talos researchers identified ClosedQuorum, a Windows implant that uses multiple LLMs to autonomously select attack actions. The catch: there’s no confirmation that it’s actually been deployed in the wild.
Lindsey O'Donnell-Welch · 3 minFake LastPass Authenticator Pages Deliver Rapuncel Infostealer
Attackers impersonated LastPass Authenticator on fake GitHub pages to deliver the Rapuncel infostealer in a campaign involving 40 fake brands.
Lindsey O'Donnell-Welch · 2 min
‘We Have Enough AI’: Realism in a Time of Relentless Hype
Let’s ask a simple question that seems to be getting lost in all of the credulous fervor around AI: How’s this working out for everyone?
Dennis Fisher · 3 min
New SparroWocky Backdoor Targets Latin America
Active since at least August 2025, the malware represents a functional pivot from the threat actor’s existing SparrowDoor backdoor.
Dennis Fisher · 3 min
