Security news that informs and inspires

All Articles

2234 articles:

Attackers Focus on Apache OFBiz Bug

Threat actors are targeting a critical flaw in the Apache OFBiz platform that was disclosed in late December.

Apache

Decipher Podcast: James Doggett

James Doggett, CISO of Semperis and a longtime executive in the financial and insurance industries, joins Dennis Fisher to discuss his career arc and the challenges of being a CISO in today's highly scrutinized and pressure-filled environment.

Podcast

What We Learned in 2023

2023 was one of the crazier years in recent memory for security news, and we did our best to make sense of it all. We gathered some of our friends to talk about what the biggest stories of the year were and what we learned from them.

AI, Ransomware

Law Enforcement Disrupts BlackCat Ransomware Operation

In addition to creating the decryption tool, law enforcement agencies have also gained visibility into the ransomware group’s network and have seized several attacker-operated websites.

Ransomware

Decipher Library: Holiday Edition 2023

Our annual holiday book recommendation guide is here to help you discover what to read during your holiday downtime.

Library

Decipher Podcast: Feross Aboukhadijeh

Feross Aboukhadijeh, founder and CEO of Socket, joins Dennis Fisher to talk about the challenges of securing open-source projects, supply chain security, and the fragility of the open-source software ecosystem.

Podcast

U.S., Australian Government Agencies Warn of Play Ransomware Attacks

A new advisory from U.S. and Australian government agencies warns that the Play ransomware group has successfully infected at least 300 organizations since its emergence in June 2022, including critical infrastructure entities.

Ransomware

Microsoft Cracks Down on Fraudulent Outlook Account Sales

Microsoft has obtained a court order from the Southern District of New York allowing the company to seize U.S.-based infrastructure and take websites used by Storm-1152 offline.

Microsoft

CISA: Russian Threat Actors Exploiting TeamCity Flaw

U.S. government agencies warn that Russian threat actors have been exploiting a known vulnerability in TeamCity since late September.

Russia

CISOs Gear Up For Compliance With SEC Cyber Regulations

The compliance deadlines for the SEC's cyber rules are this week, and CISOs have spent the last few months preparing in various ways.

CISO, Sec

Memory Safe: Phil Venables

In Decipher’s latest Memory Safe episode, Phil Venables, CISO at Google Cloud, talks about how he came to work in the cybersecurity space, how CISOs can help prop up potential future CISOs, and “striving for secure products, not security products.”

Memory Safe

New Initiative Seeks to Bring Collaboration to AI Security

The new AI Safety Initiative from the Cloud Security Alliance involves Amazon, Microsoft, and OpenAI in an effort to build a collaborative framework for AI security.

AI

Lazarus Group Log4j Attacks Spread New Malware Families

The campaign indicates a “definitive shift” in the threat group’s tactics as it continues to rely on non-traditional technologies and frameworks for developing its malware.

Malware, Lazarus

Apache Fixes Critical Struts Flaw

The Apache Software Foundation has released updates to address a critical file upload vulnerability (CVE-2023-50164) in Struts.

Apache

Decipher Podcast: Source Code 12/8

Welcome back to Source Code, Decipher's weekly news wrap podcast with input from our sources.

Source Code