Decipher Security Podcast

Welcome back to another episode of our weekly Source Code news wrap podcast. This week, Gustavo Palazolo with Netskope talks about how Emotet attackers are still skirting Microsoft's VBA macros security measures while using old delivery methods, and John Hultquist with Mandiant talks about why a Chinese information operations campaign targeted rare earths mining companies in the U.S.   

Support the show

John Hultquist, VP of Mandiant Intelligence, talks about new Mandiant research that exposes a Chinese information operation campaign targeting U.S., Canadian and Australian rare earths mining companies, including a processing facility in Texas, and how these types of information operations can be detrimental to private companies.

Support the show

In this week's Source Code podcast, Forescout researchers discuss the impact of 56 vulnerabilities that they discovered in operational technology (OT) devices, and Cisco Talos researchers talk about the top takeaways from a recently exposed AvosLocker ransomware campaign. 

Support the show

Daniel dos Santos, head of security research with Forescout, talks about a set of over 50 vulnerabilities discovered in operational technology (OT) devices from 10 different vendors, and why patching levels are so low for OT.

Support the show

Welcome back to Source Code, Decipher’s weekly news wrap podcast. This week, researchers exposed a spear-phishing campaign that targeted several high-ranking officials from the U.S. and Israel. Also this week, Microsoft issued a patch for a previously disclosed RCE vulnerability that has been under active exploitation by attackers. Finally, researchers discuss a recently discovered malware family that they say is “highly evasive.” 

Support the show

On this week's Source Code podcast, security experts discuss attacker exploitation of a vulnerability in certain WSO2 products, a Microsoft zero day in many current versions of Office, Office 365, and Windows, and new research that shows attackers getting quicker at launching ransomware attacks against enterprises.

Support the show

Welcome back to Source Code, Decipher’s weekly news wrap podcast. This week, we go over a landmark change to the Computer Fraud and Abuse Act, a serious remote code execution bug in Zyxel firewall products and an emergency directive that orders civilian executive branch agencies to apply updates for several VMware products within five days.

Support the show

Welcome back to Source Code, Decipher’s weekly security news podcast. This week, the State Department said it will offer rewards for more information for the Conti group. Also this week, cybersecurity agencies from the U.S, UK, Australia, Canada and New Zealand warned that cybercriminals are increasingly targeting managed service providers. Finally, researchers released more details on a sophisticated post-exploitation framework being deployed on Microsoft Exchange server instances.

Support the show

In this week's Source Code podcast, Decipher discusses plans by GitHub to require anyone who contributes code on the platform to use some form of MFA by the end of next year. Also in this week's podcast, researchers talk about a newly discovered threat group that targets companies focusing on corporate development, mergers and acquisitions and large corporate transactions. 

Support the show

Lindsey O'Donnell-Welch speaks with Jonathan Reiber, Vice President, Cybersecurity Strategy and Policy at AttackIQ.

Support the show