Five cyber security podcasts I keep coming back to
Cyber security moves quickly, but the problems underneath it often do not. A new breach may involve a different product or technique, yet the questions about trust, access, human behaviour and how an organisation responds are often very familiar.
That is why podcasts have become one of my favourite ways to keep learning. The best ones do more than read the week’s headlines: they add context, revisit the incidents that shaped the industry and give you ideas worth discussing with colleagues. Some go deep into the technical detail, while others tell a great story or make a serious subject a little lighter.
Here are five cyber security podcasts I listen to frequently and recommend, in no particular order.
Smashing Security
Visit the Smashing Security website
Smashing Security is the one I reach for when I want something a bit lighter. It covers cybercrime, privacy problems, technology mishaps and the stranger side of security with plenty of humour, without losing sight of the useful lessons behind each story.
It is approachable enough to share with someone who does not work in cyber security, but there is still plenty for experienced listeners. It is also a good reminder that security awareness does not always need to sound like a policy document to make a point stick.
Darknet Diaries
Visit the Darknet Diaries website
Darknet Diaries tells true stories from the darker side of the internet. Episodes explore breaches, social engineering, penetration testing, cybercrime and the people on every side of an incident, using narrative storytelling that makes complex events easy to follow.
The back catalogue is a great learning resource. Hearing how an attack unfolded — including the decisions, assumptions and small failures that made it possible — often gives you more to think about than a short technical summary ever could. Historical incidents are not just old stories; many of the same patterns remain relevant in today’s world.
Risky Business
Visit the Risky Business website
Risky Business is excellent for keeping up with what is happening now. Its weekly mix of information security news and in-depth interviews is direct, informed and particularly useful if you want analysis that goes beyond the headline.
Along with Security Now, this is where I go for deeper coverage. It helps connect a vulnerability or breach to the wider industry, the decisions organisations are making and what practitioners should actually pay attention to. Its Australian perspective is a welcome bonus.
Security Now
Visit the Security Now website
Security Now is long-form and in depth. Steve Gibson and Leo Laporte work through current security news, vulnerabilities, privacy, authentication and the underlying technology, often taking the time to explain how something works rather than simply reporting that it happened.
That depth is the reason I keep listening. Episodes can be substantial, but they are valuable when you want to understand the mechanics of an issue, its history and its practical consequences. Like Risky Business, it is a strong choice when a quick news summary is not enough.
Malicious Life
Visit the Malicious Life website
Malicious Life explores the people and events behind the evolution of cyber security: early hacking culture, viruses, spam, botnets, hacktivism, ransomware and much more. It gives historical incidents the time and context needed to understand why they mattered.
Like Darknet Diaries, it shows why cyber security history remains useful. Technology changes, but incentives, mistakes and human behaviour have a habit of repeating themselves. These stories are a great way to start conversations about what we would do differently today — or whether we are quietly making the same mistakes with newer systems.
A useful mix, not a ranking
I would not try to choose a single “best” podcast from this list because they serve different moods and purposes. Smashing Security makes the subject accessible and entertaining. Risky Business and Security Now help me stay across current happenings and explore the detail. Darknet Diaries and Malicious Life turn past incidents into lessons that remain surprisingly current.
Together they are a useful resource for learning, challenging your own assumptions and getting thoughtful discussions going. You do not need to be a security specialist to benefit, either. If you look after people, systems or data, there will be something in each of these shows that changes how you think about risk.
If you are new to cyber security podcasts, pick the description that suits what you feel like listening to and start there. The list is in no particular order — and each one has earned a permanent place in my podcast rotation.