The Curious Engineer

All blogs / Security

Decipher

decipher.sc

Security Without Fear

Security

’25’26
Posts
189 from 23 Jul 2025 to 28 Oct 2026
Posting
weekly (143 in the last year)
Kind
magazine
Feed
https://decipher.sc/feed/

2026 125

  1. Hive, Nefilim Ransomware Affiliate Sentenced to 70 Months in Jail
  2. Hive, Nefilim Ransomware Affiliate Sentenced to 70 Months in Jail
  3. No Major PHP2Shell Exploits Seen Yet
  4. Critical PHP Flaws Disclosed, Patches Out Now
  5. Ongoing Microsoft 365 Campaign Abuses ConnectWise App
  6. The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust
  7. Ivanti Connect Secure Zero-Day Exploited in Attacks
  8. Healthcare Cybersecurity Has a Problem. This Bill Wants to Fix It
  9. Patching Faster Has Never Been the Answer
  10. FBI Warns of FortiBleed Attacks Leading to Lockouts, Ransomware
  11. AI May Be the Future, But Talent is What Builds Security
  12. Catch Me If You Can is the Social Engineeer’s Playbook
  13. New Citrix NetScaler Issue Emerges
  14. Cisco Warns of Critical, Exploited Catalyst SD-WAN Manager Flaw
  15. Inside the Citrix NetScaler Zero Day Saga
  16. Researchers Warn of Citrix NetScaler Exploitation
  17. F5 CVE-2026-94127 Targeted in Active Attacks
  18. Researchers Find Windows Malware With Autonomous C2 Functionality
  19. Fake LastPass Authenticator Pages Deliver Rapuncel Infostealer
  20. ‘We Have Enough AI’: Realism in a Time of Relentless Hype
  21. New SparroWocky Backdoor Targets Latin America
  22. US, UK Agencies Detail Iranian Malware Campaign Targeting Dissidents
  23. Here Come the AI-Generated BEC Scams
  24. Russian National Extradited to US to Face Bank Account Takeover Charges
  25. MicroTik Routers Under Attack in New Campaign
  26. New Campaign Weaponizes Microsoft Teams for Remote Access
  27. One Year of Decipher (Relaunched)
  28. Critical Artifactory Bug Under Attack
  29. Linux Foundation Backs New TRACE AI Security Standard
  30. Unauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520
  31. Inside ExploitGym: How Researchers Are Measuring AI Agent Exploitation Capabilities
  32. MLflow Bug Actively Exploited to Steal Credentials
  33. Researchers Find Persistent Backdoor in Zbtlink Routers
  34. OpenAI, Anthropic AI Agents Performed ‘Unsanctioned’ Actions During Cyber Tests
  35. Exploits Target N-able CVE-2026-18577 Flaw
  36. OpenAI-Hugging Face Breach: Five New Things We Learned
  37. Your LLM Is Showing: New Data Finds Sharp Rise in Exposed AI Tools
  38. Critical SharePoint Bug Under Attack
  39. The Joy and Pain of OT Cybersecurity: A Conversation With Lesley Carhart
  40. Bug in Cursor Allows Simple RCE
  41. Unsealed DoJ Indictment Targets Bulletproof Hosting Services
  42. US Sanctions First VPN Cybercriminal Service
  43. New Forg365 PhaaS Kit Emerges
  44. Researchers Find New GhostApproval Bug in Many AI Coding Assistants
  45. Chinese APT UAT-7810 Expands Malware Arsenal
  46. DoJ: Alleged Scattered Spider Member Extradited to US
  47. Evil Is as Evil Does: New EvilTokens Affiliate Panel Uncovered
  48. New Turla Stockstay Backdoor Emerges
  49. Targeting Cybercrime ‘Assembly Lines:’ Europol Announces Malware Crackdown
  50. macOS Gaslight Backdoor Weaponizes Prompt Injection Against Security Analysts
  51. FortiBleed Credential Theft Campaign Marches On
  52. Mastra AI Hit By npm Compromise
  53. Oracle Zero-Day Linked to Latest ShinyHunters Attacks
  54. Anthropic Warns of LLMs’ Impact on (Already Shrinking) N-Day Exploit Gap
  55. The Ugly Roots of the Surveillance State
  56. Check Point VPN Flaw Targeted by Ransomware Actors
  57. New Shai Hulud Variant Hits Red Hat npm Packages
  58. The Past is Always Present in Vulnerability Disclosure
  59. FBI: Silent Ransom Group Turns to IT Support Ploy
  60. Coordinated Takedown Cripples Glassworm Malware Network
