Decipher Security Podcast

Dave Lewis, Global Advisory CISO at Cisco, talks about the top takeaways of the 2022 Duo Trusted Access Report and the driving factors behind increased adoption of WebAuthn, MFA and biometrics.

Support the show

Welcome to Source Code: Decipher's behind the scenes look at the weekly news with input from our sources. In this week's podcast, we discuss a government agency alert for healthcare providers about the Daixin group, a new FTC proposed order against Drizly and a set of voluntary performance goals for critical infrastructure organizations released by CISA. 

Support the show

Kelley Misata, senior director of open source of open source at Corelight and CEO of Sightline Security, joins Dennis Fisher to talk about her road to get into security, the importance of protecting at-risk populations, and the challenges of building community in the open source world.

Support the show

In this week's Source Code news wrap podcast,  we discuss a critical remote code execution flaw in certain versions of the Apache Commons Text library; recent efforts by Fortinet to encourage organizations to apply patches for a vulnerability in its products that is under attack; and a new variant of Ursnif that has been reconstructed from a banking trojan into a generic backdoor.

Support the show

Martin Roesch, CEO of Netography, joins Dennis Fisher to talk about the evolution of network security, protecting hybrid computing environments, and where that Snort pig couch came from. 

Support the show

Welcome back to Source Code, Decipher’s weekly news wrap podcast. Highlights from this week’s security news lineup include a newly discovered flaw in some Siemens S7 PLCs, and Log4j attacks by the known Budworm threat group targeting an unnamed U.S.-based state legislature.

Support the show

David Agranovich, director of threat disruption with Meta, discusses how threat groups are evolving their inauthentic behavior on social media platforms, as well as recent cyber espionage and malware activity highlighted in Meta’s adversarial reports. 

Support the show

Welcome back to Source Code, Decipher’s weekly news wrap podcast. This week, new research showed the Lazarus Group leveraged a rootkit in two attacks that abused a known vulnerability in a Dell driver in order to disable various Windows monitoring features. Also this week, a new government directive required federal agencies to set up measurable processes needed to perform automated asset discovery and vulnerability detection at regular intervals. Finally, analysts released research into the Bumblebee malware loader, which is a relatively new malware loader that first emerged in March.

Support the show

Dennis Fisher talks with Juan Andres Guerrero-Saade, senior director at SentinelLabs, about the investigation into the new Metador APT group that he and his colleagues unveiled at LabsCon recently.

Support the show

Welcome back to Source Code, Decipher's weekly security news podcast. This week, we discuss a new Chaos malware family, a phishing campaign that delivers trojanized versions of legitimate open source applications and novel backdoors being installed on VMware ESXi servers. 

Support the show