Decipher@DecipherSec

Security without fear. Cybersecurity news that informs and inspires. Editors: @DennisF & @lindseyOD123. youtube.com/@DecipherSec

decipher.sc
Joined September 2017
337 Photos and videos
interesting timeline here. thephp.foundation/blog/2026/…

Today's PHP Security Release, and How We're Strengthening PHP Security

Describing the story behind how critical security vulnerabilities were found and fixed.

thephp.foundation
43
It's gonna be a busy day for defenders. Time to get those PHP patches installed ASAP. decipher.sc/2026/10/20/criti…

Critical PHP Flaws Disclosed, Patches Out Now - Decipher

The two flaws are CVE-2026-109618 and CVE-2026-109619 and are said to affect PHP versions 5, 6, 7, and 8. 

decipher.sc
1
2
122
The PHP patches are out. php.net/archive/2026.php#202…
1
6
289
Tough week to be a website. decipher.sc/2026/10/20/resea…

Researchers Warn of Upcoming Critical PHP Flaws - Decipher

The two flaws are CVE-2026-109618 and CVE-2026-109619 and are said to affect PHP versions 5, 6, 7, and 8. 

decipher.sc
1
2
7
754
The @php_net team just posted an early notice saying the release will be out 10/21 at 9 AM EDT. php.net/archive/2026.php#202…

PHP: News Archive - 2026

PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

php.net
138
Well this is suboptimal. emudhra.we-have-a-problem.co…
5
587
Focusing public policy discussions around AI on societal goods rathen than tech giants is a better way forward.
1
1
123
Our full podcast with the great @beauwoods is up now! youtu.be/9v7LwNIvmAE?si=96zq…

When Hackers Meet Policymakers | Beau Woods

Cybersecurity policy can stall when technical experts and lawmakers...

youtube.com
1
127
Do you want a limited edition Decipher hoodie? Of course you do! Just be our 25,000th(!) sub on @YouTube and we'll hook you up. We're very close, so watch that number. Send us a before/after screenshot to info at decipher dot sc. (US folks only please) Good luck!
1
115
Thinking about how AI models work for...reasons? Our conversation with @suremarv has some key insights into how they're built and why they don't always behave nicely. youtu.be/tMuNl6Y8a10?si=SNBY…

Assessing AI Model Security From the Outside In | Matt Fredrikson

The security and reliability of the code in AI models is a huge que...

youtube.com
2
2
336
In case you have a life and weren't tracking this over the weekend, this incident is ongoing and going poorly. decipher.sc/2026/10/18/ongoi…

Ongoing Microsoft 365 Campaign Abuses ConnectWise App - Decipher

Threat actors have compromised a credential within the vendor’s infrastructure, allowing them to abuse a client assertion that bypasses traditional user authentication.

decipher.sc
1
167
Decipher retweeted
lcamtuf@lcamtuf
Oct 16
Just once, I'd like to see a company come forward and say "we got badly breached, and we analyzed the evidence, and you know what, we don't think the adversary was extremely sophisticated at all"
15
42
284
8,281
decipher.sc/2026/10/18/ongoi…

Ongoing Microsoft 365 Campaign Abuses ConnectWise App - Decipher

Threat actors have compromised a credential within the vendor’s infrastructure, allowing them to abuse a client assertion that bypasses traditional user authentication.

decipher.sc
1
176
AI isn't your biggest adversary
102
Decipher retweeted
Dennis@DennisF
Oct 16
We somehow got on the subject of Market Basket in today's @DecipherSec podcast.
1
139
New podcast is up! Complete with a sweet new intro from our friends at @finalfinal! youtu.be/-jtGD-1F9N8?si=Xwju…

Hacked Fridges, North Korean Laptop Farms, and Mercenary Spyware

This week, we're talking about hacked refrigerators, the FBI disrup...

youtube.com
1
4
559
Decipher retweeted
Dennis@DennisF
Oct 16
Need some Friday fun? Watch me and @LindseyOD123 and @SheaSerrano talk about CATCH ME IF YOU CAN, which is a much better film than TITANIC. youtu.be/KZPrs6aGR9U?si=QLpe…

Catch Me If You Can with Shea Serrano!

Bestselling author Shea Serrano joins Dennis Fisher and Lindsey O’D...

youtube.com
1
1
174
Whe those rad dinosaurs showed up in JURASSIC PARK, that's when @SheaSerrano knew Spielberg was a real one.
1
126
This is one to watch. It's already been exploited. sec.cloudapps.cisco.com/secu…

Cisco Security Advisory: Cisco Secure Email Gateway Arbitrary File Write Vulnerability

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating...

sec.cloudapps.cisco.com
132
Tech is cool and all, but have you tried having people do security things?
1
103
More gems from @_JohnHammond are available in our full podcast! youtu.be/Umc7KZp8TRc?si=csPX…

The ClickFix Epidemic and AI-Enabled Attacks | John Hammond

John Hammond of Huntress joins Dennis Fisher to dive into the Click...

youtube.com
73
Load more