  61. Authorities Disrupt First VPN Cybercriminal Service
  62. GitHub Confirms Internal Breach
  63. Data Shows Thousands of Automatic Tank Gauges Exposed Across the US
  64. Grafana Investigating Token Compromise and Extortion Attempt
  65. Ongoing Supply Chain Attack Expands to PyPi
  66. Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973
  67. New Dirty Frag Linux Bug Emerges
  68. Palo Alto CVE-2026-0300 Actively Exploited
  69. Karakurt Ransomware Negotiator Sentenced to 8 Years Prison
  70. Serious Apache Web Server Bug Patched
  71. A Copy Fail FAQ
  72. Researchers Warn of Critical cPanel Flaw CVE-2026-41940
  73. Windows CVE-2026-32202 Exploited in the Wild
  74. Stealthy Deep#Door Stealer Targets Windows Machines, Credentials
  75. Alleged Silk Typhoon Hacker Extradited to US
  76. Firestarter Malware Sparks Updated CISA Emergency Directive
  77. Attackers Target Checkmarx KICS Ecosystem
  78. Cisco CVE-2026-20133 Targeted in Active Attacks
  79. Vercel Says Internal Systems Hit in Breach
  80. New Campaign Targets Mac Users With Novel Malware
  81. Myths and Mythos: An AI Vulnerability Research FAQ
  82. Anthropic’s Claude Mythos is Just the Beginning
  83. US Gov: Iran-Linked Actors Targeting Critical Infrastructure PLCs
  84. The $285M Drift Protocol Heist Was ‘6 Months in the Making’
  85. Fortinet CVE-2026-35616 Actively Exploited
  86. Supply Chain Attack Hits Axios NPM Packages
  87. Command Injection Bug in OpenAI Codex Exposed GitHub OAuth Tokens
  88. TeamPCP’s Supply Chain Attack Spree Continues
  89. For AI and Security, ‘The Storm is Coming’
  90. DoJ Sentences Russian Initial Access Broker to 6 Years in Prison
  91. Mark Watney: Space Hacker
  92. EU Sanctions Iranian and Chinese Companies for Targeting Member Nations
  93. US, Europol Crack Down on SocksEscort Residential Proxy Network
  94. APT28 Reemerges with Modern Espionage Arsenal, Code Tied to 2010s Operations
  95. Mister Decipher’s Neighborhood
  96. Google: Commercial Surveillance Vendors Dominated Zero-Day Exploitation in 2025
  97. Microsoft, Europol Disrupt Tycoon 2FA Phishing Service
  98. Q&A: Tod Beardsley on How to Use CISA’s KEV Catalog
  99. Cisco, NSA Warn of Attacks Targeting Catalyst SD-WAN Zero Day
  100. Microsoft Uncovers New Malicious Campaign Targeting Developers
  101. Google Disrupts ‘Prolific, Elusive’ China-Linked Actor
  102. Former US Defense Contractor Sentenced to Jail For Selling Exploits
  103. Researchers Warn of ‘Widespread’ Ivanti EPMM Exploitation
  104. Chinese Actors Exploited Dell RecoverPoint for VMs Flaw Since 2024
  105. Apple Patches iOS Zero Day CVE-2026-20700
  106. Microsoft Fixes Six Exploited Bugs in February Patch Tuesday Updates
  107. Singapore Says China-Linked Threat Actors Targeted Telecom Sector
  108. US Gov Directive Cracks Down on Unsupported Edge Devices
  109. New SystemBC Botnet Activity Targets Systems Worldwide
  110. Phreaks and Geeks: Joybubbles and the Pre-History of Hacking
  111. Google Mandiant: ShinyHunters Attacks Target SaaS Platforms Via SSO, MFA Abuse
  112. Ivanti Discloses Exploited Critical EPMM Flaws
  113. Google Disrupts IPIDEA Residential Proxy Network
  114. Fortinet Warns of Critical Flaw After FortiCloud SSO Exploitation
  115. Cybercrime and APT Groups Exploiting WinRAR Bug
  116. Microsoft Releases Emergency Patch for CVE-2026-21509
  117. Cisco Fixes Unified Communications RCE Flaw Under Attack
  118. Fortinet FortiGate Devices Targeted in New Campaign
  119. High-Risk Authentication Bypass Flaw Found in Telnetd
  120. UK Warns of DoS Attacks by Russian Hacktivist Group NoName057(16)
  121. Microsoft Disrupts RedVDS Cybercrime Platform
  122. ‘We Fail a Lot’: How Two Security Pioneers Keep Innovating
  123. A New Chinese APT Takes the Stage
  124. React2Shell Attacks Continue to Build
  125. IBM Warns of Critical Auth Bypass Bug in API Connect

