MOVEit Transfer Zero Day Under Attack
A critical zero day flaw in all version of MOVEit Transfer is under active attack by multiple threat actors.
SEARCH
Dennis Fisher
Editor in ChiefDennis Fisher is an award-winning journalist who has been covering information security and privacy since 2000.
He is one of the co-founders of Threatpost and previously wrote for TechTarget and eWeek, when magazines were still a thing that existed. Dennis enjoys finding the stories behind the headlines and digging into the motivations and thinking of both defenders and attackers. His work has appeared in The Boston Globe, The Improper Bostonian, Harvard Business School’s Working Knowledge, and most of his kids’ English papers.
- dennis@decipher.sc
- @dennisf
Featured Articles
Volt Typhoon Attack Group Targets U.S. Infrastructure
A group known as Volt Typhoon, that is affiliated with the Chinese government, has been attacking critical infrastructure in...
Camaro Dragon Group Targets Routers With Malicious Firmware
A Chinese state-affiliated attack group known as Camaro Dragon is targeting some TP-Link routers to install malicious firmware...
Winter Vivern APT Targeting Ukrainian, European Organizations
A low-profile attack group known as Winter Vivern has recently been targeting government and private organizations in Ukraine, Poland, Italy, and elsewhere.
Microsoft Patches Two Bugs Under Active Attack
In its March Patch Tuesday release, Microsoft has fixed two vulnerabilities (CVE-2023-23397) and (CVE-2023-24880) that have been exploited in the wild.
Decipher Podcast: Chris Wysopal Returns
Chris Wysopal, CTO and founder of Veracode, joins Dennis Fisher to dive into the new White House National Cybersecurity Strategy and discuss what's missing, how practical the pillars are, and when these ideas may be implemented.
YoroTrooper Group Targets European, CIS Countries in Cyberespionage Campaigns
The newly identified YoroTrooper group is targeting embassies and government agencies in European and Commonwealth of Independent States countries in phishing campaigns.
Decipher Podcast: Courtney Nash Returns
Courtney Nash joins Dennis Fisher to talk about the 2022 VOID Report on incidents, why mean time to resolve is no longer a meaningful metric, whether the duration of an incident matters, and how organizations can get better at responding to an analyzing incidents.