The Curious Engineer

All blogs / Security

Decipher

decipher.sc

Security Without Fear

Security

’25’26
Posts
194 from 23 Jul 2025 to 7 Nov 2026
Posting
weekly (146 in the last year)
Kind
magazine
Feed
https://decipher.sc/feed/

2026 130

  1. SonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)
  2. Attacks Target New OpenSSH Flaw
  3. Binance’s $6.3B Hack: Inside the DPRK’s Attack and Crypto Laundering Operation
  4. Second Wave of Suspected Cyberattacks Hits European Supermarket Freezers
  5. Critical Linux Kernel Bug Patched
  6. Hive, Nefilim Ransomware Affiliate Sentenced to 70 Months in Jail
  7. Hive, Nefilim Ransomware Affiliate Sentenced to 70 Months in Jail
  8. No Major PHP2Shell Exploits Seen Yet
  9. Critical PHP Flaws Disclosed, Patches Out Now
  10. Ongoing Microsoft 365 Campaign Abuses ConnectWise App
  11. The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust
  12. Ivanti Connect Secure Zero-Day Exploited in Attacks
  13. Healthcare Cybersecurity Has a Problem. This Bill Wants to Fix It
  14. Patching Faster Has Never Been the Answer
  15. FBI Warns of FortiBleed Attacks Leading to Lockouts, Ransomware
  16. AI May Be the Future, But Talent is What Builds Security
  17. Catch Me If You Can is the Social Engineeer’s Playbook
  18. New Citrix NetScaler Issue Emerges
  19. Cisco Warns of Critical, Exploited Catalyst SD-WAN Manager Flaw
  20. Inside the Citrix NetScaler Zero Day Saga
  21. Researchers Warn of Citrix NetScaler Exploitation
  22. F5 CVE-2026-94127 Targeted in Active Attacks
  23. Researchers Find Windows Malware With Autonomous C2 Functionality
  24. Fake LastPass Authenticator Pages Deliver Rapuncel Infostealer
  25. ‘We Have Enough AI’: Realism in a Time of Relentless Hype
  26. New SparroWocky Backdoor Targets Latin America
  27. US, UK Agencies Detail Iranian Malware Campaign Targeting Dissidents
  28. Here Come the AI-Generated BEC Scams
  29. Russian National Extradited to US to Face Bank Account Takeover Charges
  30. MicroTik Routers Under Attack in New Campaign
  31. New Campaign Weaponizes Microsoft Teams for Remote Access
  32. One Year of Decipher (Relaunched)
  33. Critical Artifactory Bug Under Attack
  34. Linux Foundation Backs New TRACE AI Security Standard
  35. Unauthenticated RCE Chain Found For Microsoft SharePoint CVE-2026-55040 and CVE-2026-63520
  36. Inside ExploitGym: How Researchers Are Measuring AI Agent Exploitation Capabilities
  37. MLflow Bug Actively Exploited to Steal Credentials
  38. Researchers Find Persistent Backdoor in Zbtlink Routers
  39. OpenAI, Anthropic AI Agents Performed ‘Unsanctioned’ Actions During Cyber Tests
  40. Exploits Target N-able CVE-2026-18577 Flaw
  41. OpenAI-Hugging Face Breach: Five New Things We Learned
  42. Your LLM Is Showing: New Data Finds Sharp Rise in Exposed AI Tools
  43. Critical SharePoint Bug Under Attack
  44. The Joy and Pain of OT Cybersecurity: A Conversation With Lesley Carhart
  45. Bug in Cursor Allows Simple RCE
  46. Unsealed DoJ Indictment Targets Bulletproof Hosting Services
  47. US Sanctions First VPN Cybercriminal Service
  48. New Forg365 PhaaS Kit Emerges
  49. Researchers Find New GhostApproval Bug in Many AI Coding Assistants
  50. Chinese APT UAT-7810 Expands Malware Arsenal
  51. DoJ: Alleged Scattered Spider Member Extradited to US
  52. Evil Is as Evil Does: New EvilTokens Affiliate Panel Uncovered
  53. New Turla Stockstay Backdoor Emerges
  54. Targeting Cybercrime ‘Assembly Lines:’ Europol Announces Malware Crackdown
  55. macOS Gaslight Backdoor Weaponizes Prompt Injection Against Security Analysts
  56. FortiBleed Credential Theft Campaign Marches On
  57. Mastra AI Hit By npm Compromise
  58. Oracle Zero-Day Linked to Latest ShinyHunters Attacks
  59. Anthropic Warns of LLMs’ Impact on (Already Shrinking) N-Day Exploit Gap
  60. The Ugly Roots of the Surveillance State
  61. Check Point VPN Flaw Targeted by Ransomware Actors
  62. New Shai Hulud Variant Hits Red Hat npm Packages
  63. The Past is Always Present in Vulnerability Disclosure
