Cybersecurity news with practical instincts.
Naked Security is a brisk cybersecurity show built around bugs, scams, breaches, and odd technical failures. Its appeal is the way serious risk gets translated into everyday decisions without flattening the underlying mechanics.
PRESS PLAY
Naked Security turns cybersecurity news into a fast, plain-spoken conversation about how systems fail. The show is interested in the headline, but it is even more interested in the mechanism underneath it. A fake airplane-mode warning becomes a lesson in trusting interfaces. A smart bulb setup flow becomes a reminder that convenience can expose passwords. A meeting-room keyboard study becomes a practical reason to think about microphones, passwords, and touch typing. The subject matter can be dense, yet the show keeps the door open for non-specialists. It explains OAuth, CPU cache behavior, ransomware indicators, ATM skimming, and cryptocurrency fraud without treating jargon as a badge of entry. Short prompts keep the conversation moving. Longer explanations slow down when the risk needs careful handling. The result feels like a security briefing with enough banter to stay human. Tech history gives the show another layer. Episodes reach back to Navajo Code Talkers, Enigma, Lorenz, CompuServe GIFs, Fortran, modem commands, and 16th-century cipher intrigue, using old stories to make modern risks feel less abstract. The current-events side is broad: Firefox updates, MOVEit exploitation, SEC breach disclosure, password-manager issues, ransomware servers, and crypto crime all pass through the same practical filter. The recurring question is not simply whether something is dangerous. It is what evidence matters, what a user can check, and what an organization should do after patching. The show is especially good at explaining why absence of obvious trouble does not prove that everything is fine. Its warnings are clear without becoming theatrical. Its humor is dry without minimizing harm. For listeners who want security news with usable takeaways and enough technical texture to be credible, Naked Security has a dependable rhythm.
Made for: For listeners who follow security news, manage technology, or just want clearer explanations of scams, bugs, breaches, and defensive habits. It suits curious non-specialists as well as technical listeners who appreciate plain language.
What sets it apart: The show pairs cyber incidents with historical context and concrete user-facing takeaways. It is less about hype than about how an attack works, what evidence matters, and what can be checked next.
We take an expert look at the latest cybersecurity incidents, how they happened, and why. Tune in weekly to learn what you can do to stop bad things from happening to you!Got questions/suggestions/stories to share? Email: [email protected]: @NakedSecurityInstagram: @NakedSecurity
Based on 6 episodes we listened to · September 2026
Technical patience, practical mitigations and a nose for hype make Naked Security a dependable guide to how cyber incidents actually work.
Naked Security turns current cyber incidents into practical explanations of how systems fail and what people can do next. Doug Ameth keeps the conversation moving with direct questions, while Paul Ducklin works patiently through the mechanics behind browser-in-the-browser…
Browser-in-the-browser is the magic trick you want Paul Ducklin to explain before you click.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A brisk security tour connecting wartime codes, dating-site crypto fraud, and ATM skimmers.
Naked Security links wartime communication with modern fraud, opening on National Navajo Code Talkers Day before touching on Enigma, Lorenz, and Purple cipher machines.
A cache attack anchors a grounded security roundup.
Naked Security leans into a CPU cache attack that sounds improbable at first, then makes its logic clear: attackers seed cache locations with known values and watch power draw to infer what was written over them.
A brisk tour from modem history to a Chromium-based browser zero-day, with practical guidance on patching and post-attack hunting.
The episode opens on back doors, exploits, and the return of little Bobby Tables, then moves from the 1983 AT command set to a relay-click modem anecdote before landing on the web-based part of the Moovit front end and the case for patching an on-premises version.
GIF history, Tudor intrigue, and a login bug are tied together with a clear security lesson.
The episode opens with password manager cracks and login bugs, then broadens into a neat tech-history detour on GIFs before landing on Queen Elizabeth I, Mary Queen of Scots, and an OAuth implementation oversight in Expo.
Fake browser windows, exact timestamps, and the small habits that make attacks easier to spot.
Naked Security's 100th episode ties together two practical threads: time handling in logs and browser-in-the-browser attacks. A short historical note on Luna 2 adds context, and the discussion of timestamps makes a strong case for simple date-time formats, UTC, and stripping…
Breach reporting that stays measured and lands on the controls that matter.
Naked Security keeps a disciplined focus on what can be verified, using the Uber breach, the Rockstar Games/Take-Two Interactive hack, and the still-uncertain Lapsus Dollar story to anchor a measured account.
Deeply researched narrative dives into hacking history and cyber-law cases, hosted by Ran Levi.
Reported narratives on hackers, spyware, and data crimes from Dina Temple-Raston.
Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.
IAPP's Jedidiah Bracy interviews the regulators and lawyers writing privacy and AI law.
A daily cybersecurity briefing hosted by Dave Bittner, pairing breaking incidents with a guest interview.
Paul Ducklin and Chester Wisniewski analyze recent cybersecurity incidents, starting with the Uber and Rockstar breaches linked to the Lapsus Dollar group.
The Naked Security Podcast hosts Doug Ameth and Paul Ducklin discuss recent cybersecurity threats in their 100th episode.
A cybersecurity podcast covering recent security incidents, tech history, and summer safety tips.
Interview with Andy Greenberg about his book on the hunt for cryptocurrency crime lords.
This episode covers a critical Samba bug, a crypto theft, and sysadmin day, with a tech history segment on the first transatlantic telegraph cable.
Doug Ameth and Paul Ducklin connect Navajo Code Talkers Day with the Navajo Marines who communicated through coded language during Pacific combat.
Doug Ameth opens with a bicycle story.
Doug Ameth and Paul Ducklin cover Lua's 1993 release, Apple's update fixing WebKit and a kernel zero-day, the Tetra radio vulnerabilities, and AMD Zenbleed.
Doug Ameth and Paul Ducklin start with back doors, exploits, and the familiar return of little Bobby Tables.
Doug Ameth and Paul Ducklin open with password manager cracks and login bugs.
The hosts discuss the history of Fortran and a famous bug in the Mariner 1 space probe, along with other cybersecurity topics.
Interview with Andy Greenberg about his book on the global hunt for cryptocurrency crime lords.
This episode covers cybersecurity news including Clearview AI's facial recognition controversy, Apple updates, and a tech history segment on Windows XP.
This episode covers recent cybersecurity incidents and tech history, starting with the 1958 video game Tennis for Two.
This episode covers Microsoft's double zero-day, prison for scammers, bogus phone calls, and a tech history segment on IBM's first transistor calculator.