Threat Intelligence & News Podcasts

On a good threat-intelligence show, the week's alarms get sorted. Someone asks which claim has evidence behind it, how long the window stayed open, and what a defender should change on Monday. Right now the loudest arguments are about AI. On The Department of Know: Google's CodeMender, CISA's big leak, Torvalds open-source warning, a Cybersecurity Headlines panelist looks at self-presented figures for a vulnerability-hunting model and notes, "we also don't know the false positive rate." On Talkin' Bout [Infosec] News, a panelist takes the other side: "if you're looking at this as just purely a marketing play by Anthropic, you're missing the larger point."

CyberWire Daily is a fast rundown with a conversation attached. Hackers ignore the ceasefire. (28 min) runs from Iran-linked hackers signalling continued attacks to John Deere's right-to-repair settlement. It then turns to an interview with the CEO of Nozomi Networks about what the Iran conflict means for industrial control systems.

HEAL Security - Cybersecurity Intelligence & News for Healthcare narrows the lens to healthcare and leans on analogy. Early in Millions Exposed, Malware Spreads & Critical Patches Released, the hosts compare Android malware that survives a factory reset to termites waiting in a rebuilt house. Later, citing Android Headlines, they report that it reached over 2.3 million devices through more than 50 Play Store apps.

Talkin' Bout [Infosec] News runs looser. FCC Blocks Foreign-Made Routers – 2026-03-30 gets sidetracked early by a video of a robot slapping a child. Then it settles into a sharp read of a GitHub compromise, explaining why a release can be rewritten after the fact and why you pin by commit hash. Security Weekly News (Video), hosted by Doug White, shares the temperament: one March 2026 episode walks through a fake Zoom call built from AI-generated JavaScript. Both suit listeners who don't mind banter between the useful parts.

The hosts of Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec say they decided, as a general rule, against formal sponsors so nobody could editorialise them. In Defensive Security Podcast Episode 340 they take up a payroll scam at a medical practice. They argue that changing direct-deposit details should demand a higher level of authorization.

Smashing Security, hosted by Graham Cluley, is the comic one, but its jokes carry freight. In How to lose friends and DDoS people, Duck explains how a ransomware gang overwrote part of a key with zeros, twice. The lesson he draws: "don't take the first story you read about something like this at face value."

For depth, go where researchers do the talking. The Defender's Advantage Podcast is hosted by Luke McNamara. In Windows Remote Desktop Protocol: Remote to Rogue, Rohit explains how a malicious RDP file can show a victim a single application (MS Paint, in his example) while mapping the victim's file system to the attacker's machine.

Decipher Security Podcast does the same for data. In We Need to Talk About KEV With Tod Beardsley, the guest explains why CISA's known exploited vulnerabilities catalog can favour accuracy over speed. He also describes a side project that reads War and Peace one sentence at a time, expected to finish around 2085.

The Cybersecurity Defenders Podcast pairs news reads with pushback. In one Intel Chat, Matt Bromley resists the idea that AI has made the kill chain obsolete: "malware does not just manifest on a system." The hosts also admit they are "always kind of a week behind."

Security Now (Audio) is the long road. LiteLLM - Click Fix Attacks Surge (169 min) promises a deep dive into what happened in the LiteLLM compromise, how it happened and how to prevent it. The 443 - Security Simplified keeps things lighter. Early in Project Glasswing - The 443 Podcast - Episode 366, the hosts weigh Anthropic's claims for a new model, asking what follows "if a bunch of marketing hype turns out to be true."