Decipher
@deciphersec.bsky.social
Security without fear since 2018. https://decipher.sc https://www.youtube.com/@DecipherSec https://www.buzzsprout.com/228511/supporters/new
New @deciphersec.bsky.social podcast is out! 🤖 More AI models escaping their cages and doing bad things 🇨🇳 Research from @vulncheck.bsky.social on backdoored Chinese routers (Shoutout @weratedogs.com for the shirt 🐶) youtu.be/PLRi6IgJDEg?...
More AI Model Escapes and New Backdoored Chinese Routers
YouTube video by Decipher
youtu.be
Some interesting data from our friends at @talosintelligence.com on how attackers are using AI so far. blog.talosintelligence.com/keep-going-b...
“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI
Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we've seen bad actors leve...
blog.talosintelligence.com
We're available to help you name your app/tool/company/service.
The human toll of cybercrime is real and it's not spectacular.
New podcast is out! A conversation with Michael Sweeney of @silentpush.bsky.social about the value of proactive cyber defense in the face of increasing professionalization in cybercrime ops. youtu.be/pC5CcW7KRwE?...
How Cybercrime Groups Have Become APTs | Michael Sweeney
YouTube video by Decipher
youtu.be
now given that we now have systems, of our own creation, that are better at mathematics than the most capable humans we are going to experience a significant abstraction expansion on all our frontiers good thing mathematics isn't real and can't hurt us... ...right? *looks nervously at physics*
If you're into hacker history, this little book we found might be of interest.
New podcast is here and it's a jam-packed episode! 🕷️ Scattered Spider members sentenced 🤖 Cursor AI bug disclosure like it's 1999 🐛 Microsoft's massive Patch Tuesday dump youtu.be/gpC7bRa6qFs?...
The Cursor Bug Drama, Microsoft's Massive Patch Tuesday, and Scattered Spider Takes a Hit
YouTube video by Decipher
youtu.be
I talked to Decipher about my upcoming academic paper on legacy malware response in critical infrastructure cybersecpods.com/podcasts/dec...
Industrial Cybersecurity and Malware Archaeology with Lesley Carhart
Old malware like Conficker never really dies, and in industrial control and SCADA environments it can live forever undisturbed. Lesley Carhart of Dragos joins Dennis Fisher to talk about the myriad ch
cybersecpods.com
Great stuff from the Buddies this week, as usual.
Ryan Naraine@ryanaraine.bsky.social · last mo.Buried on p9 and p30 of a 'Scattered Spider' arrest indictment: Microsoft's never-before-detailed GDID device identifier, a persistent Windows fingerprint with massive implications for OPSEC, privacy, and APT tracking WATCH youtu.be/mx0CpTp3Q4Y?...
OT security is its own special discipline, and you're often dealing with machines that can't be updated or even pinged. @hacks4pancakes.com knows this all too well.
Our new podcast episode features a fascinating conversation with the brilliant @hacks4pancakes.com about the ins and outs of ICS security and how challenging it can be.
We have an absolute treat for y'all tomorrow on the podcast. The great @hacks4pancakes.com was kind enough to join us to talk about the joy and pain of ICS security, some delightful malware archaeology stories, and lots more. Coming at ya tomorrow!
Mythos, Fable, and the other superfriends are enabling researchers to find new vulnerabilities with a quickness, something that will likely keep accelerating.
There's plenty of cause for optimism when it comes to software security and coding, but it will take collective action, says Jack Cable.
The AI dual use problem is a tough one, and it's here to stay.
AI models have an inherent dual-use tension, much like offensive cybersecurity tools.
AI labs are bumping up against the government pretty regularly, but everything is a negotiation.
You're thinking about the Roman empire, but @k8em0.bsky.social is thinking about the rise and fall of security civilizations. (They crumble too.)
Sure, AI is changing the game for bug hunters, but humans are still at the heart of the process.
There's a lot more to cybersecurity than just finding and fixing more and more bugs. @k8em0.bsky.social knows.
Missed Episode 2 of Censys ARC Flash? Silas Cutler and Michael Schwartz covered: ☑️ Exposed ATG infrastructure ☑️ cPanel/WHM exploitation ☑️ MCP services & AI tooling Watch the full recording and explore the research: https://bit.ly/4xxoIf8 #CensysARC
New @deciphersec.bsky.social iPodcast is up! 📉 The incredible shrinking window between vuln disclosure and exploit 🩹 Changing patch schedule for @cisco.com and who may follow suit 🪲The Vulnpocalypse! open.spotify.com/episode/4PHa...
The Shrinking Exploit Window, Patch Schedule Changes, and the Vulnpocalypse
Decipher Security Podcast · Episode
open.spotify.com
