Cybersecurity Podcasts

The CyberWire Daily is the compact option. Early in France builds its own digital future., Dave Bittner moves through an Adobe Acrobat Reader patch, a Booking.com breach and spyware research. He then has a longer conversation with Ted Shorter of Keyfactor about quantum computing at scale. In W3LL runs dry., the briefing pauses to stress that certain claims "have not yet been independently verified." A daily show exists to mark what is known, and this one does it out loud.

Cybercrime Magazine Podcast mixes dated wire reports with interviews. In CTRL, ALT, HACKED. Video Game Cheating: A Multi-Billion Dollar Industry. Martin Holroyd, Intorqa., Holroyd explains how his firm reached a median estimate of $8.5 billion a year across 15 games. The Gaming guide picks up from there.

Security Now (Audio) makes the opposite bet. Steve Gibson and Leo Laporte treat a story as machinery. In The FCC Bans New Consumer Routers - LinkedIn's JavaScript Bombshell, Gibson explains why "pixel" no longer describes the tracking code websites host. He then takes apart LinkedIn's browser fingerprinting and the router ban. That episode runs 172 minutes with sponsor reads, so it suits a listener who wants depth more than a quick summary. The Threat Intelligence & News page is worth a look for keeping current.

Click Here is hosted by former NPR investigations correspondent Dina Temple-Raston. Your data, commodified follows a young Vietnamese man who sold stolen personal data. An investigator cut off his supply, posed as a dark-web rival and lured him to a meeting in Guam. Temple-Raston says the team doesn't "really like to platform these bad guys." She says this one earned airtime because of how human he sounds. The show also reaches past the keyboard. In Dispatches from the Ukrainian front, a serving officer describes drone swarms while sitting in the dark, his router running off a power bank.

Malicious Life, hosted by Ran Levi, tells history patiently. The Man Who Went To War With Anonymous - And Lost reconstructs Aaron Barr's attempt to unmask the group. It includes the exchange in which Commander X tells him the attack isn't his doing, because Anonymous has no leaders. Unmasking Secrets: The Rise of Open-Source Intelligence shows Elliot Higgins checking a rebel claim in Libya by using the width of cars on Google Earth as a ruler.

Fraud is where listeners dispute the genre's borders, and it is also where the shows are most practical. On Hacking Humans, Dave Bittner, Joe Kerrigan and Maria Vermazis work through current schemes. In The evolving face of AI deepfakes., one host describes a test for faked video calls: ask the caller to turn a full circle and pass a hand across their face. Another host has already seen a fake that handles the turn: "they've figured that one out already." The show is candid about how quickly advice expires. The cost is digression, since two episodes spend their early minutes on a host's chickens.

IAFCI Presents... The Protectors approaches fraud from the investigator's chair. In The Threat Within: Inside the Mind of Cybersecurity Expert Shawn Loveland, Loveland describes finding a rogue developer by watching him offer services to criminals on the dark web.

Practitioner shows assume you know what a domain controller is. 7 Minute Security is the most personal of them. 7MS #716: Tales of Pentest Pwnage – Part 83 builds a long Kerberos command toward simulated total domain compromise. It includes a power clap at about one in the morning while the family slept. The same feed carried 7MS #717: I Gave Up My Wife's PHI (And I'd Do It Again). In it, the host recounts his wife's medical emergency abroad and the privacy questions it raised. He describes his fear plainly, so expect hard listening.

Paul's Security Weekly (Video) works like a lab bench with an audience. In Scanning The Internet with Linux Tools - PSW #919, the contrast between ZMap and Nmap becomes a lesson in attacker economics. The panel suggests someone hunting thousands of devices can shrug at missing 10%, while one member believes Nmap's philosophy is to miss nothing. On the mnemonic security podcast's Pentesting anno 2026, guest Erika Burgess describes AI finishing exploit code whose first half took her weeks. She adds that she is "trying not to be too hypey." The Penetration Testing page goes deeper. For software flaws, Application Security Weekly (Video), hosted by Mike Shema and John Kinsella, leads toward the Application & Cloud Security page.

AI agents appear across many of this year's feeds, and the useful shows test the claims made about them. The Security Table's Make No Mistakes: Inside the First "Agentic Ransomware" reads a published case line by line. The panel notes that the code encrypts a database without saving the key. One member remarks, "It definitely sounds cooler if you say it's by an agent."

The Catalyst by Softchoice is a documentary-style show. Early in The Agentic AI Episode: What IT Leaders Need to Know, it tells the story of Maltbook, a social network for AI agents. According to the Wiz investigation the episode cites, the network was largely operated by roughly 17,000 humans, and its database was open. Skip Vandenberg's advice in the episode: "start with your decisions, not your technology." The Artificial Intelligence guide goes wider.

Some listening is about who owns a risk. Third Party, with Jeffrey Wheatman, Ferhat Dikbiyik and Bob Maley, works the vendor problem. In Vendor Sprawl Is Out of Control (Here's How the Best Teams Fix It), a desk-reservation app that sat outside one company's vendor review exposed its credentials when the vendor was breached. What You Should NEVER Automate in Risk Programs explains why a language model may answer an identical questionnaire differently each time.

On CISO Tradecraft®, hosted by G. Mark Hardy, a guest in #250 - Understanding Vulnerabilities, Exploits, and Cybersecurity argues that humans "top out at about 40" items. That makes a list of 10,000 critical vulnerabilities a prioritisation problem.

The Privacy Advisor, from the IAPP, lets officials make their own case. In A look ahead at digital policy in 2026 with Omer Tene, Tene says he thinks all 19 comprehensive state privacy laws are now in effect. He predicts more laws, more enforcement and more AI regulation. IT IST ALLES. gets granular in German. In #125 | Mario Mosel - Wie nimmt NIS-2 die Geschäftsleitung in die Pflicht?, Mosel explains that the organisation certificate for the registration portal arrives by letter after five days.

For careers, UNSECURITY: Information Security Podcast offers Unsecurity Episode 257: Samantha Floyd, Career Transitions, and Amplifying Diverse Perspectives. In it, a pen tester recalls her first DEF CON and names imposter syndrome as her hardest challenge. The Security Careers & Learning page continues that thread.

Founder interviews on Inside the Network belong with the Enterprise Technology guide. So do WhiteDog SoundBytes, whose hosts claim a detection dwell time of six minutes or less against what they call a 200-day industry average.