Dennis Fisher

Plymouth

ΣΧ, co-founder of @DecipherSec. New novel BE GONE available NOW: https://t.co/bVFJcL9PdF. Worst-selling author. Friend of hackers. @duosec forever.

Featured in: Favicon

duo.com

medium.com Favicon

eweek.com

techrights.org Favicon

mediagazer.com Favicon

digitalguardian.com Favicon

jhu.edu

muse.jhu.edu

Articles

On the Internet, Everything Old is Exploitable Again

1 month ago | censys.com | Dennis Fisher

Keeping up with the constant stream of vulnerability disclosures and news of zero day exploits is a Sisyphean task and one that even the most well-resourced security teams can’t realistically take on. And while shiny new bugs attract attention and clicks, new data on mass exploitation activity shows that many attackers are targeting older, known vulnerabilities–many of them more than five years old–on a consistent basis, and having plenty of success.
How Realistic Is Netflix's Zero Day?

1 month ago | censys.com | Dennis Fisher

VIDEO Computers are terrifying machines and almost no one actually knows how they work. Some people know how some parts of computers work, but you know who definitely do not know how computers work? The plotters and schemers in Netflix’s Zero Day. If you’re reading this, you’ve probably seen Hackers and The Net and WarGames and Real Genius, movies in which people do things with computers that their parents or the government or other people in Serious Clothes tell them they shouldn’t do.
The New Age of Cloud Security and Multi-Cloud Defense

Sep 12, 2024 | duo.com | Dennis Fisher

VIDEOLongtime cloud security educator and researcher Rich Mogull, SVP of cloud security at FireMon, joins Decipher editor Dennis Fisher to dive into the challenges of securing multi-cloud environments, how cloud security has evolved, and how enterprises are learning to handle those changes.
New North Korean Campaigns Target Cryptocurrency Industry

Sep 4, 2024 | duo.com | Dennis Fisher

Multiple North Korean threat actors are specifically targeting organizations and individuals in the cryptocurrency industry with both social engineering and exploitation of vulnerabilities, according to new warnings by Microsoft and the FBI.
Zero Day Exploit Reuse and A Busy Week for Iranian APTs

Sep 3, 2024 | duo.com | Dennis Fisher |Iranian Group

The focus was on Iranian APTs this week, both from private threat intelligence teams and CISA, exposing new operations from UNC757 and other groups targeting government, higher education, and private industry. We also check in on a new report from Google's Threat Analysis Group on APTs using the same exploits for zero days that were developed by private commercial surveillance vendors NSO Group and Intellexa.
The Lasting Repercussions of the Sony Hack

Sep 3, 2024 | duo.com | Dennis Fisher

The Sony Pictures hack in 2014 by the North Korean Lazarus Group was a seminal event both in Hollywood and in the security community, bringing to light the capabilities and ambitions of North Korean attackers and showing the damage a leak of sensitive data can be. Brian Raftery joins Dennis Fisher to discuss his new Ringer podcast, The Hollywood Hack, that digs deep into the incident, its repercussions in Hollywood, and how it helped set the tone for how companies handle public data leaks.
Attacks Target Recent Apache OFBiz Bug

Aug 28, 2024 | duo.com | Dennis Fisher

CISA is warning federal agencies and enterprises that attackers are exploiting a known vulnerability in the Apache OFBiz ERP suite, a bug that Apache released a fix for three weeks ago. The vulnerability (CVE-2024-38856) affects every version of OFBiz through 18.12.14 and successful exploitation would allow an attacker to execute screen rendering code on affected endpoints. The Apache Software Foundation released an update to address the bug on Aug.
Reddit's Matt Johansen on Identity Attacks, Enterprise Security, and Burnout

Aug 27, 2024 | duo.com | Dennis Fisher

Rebekah Brown and John Scott-Railton of the Citizen Lab join Dennis Fisher to dive into their group's new report on highly Dennis Fisher and Lindsey O'Donnell-Welch reflect on their week in Las Vegas at Black Hat and discuss the talks they liked, At Black Hat USA, Google Project Zero highlighted how far we’ve come in understanding zero days.
SonicWall Fixes Critical Firewall Flaw

Aug 26, 2024 | duo.com | Dennis Fisher

SonicWall has released a fix for an access control vulnerability in a number of its products that could enable an attacker to gain access to sensitive resources or possibly crash the device. The flaw is in the company’s SonicOS software that runs on its security devices, and it affects SonicWall Firewall Gen 5 and Gen 6 devices, as well some Gen 7 devices that are running version 7.0.1-5035 or older of the software.
Humans Are Bad at Risk Assessment, and Other Stories

Aug 14, 2024 | duo.com | Dennis Fisher

I grew up tempting fate. When I was about 12, we moved into a subdivision that was still under construction. Our house was in a cul-de-sac near the front of the development and the surrounding streets had dozens of houses that were in various stages of construction. I quickly met some other boys around my age and those houses became our playgrounds.