Decipher

Yesterday was the 30th anniversary of the release of Michael Mann's HEAT, a hacker movie classic. (Shoutout Kelso.) We did an episode on HEAT last year with the great @meggardiner.bsky.social (co-author of HEAT 2) and our friend @cje.io. The podcast IS the juice! youtu.be/b2cfEXeWSn0?...

Time to move. decipher.sc/2026/10/20/c...

Do you want a limited edition Decipher hoodie? Of course you do! Just be our 25,000th(!) sub on YouTube and we'll hook you up. We're very close, so watch that number. Send us a before/after screenshot to info at decipher dot sc. (US folks only please) Good luck!

decipher.sc/2026/10/18/o...

New podcast is up! 🧑‍🍳 Hacked refrigerators lead to lots of questions 💻 A DPRK laptop farm in Texas gets yeeted 🕵️ New mercenary spyware operation uncovered by @citizenlab.ca youtu.be/-jtGD-1F9N8?...

APT groups aren't made of magic. They're just really good at their jobs.

New @deciphersec.bsky.social podcast with @johnhammond.bsky.social of Huntress on the inner workings of the nasty ClickFix attacks. youtu.be/Umc7KZp8TRc?...

Our full @deciphersec.bsky.social podcast with @sheaserrano.bsky.social is up now and I will refund all of the money you paid for this podcast if you don't enjoy it. youtu.be/KZPrs6aGR9U?...

🚨 RAPID RESPONSE: CVE-2026-84411 is a critical unauthenticated RCE affecting MikroTik RouterOS web management. Censys detects 364,341 exposed hosts. This is an exposure count, not confirmed vulnerable devices. No public exploitation reported. Censys ARC advisory: https://bit.ly/4rXOqaf

New podcast is up! We're talking about zero days, why they matter and when they don't, communication breakdowns from vendors, and a preview of THREATCON1 youtu.be/w3QsdXfG2n4?...

Blessing your timeline with a bonus video today of our chat with Ben Harris of @labs.watchtowr.com.web.brid.gy on the details of the NetScaler 0-day saga and why comms matter so much. youtu.be/4M2ooW4IJfI?...

If your organization has Citrix NetScaler boxes deployed, these updates are high priorities, given active and growing exploitation. decipher.sc/2026/09/27/r...

Citrix just released fixes for these bugs about an hour ago. decipher.sc/2026/09/27/r...

Hello internet pals! We're doing a mailbad episode of the podcast and we want your questions! Be creative, be funny, be inquisitive, but be nice 😀 Drop them here or send them to info at decipher dot sc. Maybe we'll even have some swag for the best questions. Who can say?

This is not what we need right now. decipher.sc/2026/09/22/r...

decipher.sc/2026/09/21/w...

decipher.sc/2026/09/16/u...

It's about that time again, friends. We're very close to 20k subscribers on YouTube! You know the deal: Be the 20,000th sub, send us screenshots before and after you subscribe, and get a sweet Decipher hoodie. (US only please.) Send the screenshots to info at decipher dot sc. Good luck!

Chit-chatting about LABScon and keynotes with the Decipher homies 👇

New podcast is up! 🤖 The Anthropic threat intel report 🤖 Is AI going to destroy humanity? (No.) 🔐 The huge effect of 9/11 on the cybersecurity industry PLUS: A special appearance by @ryanaraine.bsky.social to discuss the LabsCon keynotes. youtu.be/H-azc0CCxw0?...

decipher.sc/2026/09/08/r...

Hey we know these guys! This should be great.

Upgrade as soon as you can. If SSH is enabled, treat the device as compromised. decipher.sc/2026/09/06/m...

😍

We're a year old! (actually we're 8 years old, but there was a time machine situation. Don't worry about it.) decipher.sc/2026/09/02/o...

It's hard to believe, but it's already been one year since we relaunched Decipher (Lindsey and Dennis's Version)! We're very grateful to everyone who's joined us and even more excited to show you all what we have coming next! decipher.sc/2026/09/02/o...

Great shirt!

New @deciphersec.bsky.social podcast is out! 🦘 Alleged TeamPCP members arrested in Australia 🇨🇳 US warns of QTFY Chinese threat actor targeting critical infrastructure 🤖 The new OpenAI post-mortem on the Hugging Face incident youtu.be/MCRqrO_CXQQ?...

Rather than making another security framework from scratch, TRACE brings together six existing industry standards into a “common evidence layer". decipher.sc/2026/08/25/l...

ERMAC and HookBot are tracked as two families. Censys ARC researcher @thehappydinoa.dev read the leaked source and found one code base, where a single constant decides which name the panel shows. Also in the post: which detection artifacts survive a rebrand, and which do not. https://bit.ly/46lP3Ao

New podcast is out! This one is a deep conversation with @eff.org Executive Director Nicole Ozer on the surveillance state, how AI is supercharging it, and what the future holds for privacy. youtu.be/qCNqTxnXNyk?...

Inside ExploitGym: How Researchers Are Measuring AI Agent Exploitation Capabilities via @lindseyodwelch.bsky.social & @deciphersec.bsky.social

The transnational nature of cybercrime is the big challenge in taking down those groups.

New podcast is up! 🧑‍💻 Hacking back? Yes, no, maybe so? 🤸‍♀️ The origins of ExploitGym and what makes it vital now 🚰 The flood (😀) of attacks on water facilities youtu.be/wsjmLTr0I_U?...

decipher.sc/2026/08/18/m...

Hey! We're soooo close to 10,000 subscribers on YouTube! Want a free Decipher hoodie and some other swag? Be our 10k sub! Just take a screenshot before and after you subscribe and send them to info at decipher dot sc. Good luck! *US only please.

When a back door is a feature and not a bug.

New @deciphersec.bsky.social podcast is out! 🤖 More AI models escaping their cages and doing bad things 🇨🇳 Research from @vulncheck.bsky.social on backdoored Chinese routers (Shoutout @weratedogs.com for the shirt 🐶) youtu.be/PLRi6IgJDEg?...

decipher.sc/2026/08/04/e...