Symantec Cyber Security Brief Podcast

50 episodes listed below

Listen to the show on

Threat research without the hype cycle.

The gist

Symantec Cyber Security Brief Podcast is a regular briefing on active cyber threats, built around recent research and security news. Episodes move from malware and ransomware mechanics to espionage activity, breaches, arrests, and the practical clues researchers use to understand attacks.

PRESS PLAY

Find your next episode

All episodes

About Symantec Cyber Security Brief Podcast

Symantec Cyber Security Brief Podcast is a regular cybersecurity briefing focused on threat research, active campaigns, and security stories. Its center of gravity is practical investigation. Episodes often begin with fresh research from the Threat Hunter team, then expand into related incidents, public reporting, and the broader behavior of attackers. The show spends a lot of time on ransomware. BlackByte, Noberus, Prestige, Sodinokibi-linked activity, Ransom Cartel, and cases such as the attack on Ireland’s Health Service Executive all sit within its field of view. Espionage campaigns are just as prominent. Billbug, Budworm, Witchetty, Cranefly, WebWorm, ShadowPad-linked activity, and APT-linked overlaps are treated with attention to tools, targets, and attribution limits. The conversations are measured and evidence-minded. When researchers cannot confidently name a single actor, the show says so and explains the overlaps instead of forcing certainty. That restraint is part of its value. Technical details matter here: custom malware, backdoors, droppers, IIS log command techniques, sideloaded legitimate applications, Linux malware, OpenSSL bugs, and malicious USB devices all get room. The show also connects those details to visible consequences. Government agencies, defense companies, health services, telecoms firms, critical infrastructure, and private companies appear as affected targets rather than abstract examples. There is a recurring interest in how cybercrime adapts after disruption. Arrests, leaked source code, ransomware shutdowns, cryptocurrency payments, and criminal groups re-forming after setbacks all feed into that theme. The tone is professional but human. The speakers can be dryly amused by strange details, yet the coverage stays grounded in the seriousness of breached systems and disrupted services. It suits listeners who want security news with enough technical depth to be useful and enough editorial framing to stay readable. It is especially strong when tracing how a single campaign reveals a larger pattern: persistence, reuse of tools, novel delivery methods, and attackers who may not care much about being identified.

Made for: For cybersecurity practitioners, analysts, technical leaders, and security-curious listeners who want current threat activity explained through evidence. It also suits people tracking ransomware, espionage groups, vulnerabilities, and cybercrime enforcement.

What sets it apart: The show pairs recent research with plainspoken discussion of attacker behavior, tooling, and attribution uncertainty. It gives technical findings real-world context without turning them into alarmist headlines.

In their own words

Our regular podcast series features threat research and security news, hosted by threat researchers from the Threat Hunter Team.

Why you'd press play

A command tucked into an IIS log is your kind of cybersecurity plot twist.

Press play if you want

  • to hear Dick O'Brien ask Bridget O'Gorman how attackers turned web server logs into a command channel
  • to understand why researchers hold back on naming an attacker when several groups use the same tools
Read the full recommendation in PlayNext →
ransomware operationscyber espionage campaignsmalware and backdoorszero-day vulnerabilitiesgovernment and critical infrastructure attackscybercrime arrestscryptocurrency and illicit paymentsthreat actor attribution

Talks about

Best episodes of Symantec Cyber Security Brief Podcast

Short reviews from the PlayNext desk, based on the episodes we processed.

New Billbug campaign, Prestige ransomware, and multiple arrests of alleged cyber-crime gang membersNov 17, 2022

Billbug's certificate authority campaign anchors a briefing on espionage, Ukraine-focused ransomware, and alleged cybercrime arrests.

Billbug gives this cybersecurity briefing its clearest center of gravity. The campaign against a compromised digital certificate authority in Asia, alongside multiple government agencies in the region, turns a technical intrusion into something with wider strategic weight.

Exbyte exfiltration tool, Cranefly uses new tools and novel technique, and OpenSSL bug is downgradedNov 3, 2022

A focused PlayNext review of BlackBite, IIS log command tricks, and the cooled-down OpenSSL scare.

This PlayNext review finds a clean shape in a cybersecurity brief that moves from ransomware operations to a strange command channel, then lands on a calmer OpenSSL update.

Budworm espionage activity, Spyder Loader malware, and Ransom Cartel links to SodinokibiOct 20, 2022

A clear, research-led briefing links Budworm espionage, Spider Loader, and Sodino-Kibi's uncertain status.

This cybersecurity briefing tracks Budworm espionage activity, Spider Loader research, and the still-open question of whether Sodino-Kibi has truly disappeared.

Espionage activity targeting Asian governments, Webworm develops customized tools, and latest Noberus TTPsSep 22, 2022

A measured review of Asian espionage activity, shared tooling, and the limits of confident attribution.