  64. FBI: Silent Ransom Group Turns to IT Support Ploy
  65. Coordinated Takedown Cripples Glassworm Malware Network
  66. Authorities Disrupt First VPN Cybercriminal Service
  67. GitHub Confirms Internal Breach
  68. Data Shows Thousands of Automatic Tank Gauges Exposed Across the US
  69. Grafana Investigating Token Compromise and Extortion Attempt
  70. Ongoing Supply Chain Attack Expands to PyPi
  71. Ivanti Warns of Exploited EPMM Flaw CVE-2026-6973
  72. New Dirty Frag Linux Bug Emerges
  73. Palo Alto CVE-2026-0300 Actively Exploited
  74. Karakurt Ransomware Negotiator Sentenced to 8 Years Prison
  75. Serious Apache Web Server Bug Patched
  76. A Copy Fail FAQ
  77. Researchers Warn of Critical cPanel Flaw CVE-2026-41940
  78. Windows CVE-2026-32202 Exploited in the Wild
  79. Stealthy Deep#Door Stealer Targets Windows Machines, Credentials
  80. Alleged Silk Typhoon Hacker Extradited to US
  81. Firestarter Malware Sparks Updated CISA Emergency Directive
  82. Attackers Target Checkmarx KICS Ecosystem
  83. Cisco CVE-2026-20133 Targeted in Active Attacks
  84. Vercel Says Internal Systems Hit in Breach
  85. New Campaign Targets Mac Users With Novel Malware
  86. Myths and Mythos: An AI Vulnerability Research FAQ
  87. Anthropic’s Claude Mythos is Just the Beginning
  88. US Gov: Iran-Linked Actors Targeting Critical Infrastructure PLCs
  89. The $285M Drift Protocol Heist Was ‘6 Months in the Making’
  90. Fortinet CVE-2026-35616 Actively Exploited
  91. Supply Chain Attack Hits Axios NPM Packages
  92. Command Injection Bug in OpenAI Codex Exposed GitHub OAuth Tokens
  93. TeamPCP’s Supply Chain Attack Spree Continues
  94. For AI and Security, ‘The Storm is Coming’
  95. DoJ Sentences Russian Initial Access Broker to 6 Years in Prison
  96. Mark Watney: Space Hacker
  97. EU Sanctions Iranian and Chinese Companies for Targeting Member Nations
  98. US, Europol Crack Down on SocksEscort Residential Proxy Network
  99. APT28 Reemerges with Modern Espionage Arsenal, Code Tied to 2010s Operations
  100. Mister Decipher’s Neighborhood
  101. Google: Commercial Surveillance Vendors Dominated Zero-Day Exploitation in 2025
  102. Microsoft, Europol Disrupt Tycoon 2FA Phishing Service
  103. Q&A: Tod Beardsley on How to Use CISA’s KEV Catalog
  104. Cisco, NSA Warn of Attacks Targeting Catalyst SD-WAN Zero Day
  105. Microsoft Uncovers New Malicious Campaign Targeting Developers
  106. Google Disrupts ‘Prolific, Elusive’ China-Linked Actor
  107. Former US Defense Contractor Sentenced to Jail For Selling Exploits
  108. Researchers Warn of ‘Widespread’ Ivanti EPMM Exploitation
  109. Chinese Actors Exploited Dell RecoverPoint for VMs Flaw Since 2024
  110. Apple Patches iOS Zero Day CVE-2026-20700
  111. Microsoft Fixes Six Exploited Bugs in February Patch Tuesday Updates
  112. Singapore Says China-Linked Threat Actors Targeted Telecom Sector
  113. US Gov Directive Cracks Down on Unsupported Edge Devices
  114. New SystemBC Botnet Activity Targets Systems Worldwide
  115. Phreaks and Geeks: Joybubbles and the Pre-History of Hacking
  116. Google Mandiant: ShinyHunters Attacks Target SaaS Platforms Via SSO, MFA Abuse
  117. Ivanti Discloses Exploited Critical EPMM Flaws
  118. Google Disrupts IPIDEA Residential Proxy Network
  119. Fortinet Warns of Critical Flaw After FortiCloud SSO Exploitation
  120. Cybercrime and APT Groups Exploiting WinRAR Bug
  121. Microsoft Releases Emergency Patch for CVE-2026-21509
  122. Cisco Fixes Unified Communications RCE Flaw Under Attack
  123. Fortinet FortiGate Devices Targeted in New Campaign
  124. High-Risk Authentication Bypass Flaw Found in Telnetd
  125. UK Warns of DoS Attacks by Russian Hacktivist Group NoName057(16)
  126. Microsoft Disrupts RedVDS Cybercrime Platform
  127. ‘We Fail a Lot’: How Two Security Pioneers Keep Innovating
  128. A New Chinese APT Takes the Stage
  129. React2Shell Attacks Continue to Build
  130. IBM Warns of Critical Auth Bypass Bug in API Connect

