<description>&lt;p&gt;The internet is dark and full of terrors, but thanks to folks such as Andrew Northern, a principal security researcher at internet-mapping pioneer Censys, it doesn&amp;#39;t have to be, Andrew joins Dennis to talk about the cybercrime ecosystem, getting his start in security on a tiny team with huge responsibilities, and the value of a strong mentor.&lt;/p&gt;
</description>

The internet is dark and full of terrors, but thanks to folks such as Andrew Northern, a principal security researcher at internet-mapping pioneer Censys, it doesn&#39;t have to be, Andrew joins Dennis to talk about the cybercrime ecosystem, getting his start in security on a tiny team with huge responsibilities, and the value of a strong mentor.

Mapping the Cybercrime Ecosystem With Andrew Northern of Censys

<description>&lt;p&gt;It&amp;#39;s been quite a week in security news, and Dennis and Lindsey dig into the continued effects of the axios supply chain attack, the incredibly fast adoption of AI tools for vulnerability research and what that means for software makers and defenders, and what the future holds for vulnerability research and exploit development.&lt;/p&gt;&lt;p&gt;Security Theater in Austin: https://material.security/theater-2026#theater-live-event&lt;/p&gt;
</description>

It&#39;s been quite a week in security news, and Dennis and Lindsey dig into the continued effects of the axios supply chain attack, the incredibly fast adoption of AI tools for vulnerability research and what that means for software makers and defenders, and what the future holds for vulnerability research and exploit development.Security Theater in Austin: https://material.security/theater-2026#theater-live-event

The Rapid Rise of AI Exploit Development and More Axios Compromise Effects

<description>&lt;p&gt;Dennis and Lindsey dig into what we know do far about the supply chain attack on the axios NPM package, including how the attacker gained access to the maintainer&amp;#39;s account, the window of exposure for the malicious packages, the behavior of the RAT that&amp;#39;s installed on victims&amp;#39; machines, and what the downstream effects may be. &lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Links&lt;/strong&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Huntress post&lt;/strong&gt;: https://www.huntress.com/blog/supply-chain-compromise-axios-npm-package&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Socket analysis&lt;/strong&gt;: https://socket.dev/blog/axios-npm-package-compromised&lt;/p&gt;
</description>

Dennis and Lindsey dig into what we know do far about the supply chain attack on the axios NPM package, including how the attacker gained access to the maintainer&#39;s account, the window of exposure for the malicious packages, the behavior of the RAT that&#39;s installed on victims&#39; machines, and what the downstream effects may be. LinksHuntress post: https://www.huntress.com/blog/supply-chain-compromise-axios-npm-packageSocket analysis: https://socket.dev/blog/axios-npm-package-compromised

Axios NPM Supply Chain Attack

<description>&lt;p&gt;Fresh off the plane from RSA, Dennis fills Lindsey in on everything she missed (and didn&amp;#39;t miss) at this year&amp;#39;s conference (0:23), from the insanity of the expo floor (4:06) to the appearance of a line of synchronized robots or spacemen or something (8:18), to some very interesting conversations about the hyper speed of AI malware development and what&amp;#39;s coming next for defenders (27:25).&lt;/p&gt;
</description>

Fresh off the plane from RSA, Dennis fills Lindsey in on everything she missed (and didn&#39;t miss) at this year&#39;s conference (0:23), from the insanity of the expo floor (4:06) to the appearance of a line of synchronized robots or spacemen or something (8:18), to some very interesting conversations about the hyper speed of AI malware development and what&#39;s coming next for defenders (27:25).

RSA Recap: Dancing Robots, AI Everywhere, and the Future of Security

<description>&lt;p&gt;With the RSA Conference on the horizon, Dennis and Lindsey are here with a preview of the conference&amp;#39;s more interesting sessions and keynotes, a discussion of the recent and ancient history of the conference, and a quick game: Is this a security vendor or a prescription drug name?&lt;/p&gt;
</description>

With the RSA Conference on the horizon, Dennis and Lindsey are here with a preview of the conference&#39;s more interesting sessions and keynotes, a discussion of the recent and ancient history of the conference, and a quick game: Is this a security vendor or a prescription drug name?

RSA 2026 Preview

Every week, Dennis Fisher and Lindsey O'Donnell-Welch, the editors of Decipher, bring you exclusive, in-depth conversations with security researchers, CISOs, founders, and security experts to hellp you understand the threat landscape and better protect your organizations.

Decipher Security Podcast

Details

Recent Episodes