Cyber espionage rarely comes with a tidy signature, and this review values the episode most when it resists forcing one. Its attention stays on observable overlaps: legitimate applications, sideloading patterns, repeated software versions, shared deployment filenames, and links…

Podcasts like Symantec Cyber Security Brief Podcast

  • Security Now (Audio)TWiT

    Security news worked through one mechanism at a time.

  • Malicious LifeMalicious Life

    Hacks, trials and frauds, told as cybersecurity history.

  • Click Here

    Technology's mechanisms, power's consequences.

  • Hacking HumansN2K Networks

    Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.

  • The Privacy AdvisorJedidiah Bracy, IAPP Editorial Director

    Privacy law meets the systems it governs.

  • The CyberWireAlan Geason

    Cybersecurity headlines, technical detail and the decisions behind defense.

Episodes

  1. 1

    New Billbug campaign, Prestige ransomware, and multiple arrests of alleged cyber-crime gang members

    Hidden gem

    Microsoft said a new ransomware family calling itself Prestige hit organizations in Ukraine and Poland, with later attribution to Sandworm and victims compromised as early as March 2022.

    Nov 17, 2022·26m·1 clip
  2. 2

    Exbyte exfiltration tool, Cranefly uses new tools and novel technique, and OpenSSL bug is downgraded

    Hidden gem

    Symantec’s Dick O’Brien and Bridget O’Gorman cover BlackBite, Cranefly, ransomware economics, and an OpenSSL alert that was downgraded from critical to high.

    Nov 3, 2022·21m·1 clip
  3. 3

    Budworm espionage activity, Spyder Loader malware, and Ransom Cartel links to Sodinokibi

    Hidden gem

    Symantec Cyber Security Brief links Budworm's July US state-legislature activity, Spider Loader on Hong Kong government networks, and a Palo Alto report on Ransom Cartel and Reval/Sodinokibi.

    Oct 20, 2022·18m·1 clip
  4. 4

    Witchetty espionage group activity, Microsoft Exchange Server zero days, and U.S. defense sector targeted by APT groups

    Semantic Cybersecurity Brief covers Wichiti's steganography payloads, Microsoft Exchange zero-days, the Optus breach, and Trellix's Rival ransomware research.

    Oct 6, 2022·28m·1 clip
  5. 5

    Espionage activity targeting Asian governments, Webworm develops customized tools, and latest Noberus TTPs

    Hidden gem

    Symantec Cyber Security Brief brings together Dick O'Brien, Al Neville, and Bridget O'Gorman for two Asia-focused espionage reports and a Noberis ransomware update.

    Sep 22, 2022·25m·1 clip
  6. 6

    Mobile app security, Russian invasion of Ukraine cyber impact continues, and Evil Corp switches focus

    Hidden gem

    Kevin Watkins's mobile-app research found hard-coded cloud credentials exposing more than 300,000 biometric fingerprints across five apps.

    Sep 8, 2022·31m·2 clips
  7. 7

    Bumblebee loader analysis, Raccoon Stealer returns, and LockBit launches a new version

    Chris Kiefer describes Bumblebee as a loader first seen in March 2022 that can gather system information and run payloads.

    Jun 30, 2022·23m·1 clip
  8. 8

    BlackCat ransomware, Follina vuln used by Russian actors, and a new version of Metasploit

    Jun 16, 2022·28m
  9. 9

    The Follina Microsoft Office vulnerability, Conti break-up, and more ransomware activity

    Jun 2, 2022·26m
  10. 10

    Chinese cyber-espionage activity, Conti gang threatens Costa Rica government, and U.S. warns about North Korean citizens seeking jobs in IT

    May 19, 2022·26m
  11. 11

    North Korea’s Stonefly, commodity malware, and the potential return of the REvil ransomware

    May 5, 2022·32m
  12. 12

    Shuckworm targets Ukraine, Lazarus Dream Job campaign continues, and two dark marketplaces get taken down

    Apr 21, 2022·28m
  13. 13

    Spring4Shell, Cicada campaign, new Verblecon malware, and Ukraine invasion cyber activity update

    Apr 7, 2022·24m
  14. 14

    What you need to know about hacking group Lapsus$, cyber impacts of Ukraine invasion, and BazarBackdoor deploys new tactics

    Mar 24, 2022·31m
  15. 15

    Daxin special: How this advanced malware was discovered

    Mar 10, 2022·30m
  16. 16

    Hive and BlackByte ransomware, the money made by cyber criminals, and BEC scammers’ new tactics

    Feb 24, 2022·24m
  17. 17

    FBI seizes $3.6 billion in cryptocurrency, cyber attacks against Ukraine continue, and financial organizations in Taiwan targeted

    Feb 10, 2022·19m
  18. 18

    Ukraine cyber attacks, law enforcement activity, and a Noberus ransomware attack

    Jan 27, 2022·27m
  19. 19

    BadUSB attacks, a new backdoor, and how one APT group managed to infect itself with malware

    Hidden gem

    Bridget O'Gorman and Dick O'Brien examine Cloudflare's finding that ransom-driven DDoS attacks rose 175% quarter over quarter in late 2021.

