Decipher Security Podcast

Hosted by Decipher

Technology

Website RSS feed YouTube

Episodes

373

Latest episode

Aug 2026

Language

About the show

Every week, Dennis Fisher and Lindsey O'Donnell-Welch, the editors of Decipher, bring you exclusive, in-depth conversations with security researchers, CISOs, founders, and security experts to hellp you understand the threat landscape and better protect your organizations.

Listen to episodes

60 recent

August 21, 202644 min

The Politics of Hacking Back, the Origins of ExploitGym, and Water Plant Attacks

This week we discuss the new White House memo on using private sector operators in offensive cyber operations, Lindsey's deep dive into the origins of the ExploitGym AI benchmark, and the rash of attacks on water utilities in the U.S. Links Inside ExploitGym: https://decipher.sc/2026/08/20/inside... White House memo: https://www.whitehouse.gov/presidenti... OpenAI post: https://openai.com/index/the-defender...

August 19, 202653 min

How AI is reshaping attacker and defender behavior | Adam Meyers

Adam Meyers of CrowdStrike joins Dennis to dive into the rapidly changing nature of both attacker and defender behavior in the AI age and how organizations need to shift their priorities to combat agentic threats. Then we talk about the new White House policy loosening the restrictions on private sector operators doing offensive cyper ops.

August 10, 202639 min

The truth about AI model security and what's coming next | Gary McGraw

AI security pioneer and machine learning expert Gary McGraw helps Dennis separate the facts from fiction about the recent OpenAI, Meta, and Anthropic model escapes, what the real risks to enterprises are from agentic AI, and what he sees as the true threats on the horizon.

August 5, 202637 min

More AI Model Escapes and New Backdoored Chinese Routers

We can't go a week without an AI model escaping its bounds, and this week we talk about a new test by the AI Security Institute in which OpenAI and Anthropic models escaped the evaluation environment and tried to start a supply chain attack, then we discuss news of Zbtlink routers having a persistent backdoor.

July 31, 202635 min

The OpenAI and Hugging Face Intrusion Wasn't Enough, So Now Anthropic Wants In

This week we talk about the OpenAI-Hugging Face incident and what it means for those companies and the way that AI models are tested, and then we discuss Anthropic's entry into the race with its own admission that some of its models escaped the playground and attacked outside organizations. Links OpenAI-Hugging Face intrusion: https://decipher.sc/2026/07/29/openai... Anthropic blog: https://www.anthropic.com/news/invest... Ringer piece on the Hugging Face incident: https://www.theringer.com/2026/07/24/...

July 29, 202648 min

Project Hail Mary is a Hacker Movie. Amaze Amaze Amaze.

Project Hail Mary is many things: an instant classic, a heartwarming buddy movie, a brilliant scientific tale. And it's also a pure hacker movie. Wendy Nather and David Mortman join Dennis and Lindsey to talk about Ryland Grace's hacker ethos and why he and Rocky typify the can-do attitude of hackers everywhere. It's time go!

July 27, 202648 min

How Cybercrime Groups Have Become APTs | Michael Sweeney

Cybercrime has become professionalized and industrialized to the point that these groups are essentially at the level of state-backed APTs. Mike Sweeney of Silent Push joins Dennis Fisher to talk about this evolution, how AI is enabling this shift, and how defenders and vendors are working to take incremental bites out of their ecosystem.

July 20, 202626 min

JADEPUFFER: The Era of Agentic Ransomware Has Begun | Michael Clark

Michael Clark, director of Threat Research at Sysdig, talks about a recent LLM-driven extortion campaign dubbed JADEPUFFER, touching on how the team discovered it, how attackers’ “intent is now legible,” and what that means for defenders. Link Sysdig research: https://www.sysdig.com/blog/jadepuffe...

July 17, 202640 min

The Cursor Bug Drama, Microsoft's Massive Patch Tuesday, and Scattered Spider Takes a Hit

This week we have some old-school disclosure drama when a researcher used full disclosure after months of silence from Cursor, then we discuss the enormous Patch Tuesday from Microsoft--662 bugs--and what it might mean going forward, and finally some news about DoJ sanctions and Scattered Spider members being sentenced.

July 14, 202636 min

Industrial Cybersecurity and Malware Archaeology with Lesley Carhart

Old malware like Conficker never really dies, and in industrial control and SCADA environments it can live forever undisturbed. Lesley Carhart of Dragos joins Dennis Fisher to talk about the myriad challenges of incident response in ICS networks, how ancient malware can cause trouble for years on end, and why we need more ICS security engineers desperately.