‘Drive It Like You Stole It’: When Bug Bounties Went Boom, Part Three
During Barack Obama's second term, some top administration officials began looking at bounties as a potential way to jump-start...
SEARCH
Dennis Fisher
Editor in ChiefDennis Fisher is an award-winning journalist who has been covering information security and privacy since 2000.
He is one of the co-founders of Threatpost and previously wrote for TechTarget and eWeek, when magazines were still a thing that existed. Dennis enjoys finding the stories behind the headlines and digging into the motivations and thinking of both defenders and attackers. His work has appeared in The Boston Globe, The Improper Bostonian, Harvard Business School’s Working Knowledge, and most of his kids’ English papers.
- dennis@decipher.sc
- @dennisf
Featured Articles
Uprising in the Valley: When Bug Bounties Went Boom, Part Two
Following the success of the bounty programs started by companies such as iDefense, Zero Day Initiative, and Mozilla,...
Fundamental Flaw in RNGs Affects Many IoT Devices
The use of weak random number generators in many IoT devices undermines the security of the encryption keys those devices...
New Tools Target Pulse Connect Secure Flaws
CISA has released analyses of five new pieces of malware being used in attacks against known bugs in Pulse Connect Secure appliances.
ProxyShell Attacks Escalate
Attackers are stepping up their scanning for Exchange servers vulnerable to the ProxyShell vulnerabilities and installing webshells, ransomware, and other malware.
Decipher Podcast: Jonathan Mayer
Jonathan Mayer, assistant professor of computer science at Princeton University, joins Dennis Fisher to discuss the technical and legal challenges of Apple's announced CSAM scanning system.
Critical Bug in Kalay IoT Protocol Threatens Millions of Devices
A critical flaw in the ThroughTek Kalay Io platform could allow an attacker complete access to IP cameras, DVRs, and other devices.
GitHub Drops Passwords in Favor of 2FA
GitHub has eliminated support for passwords for Git operations and now requires the use of a hardware security key or other strong 2FA option.