Decipher Security Podcast

Epizódok

• 
  The ClickFix Epidemic and AI-Enabled Attacks | John Hammond 13.10.2026 46p

  John Hammond of Huntress joins Dennis Fisher to dive into the ClickFix attack episdemic, how these attacks work, what the payloads are, and what individuals and organizations can do to protect themselves against them.
• 
  Why Patching Faster Doesn't Work, Ransomware Negotiation War Stories, and the NSA View of AI Threats 11.10.2026 42p

  This week we talk about all the news from THREATCON1, including why the idea of just patching faster doesn't work, how analysts handle threat actor communications in ransomware incidents, and what the NSA thinks of AI threats.
• 
  Catch Me If You Can with Shea Serrano! 06.10.2026 51p

  Bestselling author, podcaster, and all around great guy Shea Serrano joins Dennis Fisher and Lindsey O’Donnell-Welch to explore why Catch Me If You Can is more than a con-artist story: it’s a hacker classic and master class in social engineering, confidence, and deception. We unpack Leonardo DiCaprio’s performance, Spielberg’s tension-building, and the film’s memorable cast and scenes. Along the way, the conversation connects the movie to hacker culture and cybersecurity, and asks why Frank Abagnale’s cons still fascinate us today.LinksSubscribe to Shea's Good Movie newsletter: https://substack.com/@sheaserrano
• 
  Edge Devices Under Attack, a Threatcon Preview, and Communication Breakdowns 02.10.2026 31p

  Today we have for you a buffet of zero days being exploited in edge security products, including Citrix and Fortinet, then we discuss the importance of communications from vendors when bad things happen, and finally we preview VulnCheck's THREATCON1, which takes place next week.
• 
  The Citrix NetScaler Zero Day Saga | Ben Harris 02.10.2026 22p

  Ben Harris of watchTowr joins Dennis Fisher to walk through the Citrix NetScaler zero days that emerged over the weekend, from first detection of exploitation to reporting to finally some patches and why vendor communication is so vital in these cases.
• 
  The Malware That Asks AI What to Do Next | Ryan Fetterman 29.09.2026 30p

  Ryan Fetterman from Cisco Talos sits down with Decipher’s Lindsey O’Donnell-Welch to talk about ClosedQuorum, the first reported malware binary with an autonomous command-and-control. They talk about the wide range of ways threat actors are using AI, and useful detection strategies for AI-assisted attacks. LinksTalos analysis: https://blog.talosintelligence.com/th...
• 
  FBI Hack Fallout, EvilTokens Takedown, and the F5 Zero Day 27.09.2026 32p

  This week we dig into the ShinyHunters hack of the FBI and what it means not just for the FBI personnel but for the attackers, then we discuss the disruption of the EvilTokens phishing operation by Microsoft, and finally we talk about the F5 BIG-IP zero day and some odds and ends from LabsCon.LinksFBI hack: https://x.com/FBI/status/210280781969...EvilTokens disruption: https://www.microsoft.com/en-us/secur...F5 zero day: https://decipher.sc/2026/09/24/f5-cve...watchTowr Labs post: https://labs.watchtowr.com/is-this-a-...
• 
  Assessing AI Model Security From the Outside In | Matt Fredrikson 22.09.2026 37p

  The security and reliability of the code in AI models is a huge question mark, because the models are black boxes that aren't accessible to outsiders. Matt Fredrikson, professor at Carnegie Mellon University and founder of Gray Swan AI, joins Dennis to talk about the challenge of assessing these models and how a community of red teamers is trying to meet it.
• 
  The Real Story on AI Security Live From LabsCon! 18.09.2026 29p

  Dennis joins from the last LabsCon conference, which featured amazing keynotes from Prof. James Mickens on AI reality and myths, Katie Moussouris on why humans are more vital than ever in security, and Dino Dai Zovi on using hardware to break attack chains,
• 
  The Vulnpocalypse Myth | Jeremiah Grossman 15.09.2026 52p

  You've heard all of the hysteria around the vulnpocalypse caused by AI-assisted bug hunting and the shrinking time to exploit window. Now Jeremiah Grossman dispels those myths and shows exactly what the data reveals about how many bugs are actually exploited and how long it takes for attackers to target them.
• 
  Anthropic's Threat Report, AI's Effect on Cybercrime, and How 9/11 Changed Cybersecurity 11.09.2026 58p