    Jan 13, 2022·22m·1 clip
  20. 20

    Log4j vulnerabilities, likely Iran-backed attacks on telecoms companies, and new Rust-based Noberus ransomware

    Dec 16, 2021·28m
  21. 21

    Yanluowang ransomware update, possible Conti link to Emotet, and the importance of strong passwords

    Dec 2, 2021·23m
  22. 22

    Attacks on critical infrastructure, ransomware arrests, and the return of Emotet?

    Nov 18, 2021·22m
  23. 23

    BlackMatter updates, lots of law enforcement activity, and new SquirrelWaffle malware is one to watch

    Nov 4, 2021·24m
  24. 24

    New research about the Yanluowang ransomware and two separate campaigns targeting victims in Asia

    Oct 21, 2021·20m
  25. 25

    Governments tackle cyber crime, ransomware arrests, and an interesting phishing campaign

    Oct 7, 2021·21m
  26. 26

    A new ransomware whitepaper and some recent ransomware stories, plus new botnet is carrying out giant DDoS attacks

    Sep 23, 2021·22m
  27. 27

    Ransomware, the rising cost of data breaches, and the U.S. points finger at China for Microsoft Exchange Server attacks

    Jul 29, 2021·24m
  28. 28

    Kaseya ransomware supply chain attack, new SolarWinds vulnerability, and the rising cost of cyber insurance

    Jul 15, 2021·32m
  29. 29

    Ransomware attackers using virtual machines, over-60s lost $1 billion online in 2020, and the EU launches a new cyber security unit

    Jul 1, 2021·23m
  30. 30

    Ransomware, takedowns, and political promises to tackle cyber crime

    Jun 17, 2021·27m
  31. 31

    In-depth look at the ransomware attack on Ireland’s national health service, as major meat producer JBS also hit with ransomware

    Threat researchers discuss the recent ransomware attack on Ireland's Health Service Executive and its impact.

    Jun 3, 2021·34m
  32. 32

    Colonial Pipeline attack, Darkside ransomware gang, and crypto mining makes a comeback

    May 20, 2021·23m
  33. 33

    MFA causes headaches for attackers, and a look at living off the land activity

    May 6, 2021·27m
  34. 34

    Pulse Secure VPN zero-day, SolarWinds and Exchange Server developments, and spies approach UK employees on social media

    Apr 22, 2021·22m
  35. 35

    Facebook data leak, cyber attack aimed at EU institutions, and cyber criminals use a call center to spread malware

    Apr 8, 2021·18m
  36. 36

    Ransomware attackers leverage the Microsoft Exchange Server vulns, WeLeakInfo users hit by data breach, and ransomware payments increase

    Mar 25, 2021·21m
  37. 37

    All you need to know about the Microsoft Exchange Server attacks, and some SolarWinds developments

    Mar 11, 2021·22m
  38. 38

    Accellion product vulns, Equation group tool copied by Chinese APT, and software supply chain attacks in France

    Feb 25, 2021·23m
  39. 39

    Emotet takedown, water plant cyber attack, and a SolarWinds update

    Feb 11, 2021·23m
  40. 40

    Raindrop: How the additional tool was discovered in SolarWinds investigation

    Jan 28, 2021·25m
  41. 41

    The latest on the SolarWinds hack, a lot of ransomware activity, and healthcare hit hard by cyber attacks

    Jan 14, 2021·25m
  42. 42

    Sunburst: Everything we know about the supply chain attack targeting SolarWinds users

    Dec 17, 2020·28m
  43. 43

    Cyber predictions for 2021, botnets turn to ransomware, and the Gootkit infostealer reemerges

    Dec 3, 2020·24m
  44. 44

    New research about attacks on Japan-linked companies, and APT groups target COVID-19 vaccine makers

    Nov 19, 2020·20m
  45. 45

    Maze 'retires' while Ryuk ramps up activity, U.S. election, and the UK ICO hands down a historically large fine

    Nov 5, 2020·19m
  46. 46

    Trickbot disruption, newly released Seedworm research, and some noteworthy indictments

    Oct 22, 2020·28m
  47. 47

    Round up: Financial sector threats, North Korean actors, WastedLocker and more

    Oct 8, 2020·20m
  48. 48

    Round-up: A whole host of vulnerabilities, and the hackers hacking other hackers

    Mar 12, 2020·23m
  49. 49

    Round-up: Ransomware criminals continue to innovate, and BEC scammers hit a high-profile victim

    This episode covers recent cybersecurity news including a data breach at Clearview AI, targeted ransomware, and a BEC scam.

    Mar 5, 2020·22m
  50. 50

    Special Edition: The RSA Conference 2020

    Hosts discuss cybersecurity threats and research from the RSA conference.

    Feb 27, 2020·26m