AuthorCISSP

Eric Bang

Founder & Cybersecurity Evangelist

Decryption Digest

Eric Bang is a CISSP-certified cybersecurity professional and the founder of Decryption Digest — a high-signal threat intelligence publication read by over 50,000 security engineers, SOC analysts, CISOs, and IT administrators every week.

Eric specializes in translating complex vulnerability disclosures, ransomware campaigns, and nation-state operations into clear, actionable intelligence. His coverage spans zero-day analysis, BYOVD attack chains, supply chain compromise events, and critical CVEs affecting enterprise infrastructure — always with a focus on what security teams can do right now.

Connect on LinkedIn Subscribe to the Newsletter

Credentials

CISSP

Certified Information Systems Security Professional — ISC²

Founder

Decryption Digest — Cybersecurity threat intelligence for 50,000+ professionals

Coverage

Zero-days, ransomware campaigns, nation-state operations, and critical CVEs

Areas of Expertise

◈Threat Intelligence◈Vulnerability Research◈Incident Response◈Zero-Day Analysis◈Ransomware Operations◈Nation-State Attribution◈EDR & Detection Engineering◈Enterprise Security Architecture

Recent Articles

View all →

SUPPLY CHAINApril 10, 202614 min

North Korea Hid 1,700 Malicious Packages Inside Your Dev Team's Tools

Socket Security has documented 1,700+ malicious packages tied to North Korea's Contagious Interview campaign across five package ecosystems. Separately, UNC1069 compromised the Axios npm maintainer via social engineering, injecting a backdoor into a library present in an estimated 80% of cloud environments. Here's the full attack chain, WAVESHAPER.V2 IOCs, and what to do now.

CVE WATCHApril 9, 202610 min

Chrome's 4th Zero-Day of 2026 Was Already in the Wild

Google shipped an emergency patch for CVE-2026-5281, a use-after-free in Chrome's Dawn/WebGPU component confirmed exploited in the wild. CISA added it to KEV the next day with an April 15 deadline. Here's what happened, why renderer-compromise-required is not reassuring, and what your fleet needs right now.

THREAT ACTOR WATCHApril 8, 202612 min

Qilin Found a Way to Blind Your EDR Before You Know They're Inside

Cisco Talos and Trend Micro confirm Qilin ransomware is using BYOVD to systematically disable 300+ EDR products before deploying ransomware. Here's the full attack chain and what to do about it.

CVE REFERENCEOctober 16, 202310 min

CVE-2023-20198 Explained: Cisco IOS XE Web UI Zero-Day and the 50,000-Device Compromise

CVE-2023-20198 is a critical unauthenticated privilege escalation vulnerability in Cisco IOS XE software's web UI feature. Exploited as a zero-day before Cisco published any advisory, attackers used it to create administrator accounts and then chained it with CVE-2023-20273 to deploy a persistent Lua-based implant on over 50,000 network devices. No authentication or user interaction required.

CVE REFERENCEMarch 14, 20239 min

CVE-2023-23397 Explained: The Outlook Zero-Click NTLM Hash Theft Vulnerability

CVE-2023-23397 is a critical privilege escalation and credential theft vulnerability in Microsoft Outlook for Windows. A specially crafted calendar invitation with a UNC path in the reminder sound field causes Outlook to automatically connect to an attacker-controlled SMB server, leaking the victim's NTLM authentication hash. No user interaction is required — the exploit fires when the reminder triggers, even if the meeting invitation is never opened.

CVE REFERENCESeptember 29, 202210 min

CVE-2022-41040 and CVE-2022-41082 Explained: ProxyNotShell, the Microsoft Exchange Chain

CVE-2022-41040 and CVE-2022-41082, collectively called ProxyNotShell, are chained vulnerabilities in Microsoft Exchange Server 2013, 2016, and 2019. CVE-2022-41040 is a server-side request forgery flaw that, when chained with CVE-2022-41082, enables an authenticated attacker to achieve remote code execution. Both were exploited in the wild before Microsoft released patches.

Get threat intelligence in your inbox

Join 50,000+ security professionals reading Decryption Digest — free, every week.

Subscribe Free