Humans Are Bad at Risk Assessment, and Other Stories
Risk management is not one of humanity's strong points, but we can learn some lessons from our own real life experiences to apply
SEARCH
Dennis Fisher
Editor in ChiefDennis Fisher is an award-winning journalist who has been covering information security and privacy since 2000.
He is one of the co-founders of Threatpost and previously wrote for TechTarget and eWeek, when magazines were still a thing that existed. Dennis enjoys finding the stories behind the headlines and digging into the motivations and thinking of both defenders and attackers. His work has appeared in The Boston Globe, The Improper Bostonian, Harvard Business School’s Working Knowledge, and most of his kids’ English papers.
- dennis@decipher.sc
- @dennisf
Featured Articles
Software Has Eaten the World But There’s Still Hope
As software systems have become ever more complex, the opportunity for security researchers to show their value has grown, as
Digging Into FIN7’s Latest Tools and Tactics
FIN7 is a highly active and capable cybercrime group also known as Carbanak that has been evolving and using its own tools such as
Decipher Podcast: Brian Donohue
Brian Donohue of Red Canary joins Dennis Fisher to discuss the news and insights from Cyberwarcon.
Hack the Titan M, Get $1 Million
Google is now offering a top bounty of $1 million for a full chain remote code execution exploit that gains persistence on the Titan M chip on Pixel phones.
AWS Adds New Protections Against SSRF, Other Web App Attacks
The new AWS IMDSv2 security feature mitigates common attacks that take advantage of SSRF, open WAFs, and open layer 3 firewalls.
Decipher Podcast: Ron Deibert
Ron Deibert of Citizen Lab joins Dennis Fisher to discuss his team's work on investigating surveillance vendors and helping victims.
US Government Has Stopped Warrantless Collection of Phone Data
The Office of the Director of National Intelligence confirmed that the government has stopped collecting phone location data using Section 215 of the Patriot Act.