
Security without fear. Cybersecurity news that informs and inspires. Editors: @DennisF & @lindseyOD123. https://xitter.cf/t.co/jcYvCZ704o
Joined September 2017
- Tweets4.5K
- Following432
- Followers4.4K
- Likes351
Decipher retweeted
Just once, I'd like to see a company come forward and say "we got badly breached, and we analyzed the evidence, and you know what, we don't think the adversary was extremely sophisticated at all"
We somehow got on the subject of Market Basket in today's @DecipherSec podcast.
Need some Friday fun? Watch me and @LindseyOD123 and @SheaSerrano talk about CATCH ME IF YOU CAN, which is a much better film than TITANIC.
youtu.be/KZPrs6aGR9U?si=QLpe…
Matt is a legit hero and a tremendously nice guy. I talked to him on the @DecipherSec podcast a couple months ago.
youtu.be/pZPU8T19xMQ?is=QsJM…
Decipher retweeted
THREATCON1 2026 is proud to welcome @DecipherSec as a Media Sponsor.
Thank you for supporting the event and helping extend its conversations across the cybersecurity community.
Join us Oct. 5-7 in Reston, Virginia.
Register free: threatcon1.org/registration?…
Decipher retweeted

Halvar Flake@halvarflakeSep 25
France
FranceConnected via WebAccount-level information, not a live location or per-post device.
Periodic reminder: Good security architecture minimizes the number of bugs and CVEs you have to care about.
Decipher retweeted
Scenes from @labscon_io morning keynotes. Incredible talks so far. Enjoy!
New @DecipherSec podcast is up! Some fun @labscon_io talk about the amazing talks by @k8em0, @dinodaizovi and James Mickens. And more!
youtu.be/b1UInfrrwy8?is=cvPS…
Decipher retweeted
Full podcast is up now, and you won't want to miss Jeremiah dismantling the myth of the collapsing time to exploit window.
youtu.be/uQOFWlVDio8?si=34Sl…
Decipher retweeted
"AI helps you move quickly, and that's exactly what you don't want as an attacker. Speed of movement gets you caught." @jeremiahg of @rootevidence
Decipher retweeted
What time is it? Time to patch all yo' Apples.
support.apple.com/en-us/1001…
Decipher retweeted
It's already been one year of @DecipherSec (relaunched)🥹
@DennisF and I looked back on the interviews and news stories that have best reflected Decipher's mission statement: Security without fear
decipher.sc/2026/09/02/one-y…
Decipher retweeted
OH in today's @xbow native standup:
"We have a lot of leftover Google Chrome zero days"
Decipher retweeted
The blog: cloud.google.com/blog/topics…
Decipher retweeted

watchTowr@watchtowrcyberAug 18
Singapore
SingaporeConnected via WebAccount-level information, not a live location or per-post device.
🚨An unauthenticated SSRF vulnerability in MLflow, CVE-2026-64849, is already being exploited in the wild.
Within hours of CVE assignment, watchTowr Intel via Attacker Eye, our global honeypot network, observed attackers targeting cloud-hosted MLflow systems in an attempt to extract credentials and secrets.
All versions before 3.15.0 affected. Prioritize patching, monitor for compromise, review if sensitive credentials were exposed.
PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400).
If Screen Sharing is enabled, any network attacker can exploit the bug to log in as any account, without knowing the password.
We reverse engineered Apple’s unusual macOS 26.6.1 patch to understand the root cause and exploitation path.
Please upgrade your macOS boxes to 26.6.1.
Full technical writeup drops tomorrow.
New @DecipherSec pod is up! In which we talk about why rogue AI agents are just doing their jobs, like sharks.
Decipher retweeted
Tracking a critical vulnerability in N-able’s N-central platform that can give attackers “god-mode” access to the RMM console. A threat actor who exploits this flaw could use N-central to run scripts, push tools, and open remote sessions on any endpoint it manages.

















