Decipher Security Podcast

Decipher

Every week, Dennis Fisher and Lindsey O'Donnell-Welch, the editors of Decipher, bring you exclusive, in-depth conversations with security researchers, CISOs, founders, and security experts to hellp you understand the threat landscape and better protect your organizations.

Subscribe Listen in podnod RSS feed Show website

370 episodes
Updated Friday

Episodes370

Newest first

Mar 29, 2022 · 32 min
Caitlin Condon
Caitlin Condon, vulnerability research manager at Rapid7, talks about the rise of “widespread threats,” how the time to exploitation by attackers has shifted, and what that means for security teams. Support the show
Mar 25, 2022 · 4 min
Source Code 3/25
Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. In this week’s podcast, security experts discuss Lapsus$, a group that made big claims this week that it hacked both Okta and Microsoft. Both Okta and Microsoft confirmed the hacks. Support the show
Mar 11, 2022 · 7 min
Source Code 3/11
Welcome to the Source Code podcast by Decipher, where we take a look behind the scenes at top news with input from our sources. This week, researchers disclosed a set of seven vulnerabilities in PTC’s Axeda platform, which is preinstalled on connected devices, particularly in the healthcare industry. In other news, researchers detailed three flaws that affect APC SmartConnect and Smart-UPS devices, which are used to supply constant power to many types of network devices, Support the show
Mar 8, 2022 · 31 min
Runa Sandvik
Runa Sandvik discusses her work helping journalists to secure their devices and how more newsrooms are recognizing the need for better cybersecurity measures. Support the show
Mar 4, 2022 · 7 min
Source Code 3/4
Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. In this week’s podcast, security experts discuss a new type of distributed denial-of-service attack technique; as well as the Strengthening American Cybersecurity Act, which was recently passed by the Senate. Support the show
Feb 28, 2022 · 51 min
Mike Hanley
Mike Hanley, CSO at GitHub and former VP of security at Duo Security, joins Dennis Fisher to talk about the open source security summit at the White House, the Log4j response, and how the tech industry can support the open source community. Support the show
Feb 25, 2022 · 6 min
Source Code 2/25
Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. Researchers this week uncovered similarities in the code of the Dridex malware and Entropy ransomware. In other news, Nitin Natarajan, deputy director for the Cybersecurity and Infrastructure Security Agency (CISA), talked to Decipher this week about the agency’s top initiatives. Support the show
Feb 22, 2022 · 28 min
Nitin Natarajan
Nitin Natarajan, deputy director for the Cybersecurity and Infrastructure Security Agency (CISA), talks about how the agency is tackling various emerging security challenges more effectively. Support the show
Feb 18, 2022 · 5 min
Source Code 2/18
Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. Topping the news this week, CISA is requiring federal agencies to patch actively exploited vulnerabilities in Google Chrome and the Adobe Commerce and Magento platforms. Also this week, the FBI warned of U.S. critical infrastructure compromises by the BlackByte ransomware group. Support the show
Feb 14, 2022 · 48 min
Chris Eng
Chris Eng of Veracode joins Dennis Fisher to talk about the company's new State of Software Security report and what's driving the increase in enterprises scanning their apps for vulnerabilities. Support the show
Feb 11, 2022 · 6 min
Source Code 2/11
Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. Topping the news this week, Microsoft plans to block macros obtained from the internet by default for several Office applications, including Access, Excel, PowerPoint, Visio and Word. Also this week, the U.S., UK, and Australia released a joint security advisory that showcased how ransomware attacks became an increased globalized threat in 2021. Support the show
Feb 10, 2022 · 40 min
Allan Liska
Allan Liska, intelligence analyst with Recorded Future, discusses the challenges that organizations face in implementing security measures to protect against ransomware, and how ransomware actors are evolving their tactics, services-for-hire models and victimology. Support the show
Feb 4, 2022 · 5 min
Source Code 2/4
Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. Topping the news this week, Samba patched a vulnerability that could enable remote, unauthenticated attackers to execute arbitrary code as root on impacted installations. Also this week, the U.S. government launched a Cyber Safety Review Board, which will bring together private and public sector industry leaders to assess the lessons learned from “significant cybersecurity events.” Support the show
Jan 28, 2022 · 6 min
Source Code 1/28
Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. This week, the White House has outlined a number of cybersecurity measures that federal agencies must adopt. Also this week, an easily exploitable vulnerability in a Linux component has been patched. Finally, Jon Callas, director of technology projects with EFF, joined the Decipher podcast this week to talk about invasive data tracking and surveillance during the pandemic. Support the show
Jan 27, 2022 · 45 min
Jon Callas
Jon Callas, director of technology projects with EFF, talks about invasive data tracking and surveillance during the pandemic. Support the show
Jan 21, 2022 · 4 min
Source Code 1/21
Welcome back to Source Code, Decipher’s weekly news podcast with input from our sources. Topping the news this week, president Joe Biden signed a new National Security Memorandum that aims to better secure national security systems. Also this week, Europol announced that several law enforcement authorities dismantled a VPN service that was being utilized by cybercriminals in order to deploy ransomware. Support the show
Jan 14, 2022 · 7 min
Source Code 1/14
Welcome to Source Code: Decipher’s behind the scenes look at the weekly news with input from our sources. Topping the headlines this week, Microsoft researchers released details for a recently patched vulnerability in macOS. Also in the news, U.S. Cyber Command exposed a number of open-source tools that it said are being used by the MuddyWater APT. And, researchers with Cisco Talos highlighted a phishing campaign that relied on "complex" obfuscation tactics in order to deliver three different RATs. Support the show
Jan 13, 2022 · 42 min
Robert Hansen
Robert Hansen (aka RSnake) joins Dennis Fisher to talk about his new research on NaN injection in Python and the issues with the software supply chain. Support the show
Jan 7, 2022 · 36 min
Crane Hassold
In a podcast discussion with Lindsey O'Donnell-Welch, Crane Hassold with Abnormal Security discusses how business email compromise attackers are getting savvier and best practices to defend against BEC attacks. Support the show
Dec 23, 2021 · 44 min
2021 Year in Review
Lindsey O'Donnell-Welch and Dennis Fisher look back on a wild year in cybersecurity and discuss the ongoing ransomware problem, the increase in zero days used in the wild, our favorite stories and podcasts of the year, and more. Support the show