Linux security, explained from the inside.
Ubuntu Security Podcast is a technical briefing on Linux and Ubuntu security from people close to the work. Recent episodes move between release hardening, vulnerability case studies, malware reports, and Cybersecurity Awareness Month conversations.
PRESS PLAY
Ubuntu Security Podcast is a technical, fortnightly-feeling record of what matters in Ubuntu and Linux security. It is practical first. Recent episodes show Alex Murray moving from year-end review to vulnerability deep dive, then out into wider conversations with members of the Ubuntu Security team. The show is strongest when it follows the path from research finding to operational consequence. The needrestart episode, for example, explains why environment variables, interpreter selection, regex behavior, and process inspection can become real privilege escalation risk. It does not flatten the details. Coverage of OpenSSH, high-profile Linux research, and coordinated disclosure places individual bugs inside the reality of maintaining widely deployed systems. Ubuntu release episodes focus on security features that change a user or administrator's risk, including namespace restrictions, hardening changes, old TLS deprecation, and upstream kernel protections. The show also makes room for threat intelligence. A Linux malware discussion looks at command execution, interactive shells, file operations, archive handling, proxy behavior, and signs of a hands-on operator. Those segments are technical without becoming theatrical. Cybersecurity Awareness Month episodes widen the lens toward best practices, supply chain visibility, AI-assisted phishing, software provenance, and the difficulty of keeping systems understandable over time. The register is relaxed and direct. It often sounds like someone explaining why a fix or feature mattered after being close to the process. Listeners also hear the team culture around Ubuntu Security, including coordination work, sprint conversations, and public contact channels. The show will not suit someone looking for gadget news or broad consumer tech chatter. It is for people who care about Linux systems, package security, vulnerability response, and the tradeoffs behind defensive engineering. Its editorial value is the combination of low-drama delivery and high-detail security context.
Made for: For Linux users, Ubuntu administrators, security engineers, open source maintainers, and technically curious listeners who want more than advisory headlines. It rewards comfort with kernels, interpreters, packages, CVEs, and defensive operations.
What sets it apart: The show stands out because it connects Ubuntu security updates to the engineering and coordination work behind them. It can move from a specific Perl or Python execution path to the larger question of how Linux systems are defended at scale.
A fortnightly podcast talking about the latest developments and updates from the Ubuntu Security team, including a summary of recent security vulnerabilities and fixes as well as a discussion on some of the goings on in the wider Ubuntu Security community.
Based on 5 episodes we listened to · September 2026
Technical detail meets operational context as Alex Murray connects Linux vulnerabilities, malware behavior, and defensive practice.
Ubuntu Security Podcast follows security work from the mechanics of a flaw to the decisions required after it is found. Alex Murray moves between solo technical explanation and group discussions with Lucci, Eduardo Barreto, and Diogo, keeping Ubuntu and Linux security at the…
Alex Murray turns Linux security incidents into the briefing you wish came with every patch.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A year-end Ubuntu Security recap that tracks 2024's release hardening and major vulnerabilities.
Episode 243 closes out the year with a measured look back at Ubuntu Security's 2024. It revisits the revived full disclosure mailing list spam and the zombie CVE wave from episode 217, then turns to Noble Numbat in episode 227.
A careful look at how a default Ubuntu Server service became a security headache.
Ubuntu Security Podcast episode 242 gives a clear, measured account of how a recent needrestart vulnerability moved from discovery to disclosure to explanation.
A grounded look at Goblin Rat, with logs that point toward hands-on control.
Ubuntu Security Podcast episode 241 focuses on a recent report from Russian cybersecurity firm Solva, with the 4A's research team describing a new Linux malware variant called Goblin Rat.
A practical AI-and-phishing security conversation with some audio wobble.
Episode 240 uses Halloween and Cybersecurity Awareness Month as a timely frame for a discussion that stays grounded in present-day security concerns.
A measured cybersecurity discussion tying supply chain trust, software inventory, and real world vulnerability response.
Ubuntu Security Podcast episode 239, recorded for Friday the 18th of October as part two of the Cybersecurity Awareness Month series, stays grounded in current security practice.
Specialists walking through software's tradeoffs, one system at a time.
Founders and engineers on AI coding agents like Claude Code, and supply chain security.
A maintainer spent months building trust before inserting a targeted backdoor into xz tools.
Needrestart runs as root, so an attacker can turn a Linux update helper into local code execution.
Alex Murray, on Ubuntu Security Podcast episode 241, covers a Russian cybersecurity firm Solva and its 4A's research team after they reported a Linux malware variant called "Goblin Rat." The malware was found on systems at four organisations, where administrators noticed deleted logs and a tool that appeared to steal passwords from a domain controller.
Alex Murray records Episode 240 from the Ubuntu Summit on Halloween, with Lucci and Diogo joining for a Cybersecurity Awareness Month discussion about future threats.
Alex Murray, Lucci Stanislawski, and Eduardo Barreto use Ubuntu Security Podcast episode 239 to cover Cybersecurity Awareness Month best practices on October 18.
Ubuntu Security Podcast episode 237 reports 613 CVEs addressed over a fortnight, including 429 in one Ubuntu 22.04 kernel update.
Ubuntu 24.04.1, announced on August 29, enables the upgrade path from Ubuntu 22.04, but a release-upgrader bug temporarily paused upgrades.
Alex Murray's Ubuntu Security Podcast episode dated August 23 explains why a Windows update disrupted Linux dual boots using Secure Boot.