  This week we dive into Anthropic's new threat intelligence report, how cybercriminals are using AI in their campaigns, and the profound effect that 9/11 had on the cybersecurity industry. Then, Dennis is joined by Ryan Naraine to preview LabsCon and talk about the keynotes by Katie Moussouris, Dino Dai Zovi, and James Mickens. Anthropic report: https://www.anthropic.com/threat-inte...LabsCon agenda: https://events.sentinelone.com/event/...Mickens essay: https://www.usenix.org/system/files/1...
• 
  Securing Communications in an AI-Assisted World | Christine Gadsby 07.09.2026 45p

  Christine Gadsby of BlackBerry, a longtime security executive, joins Dennis to talk about her extensive experience in cybersecurity, the evolution of security practices, the challenges of securing mobile communications, and the impact of AI on the security industry.
• 
  Microsoft Teams Phishing, a Botnet Takedown 23 Years in the Making, and The Cuckoo's Egg's Lessons 04.09.2026 1ó 2p

  It's our one year anniversary! This week we talk about the highlights of the last year, a new high-level phishing campaign that uses Microsoft Teams as an initial access vector, and the takedown of the ancient Sality P2P botnet. Then we offer some book and TV recommendations for the long weekend. LinksOne year of the new Decipher: https://decipher.sc/2026/09/02/one-ye...Microsoft Teams phishing: https://decipher.sc/2026/09/03/new-ca...Sality botnet takedown: https://www.justice.gov/usao-cdca/pr/...
• 
  Cybercrime Disruption: Making a “Real Impact” | Ken Bagnall 01.09.2026 27p

  Ken Bagnall, founder and CEO of Silent Push, talks about the August National Security Presidential Memorandum (NSPM) on transnational cyber-enabled crime, how organizations can make “real impact” with cybercriminal disruption, and the challenges of measuring success in disrupting the cybercriminal ecosystem.
• 
  TeamPCP Arrests, the QTFY Attacks, and the OpenAI Post-Mortem 28.08.2026 40p

  This week we discuss the two arrests in Australia of alleged members of the TeamPCP cybercrime group that has targeted the open source ecosystem, the US government's disclosure of intrusion activity by the Chinese QTFY threat actor, and finally the long report from OpenAI on the Hugging Face incident.
• 
  The Future of Surveillance and Privacy in the Age of AI | Nicole Ozer 25.08.2026 36p

  Nicole Ozer, who took the helm this year as the new executive director at the Electronic Frontier Foundation (EFF), talks to Lindsey O’Donnell-Welch about the fine line between AI empowering us and undermining our rights and privacy – and where the tipping point is.
• 
  The Politics of Hacking Back, the Origins of ExploitGym, and Water Plant Attacks 21.08.2026 44p

  This week we discuss the new White House memo on using private sector operators in offensive cyber operations, Lindsey's deep dive into the origins of the ExploitGym AI benchmark, and the rash of attacks on water utilities in the U.S.LinksInside ExploitGym: https://decipher.sc/2026/08/20/inside...White House memo: https://www.whitehouse.gov/presidenti...OpenAI post: https://openai.com/index/the-defender...
• 
  How AI is reshaping attacker and defender behavior | Adam Meyers 19.08.2026 53p

  Adam Meyers of CrowdStrike joins Dennis to dive into the rapidly changing nature of both attacker and defender behavior in the AI age and how organizations need to shift their priorities to combat agentic threats. Then we talk about the new White House policy loosening the restrictions on private sector operators doing offensive cyper ops.
• 
  The truth about AI model security and what's coming next | Gary McGraw 10.08.2026 39p

  AI security pioneer and machine learning expert Gary McGraw helps Dennis separate the facts from fiction about the recent OpenAI, Meta, and Anthropic model escapes, what the real risks to enterprises are from agentic AI, and what he sees as the true threats on the horizon.
• 
  More AI Model Escapes and New Backdoored Chinese Routers 05.08.2026 37p

  We can't go a week without an AI model escaping its bounds, and this week we talk about a new test by the AI Security Institute in which OpenAI and Anthropic models escaped the evaluation environment and tried to start a supply chain attack, then we discuss news of Zbtlink routers having a persistent backdoor.