2025 64

  1. Serious MongoDB Flaw CVE-2025-14847 Under Exploitation
  2. Is Kevin McCallister the Greatest Hacker in Movie History?
  3. Threat Actors Target Unpatched Cisco AsyncOS Zero-Day
  4. Russian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure Attacks
  5. The Enduring Hacker Legacy of Heat
  6. Broad Exploit Activity Targets React2Shell Flaw
  7. Government, Private Sector Officials Mull Telecom Security Woes
  8. Critical Flaw CVE-2025-55182 Affects React Server Components
  9. New MuddyWater Campaign Hits Israeli Targets
  10. New Shai Hulud NPM Worm Emerges
  11. DoJ Sanctions Bulletproof Hosting Provider Used By Ransomware Groups
  12. Fortinet CVE-2025-64446 Under Active Attack
  13. Marks and Spencer’s Profit Drop: The Financial Toll of Cyberattacks
  14. Google Wants to Snuff Out ‘Lighthouse’ Phishing Kit
  15. APT Targets Cisco and Citrix Zero Days
  16. Microsoft Warns of Exploited Windows Kernel Zero-Day
  17. Q&A: Sean Zadig of Yahoo on Employing AI in Security
  18. Google: Threat Actors Testing AI During Malware Execution
  19. With AI and Security, ‘Everyone is Still Learning’
  20. Google Chrome to Enable HTTPS Default Browsing
  21. New Lazarus Group Campaign Targets EU Defense Companies
  22. US Facing ‘Unprecedented Setback’ in Cyber Policy Priorities: CSC Report
  23. It’s All Just Electrons: The Enduring Legacy of Sneakers
  24. Why WarGames is Still Predicting the Future 40 Years Later
  25. F5: Attacker Accessed BIG-IP Source Code, Bug Data
  26. Microsoft Fixes Actively Exploited Flaws in Patch Tuesday Release
  27. Oracle Warns of E-Business Suite Bug
  28. Oracle Clop Data Theft Campaign Started Months Ago
  29. Data Connects Scanning Surges for Cisco, Fortinet, PAN Devices
  30. Attackers Exploit Critical GoAnywhere Bug to Spread Medusa Ransomware
  31. Oracle Patches E-Business Suite Zero-Day Amid Clop Extortion Attacks
  32. VMware Patches Bug Exploited By State Actors
  33. Microsoft Releases New Agentic AI Tools
  34. Akira Ransomware Actors Target SonicWall SSLVPN
  35. Cisco Warns of Attacks on Two ASA Flaws
  36. GitHub Aims to Improve npm Security After Malware Campaigns
  37. Three Takeaways From the EU Airport Outages
  38. Mac Malware Campaign Uses Fake GitHub Pages, LastPass Lure
  39. Russian APT Groups Turla, Gamaredon Collaborate to Target High-Profile Ukrainian Entities
  40. Two British Teens Charged Over Scattered Spider Hacks
  41. Microsoft, Cloudflare Disrupt RaccoonO365 Phishing Kit Service
  42. New Automated npm Attack Campaign Targets Dozens of Packages
  43. Senator Flags Microsoft’s Role in the Ascension Ransomware Hack
  44. US Indicts LockerGoga, MegaCortex, Nefilim Ransomware Admin
  45. Attack Compromises Popular NPM Packages
  46. Wyden Slams Federal Judiciary After Court Hack
  47. Cloudflare Details Salesloft Drift Breach
  48. Decipher is Everyone
  49. UNC6395 Expands Data Theft Campaign to Email OAuth Tokens
  50. US Gov Links Private Chinese Firms to Salt Typhoon Hacks
  51. Citrix CVE-2025-7775 Under Active Attack
  52. DoJ Seizes $2.8M Linked to Zeppelin Ransomware
  53. CISA, Microsoft Warn of Exchange CVE-2025-53786 Risk
  54. The Emerging Ecosystem Dedicated to AI Accountability
  55. Attacks Hit Possible SonicWall Zero Day
  56. New PXA Stealer Campaign Hits Victims Worldwide
  57. Challenges Remain in Evaluating Ransomware Crackdowns
  58. Microsoft Finds Secret Blizzard Targeting Foreign Diplomats
  59. Chinese Attackers Target SharePoint CVE-2025-53770
  60. ‘Nothing’s Going to Last Forever’: An Oral History of the L0pht, Part 4
  61. Thirty Minutes Or Less: An Oral History of the L0pht, Part 3
  62. ‘Microsoft Was Freaking Out’: An Oral History of the L0pht, Part 2
  63. ‘We Got to Be Cool About This‘: An Oral History of the LØpht, Part 1
  64. Don’t Call It A Comeback