Best security podcast episodes
Hand-picked security podcast episodes: a starter list for beginners, themed lists on ransomware, identity attacks and AI security, and the best episodes on the biggest breaches.
Start here
By theme
Best podcast episodes on ransomware
Ransomware explained from every side: the gangs' business model, the negotiators, the backups that fail, and the cloud variants that need no malware. Ordered from first listen to expert.
10 episodes
Best podcast episodes on supply chain attacks
From NotPetya and SolarWinds to XZ Utils, npm worms and poisoned GitHub Actions: the episodes that explain how attackers get in through the software and services you trust.
10 episodes
Best podcast episodes on identity attacks
Phishing, MFA bypass, SIM swaps, stolen session tokens and OAuth abuse: how attackers take over accounts today, and why phishing-resistant credentials change the picture.
12 episodes
Best podcast episodes on AI security
Prompt injection, agent hijacking, MCP flaws and AI red teaming, from plain-language explainers to the researchers who found the bugs.
12 episodes
Best podcast episodes on nation-state hacking
Volt Typhoon, Salt Typhoon, Lazarus, Turla and NotPetya: state-backed operations told by the people who tracked them, from narrative accounts to attribution tradecraft.
12 episodes
Best podcast episodes on incident response
What happens after the breach: real response stories, remediation, cloud and Kubernetes investigations, tabletop exercises, and leading a team through the worst week of the year.
11 episodes
By breach
Best podcast episodes on the SolarWinds hack
Beginning in at least March 2020, attackers used a compromised component of SolarWinds' Orion network management software to break into US government agencies, critical infrastructure operators, and private companies. CISA also flagged abuse of SAML authentication tokens in the campaign, and in April 2021 the US government formally named Russia's foreign intelligence service, the SVR, as responsible.
8 episodes
Best podcast episodes on the NotPetya attack
On June 27, 2017, NotPetya spread from Ukrainian tax accounting software, M.E.Doc, whose development environment attackers had backdoored, and encrypted files on networks worldwide with no working way to restore them. In February 2018 the White House attributed the attack to the Russian military and called it the most destructive and costly cyberattack in history.
6 episodes
Best podcast episodes on the XZ Utils backdoor
On March 29, 2024, Andres Freund disclosed on the oss-security mailing list that XZ Utils versions 5.6.0 and 5.6.1 contained a backdoor that could lead to SSH server compromise. The malicious code sat in the release tarballs rather than the project's git source, and CISA advised users to downgrade to an uncompromised version (CVE-2024-3094).
8 episodes
Best podcast episodes on Log4Shell
In December 2021, CISA and its partners began responding to active, widespread exploitation of Log4Shell (CVE-2021-44228), a critical remote code execution flaw in Apache's Log4j logging library, versions 2.0-beta9 to 2.14.1. Because Log4j is built into a wide range of consumer, enterprise, and operational technology products, CISA issued an emergency directive on December 17, 2021 ordering federal agencies to mitigate it.
8 episodes
Best podcast episodes on the MOVEit hack
Beginning on May 27, 2023, the Cl0p ransomware gang exploited a previously unknown SQL injection flaw (CVE-2023-34362) in Progress Software's MOVEit Transfer file transfer product. Internet-facing MOVEit servers were infected with a web shell called LEMURLOOT, which was used to steal data from the underlying databases.
5 episodes
Best podcast episodes on the Scattered Spider attacks
In September 2023, MGM Resorts and Caesars Entertainment disclosed cyberattacks in SEC filings, and Caesars said its intrusion began with a social engineering attack on an outsourced IT support vendor. A joint CISA and FBI advisory describes Scattered Spider's methods: posing as IT or help desk staff, push bombing, and SIM swapping to obtain credentials and bypass MFA.
5 episodes