This week was a bit of a throwback to olden times, with the disclosure by Amazon threat intelligence of zero days in Cisco and Citrix products that were exploited by an unnamed APT, and Google using legal action to disrupt the Lighthouse phishing service operation. We dig into those two stories, plus we discuss the challenge of trying to quantify the financial and other effects of a major cyber attack. Related stories: https://decipher.sc/2025/11/12/apt-targets-cisco-and-citrix-zero-days/ https://decipher.sc/2025/11/14/marks-and-spencers-profit-drop-the-financial-toll-of-cyberattacks/ https://decipher.sc/2025/11/12/google-wants-to-snuff-out-lighthouse-phishing-kit/ https://censys.com/blog/highway-robbery-2-0 Support the show
