Humans Are Bad at Risk Assessment, and Other Stories
Risk management is not one of humanity's strong points, but we can learn some lessons from our own real life experiences to apply
SEARCH
Dennis Fisher
Editor in ChiefDennis Fisher is an award-winning journalist who has been covering information security and privacy since 2000.
He is one of the co-founders of Threatpost and previously wrote for TechTarget and eWeek, when magazines were still a thing that existed. Dennis enjoys finding the stories behind the headlines and digging into the motivations and thinking of both defenders and attackers. His work has appeared in The Boston Globe, The Improper Bostonian, Harvard Business School’s Working Knowledge, and most of his kids’ English papers.
- dennis@decipher.sc
- @dennisf
Featured Articles
Software Has Eaten the World But There’s Still Hope
As software systems have become ever more complex, the opportunity for security researchers to show their value has grown, as
Digging Into FIN7’s Latest Tools and Tactics
FIN7 is a highly active and capable cybercrime group also known as Carbanak that has been evolving and using its own tools such as
OpenSSL 3.0.7 Fixes Two Buffer Overflows
OpenSSL 3.0.7 fixes two high-risk buffer overflows in Punycode decoding (CVE-2022-3786 and CVE-2022-3602), one of which can lead to remote code execution.
OpenSSL to Fix Critical Flaw
OpenSSL will patch a critical security flaw in version 3.0.x on Nov.1, though details of the bug are still private.
Decipher Podcast: Kelley Misata
Kelley Misata, senior director of open source of open source at Corelight and CEO of Sightline Security, joins Dennis Fisher to talk about her road to get into security, the importance of protecting at-risk populations, and the challenges of building community in the open source world.
Microsoft Adds New Features to Authenticator to Prevent MFA Fatigue Attacks
Microsoft is adding number matching and geographic and app context to Authenticator to defend against MFA fatigue attacks.
Apple Fixes Zero Day in iOS 16.1
Apple has fixed a kernel zero day in iOS 16.1, along with a huge number of vulnerabilities in macOS Ventura.