2025 64

  1. Serious MongoDB Flaw CVE-2025-14847 Under Exploitation
  2. Is Kevin McCallister the Greatest Hacker in Movie History?
  3. Threat Actors Target Unpatched Cisco AsyncOS Zero-Day
  4. Russian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure Attacks
  5. The Enduring Hacker Legacy of Heat
  6. Broad Exploit Activity Targets React2Shell Flaw
  7. Government, Private Sector Officials Mull Telecom Security Woes
  8. Critical Flaw CVE-2025-55182 Affects React Server Components
  9. New MuddyWater Campaign Hits Israeli Targets
  10. New Shai Hulud NPM Worm Emerges
  11. DoJ Sanctions Bulletproof Hosting Provider Used By Ransomware Groups
  12. Fortinet CVE-2025-64446 Under Active Attack
  13. Marks and Spencer’s Profit Drop: The Financial Toll of Cyberattacks
  14. Google Wants to Snuff Out ‘Lighthouse’ Phishing Kit
  15. APT Targets Cisco and Citrix Zero Days
  16. Microsoft Warns of Exploited Windows Kernel Zero-Day
  17. Q&A: Sean Zadig of Yahoo on Employing AI in Security
  18. Google: Threat Actors Testing AI During Malware Execution
  19. With AI and Security, ‘Everyone is Still Learning’
  20. Google Chrome to Enable HTTPS Default Browsing
  21. New Lazarus Group Campaign Targets EU Defense Companies
  22. US Facing ‘Unprecedented Setback’ in Cyber Policy Priorities: CSC Report
  23. It’s All Just Electrons: The Enduring Legacy of Sneakers
  24. Why WarGames is Still Predicting the Future 40 Years Later
  25. F5: Attacker Accessed BIG-IP Source Code, Bug Data
  26. Microsoft Fixes Actively Exploited Flaws in Patch Tuesday Release
  27. Oracle Warns of E-Business Suite Bug
  28. Oracle Clop Data Theft Campaign Started Months Ago
  29. Data Connects Scanning Surges for Cisco, Fortinet, PAN Devices
  30. Attackers Exploit Critical GoAnywhere Bug to Spread Medusa Ransomware
  31. Oracle Patches E-Business Suite Zero-Day Amid Clop Extortion Attacks
  32. VMware Patches Bug Exploited By State Actors
  33. Microsoft Releases New Agentic AI Tools
  34. Akira Ransomware Actors Target SonicWall SSLVPN
  35. Cisco Warns of Attacks on Two ASA Flaws
  36. GitHub Aims to Improve npm Security After Malware Campaigns
  37. Three Takeaways From the EU Airport Outages
  38. Mac Malware Campaign Uses Fake GitHub Pages, LastPass Lure
  39. Russian APT Groups Turla, Gamaredon Collaborate to Target High-Profile Ukrainian Entities
  40. Two British Teens Charged Over Scattered Spider Hacks
  41. Microsoft, Cloudflare Disrupt RaccoonO365 Phishing Kit Service
  42. New Automated npm Attack Campaign Targets Dozens of Packages
  43. Senator Flags Microsoft’s Role in the Ascension Ransomware Hack
  44. US Indicts LockerGoga, MegaCortex, Nefilim Ransomware Admin
  45. Attack Compromises Popular NPM Packages
  46. Wyden Slams Federal Judiciary After Court Hack
  47. Cloudflare Details Salesloft Drift Breach
  48. Decipher is Everyone
  49. UNC6395 Expands Data Theft Campaign to Email OAuth Tokens
  50. US Gov Links Private Chinese Firms to Salt Typhoon Hacks
  51. Citrix CVE-2025-7775 Under Active Attack
  52. DoJ Seizes $2.8M Linked to Zeppelin Ransomware
  53. CISA, Microsoft Warn of Exchange CVE-2025-53786 Risk
  54. The Emerging Ecosystem Dedicated to AI Accountability
  55. Attacks Hit Possible SonicWall Zero Day
  56. New PXA Stealer Campaign Hits Victims Worldwide
  57. Challenges Remain in Evaluating Ransomware Crackdowns
  58. Microsoft Finds Secret Blizzard Targeting Foreign Diplomats
  59. Chinese Attackers Target SharePoint CVE-2025-53770
  60. ‘Nothing’s Going to Last Forever’: An Oral History of the L0pht, Part 4
  61. Thirty Minutes Or Less: An Oral History of the L0pht, Part 3
  62. ‘Microsoft Was Freaking Out’: An Oral History of the L0pht, Part 2
  63. ‘We Got to Be Cool About This‘: An Oral History of the LØpht, Part 1
  64. Don’t Call It A Comeback