Security without fear. Cybersecurity news that informs and inspires. Editors: @DennisF & @lindseyOD123. https://xitter.cf/t.co/jcYvCZ704o

Joined September 2017
Decipher retweeted
lcamtuf@lcamtufOct 16
Just once, I'd like to see a company come forward and say "we got badly breached, and we analyzed the evidence, and you know what, we don't think the adversary was extremely sophisticated at all"
15
42
2
284
8,495
Decipher retweeted
We somehow got on the subject of Market Basket in today's @DecipherSec podcast.
1
140
Decipher retweeted
Need some Friday fun? Watch me and @LindseyOD123 and @SheaSerrano talk about CATCH ME IF YOU CAN, which is a much better film than TITANIC. youtu.be/KZPrs6aGR9U?si=QLpe…
1
1
175
Decipher retweeted
Matt is a legit hero and a tremendously nice guy. I talked to him on the @DecipherSec podcast a couple months ago. youtu.be/pZPU8T19xMQ?is=QsJM…
On this day 33 years ago, Significant Sig & First Sergeant Matt Eversmann, HAMPDEN-SYDNEY 2000, led a group of 13 U.S. Army Rangers during the Battle of Mogadishu in Somalia. Thank you for your service, brother! In Hoc Signo Vinces 🇺🇸
1
1
449
Decipher retweeted
THREATCON1 2026 is proud to welcome @DecipherSec as a Media Sponsor. Thank you for supporting the event and helping extend its conversations across the cybersecurity community. Join us Oct. 5-7 in Reston, Virginia. Register free: threatcon1.org/registration?…
2
1
2
312
Decipher retweeted
Halvar Flake
@halvarflakeSep 25
Periodic reminder: Good security architecture minimizes the number of bugs and CVEs you have to care about.
9
45
10
233
18,113
Scenes from @labscon_io morning keynotes. Incredible talks so far. Enjoy!
2
7
11
1,291
Decipher retweeted
Full podcast is up now, and you won't want to miss Jeremiah dismantling the myth of the collapsing time to exploit window. youtu.be/uQOFWlVDio8?si=34Sl…
2
185
Decipher retweeted
"AI helps you move quickly, and that's exactly what you don't want as an attacker. Speed of movement gets you caught." @jeremiahg of @rootevidence
1
3
1
161
Decipher retweeted
Let's get some philosophy majors into these AI labs!
1
1
146
OH in today's @xbow native standup: "We have a lot of leftover Google Chrome zero days"
5
8
2
49
9,325
Decipher retweeted
watchTowr
@watchtowrcyberAug 18
🚨An unauthenticated SSRF vulnerability in MLflow, CVE-2026-64849, is already being exploited in the wild. Within hours of CVE assignment, watchTowr Intel via Attacker Eye, our global honeypot network, observed attackers targeting cloud-hosted MLflow systems in an attempt to extract credentials and secrets. All versions before 3.15.0 affected. Prioritize patching, monitor for compromise, review if sensitive credentials were exposed.
11
1
57
5,507
Decipher retweeted
PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password. We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path. Please upgrade your macOS boxes to 26.6.1. Full technical writeup drops tomorrow.
30
429
47
3,038
459,629
Decipher retweeted
New @DecipherSec pod is up! In which we talk about why rogue AI agents are just doing their jobs, like sharks.
1
1
145
Decipher retweeted
Tracking a critical vulnerability in N-able’s N-central platform that can give attackers “god-mode” access to the RMM console. A threat actor who exploits this flaw could use N-central to run scripts, push tools, and open remote sessions on any endpoint it manages.
2
5
1
30
16,048
Decipher retweeted
Replying to @AnthropicAI
The Joneses aren't going to keep up with themselves.
4
14
1
328
34,548