Best Wired In Software Podcasts (2025)

1
Jedai tricks, human risks. 33:59

5h ago33:59

33:59

An unsecured Chroma database exposes personal information of Canva Creators. A researcher brute-forces Google phone numbers. Five zero-day vulnerabilities in Salesforce Industry Cloud are uncovered. Librarian Ghouls target Russian organizations with stealthy malware. SAP releases multiple security patches including a critical fix for a NetWeaver bu…

1
PP066: News Roundup – NIST’s New Exploit Metric, Windows RDP Issues, Compromised Routers, and More 41:34

8h ago41:34

41:34

Our security news roundup discusses the compromise of thousands of ASUS routers and the need to perform a full factory reset to remove the malware, why Microsoft allows users to log into Windows via RDP using revoked passwords, and the ongoing risk to US infrastructure from “unexplained communications equipment” being found in Chinese-made electric…

1
White House reboots cybersecurity priorities. 36:12

6h ago36:12

36:12

A new White House executive Order overhauls U.S. cybersecurity policy. The EU updates its “cybersecurity blueprint”. The Pentagon’s inspector general investigates Defense Secretary Hegseth’s Signal messages. Chinese hackers target U.S. smartphones. A new Mirai botnet variant drops malware on vulnerable DVRs. 17 popular Gluestack packages on NPM hav…

1
Ell Marquez: It's okay to be new. [Linux] [Career Notes] 9:52

11m ago9:52

9:52

Please enjoy this encore of Career Notes. Linux and Security Advocate at Intezer Ell Marquez shares her journey from the family ranch to security. Needing a life change due to a bunch of circumstances that had occurred that left her almost homeless, Ell found out about a six week Linux boot camp that took her down the path toward technology. She fe…

1
A new stealer hiding behind AI hype. [Research Saturday] 25:08

9h ago25:08

25:08

This week, we are joined by Michael Gorelik, Chief Technology Officer from Morphisec, discussing their work on "New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms." A new threat dubbed Noodlophile Stealer is exploiting the popularity of AI-powered content tools by posing as fake AI video generation platforms, luring users in…

1
Beware of BADBOX. 33:20

3d ago33:20

33:20

The DOJ files to seize over $7 million linked to illegal North Korean IT workers. The FBI warns of BADBOX 2.0 malware targeting IoT devices. Researchers uncover a major security flaw in Chrome extensions. ESET uncovers Iranian hackers targeting Kurdish and Iraqi government officials. Hitachi Energy, Acronis and Cisco patch critical vulnerabilities.…

1
China’s largest data leak exposes billions. 33:43

2h ago33:43

33:43

Researchers discover what may be China’s largest ever data leak. CrowdStrike cooperates with federal authorities following last year’s major software bug. A researcher discovers over half a million sensitive insurance documents exposed online. Microsoft offers free cybersecurity programs to European governments. The FBI chronicles the Play ransomwa…

1
Server functions don't exist with Jack Herrington 21:20

4d ago21:20

21:20

Jack Herrington, podcaster, software engineer, writer and YouTuber, joins the pod to uncover the truth behind server functions and why they don’t actually exist in the web platform. We dive into the magic behind frameworks like Next.js, TanStack Start, and Remix, breaking down how server functions work, what they simplify, what they hide, and what …

1
Appetite for tracking: A feast on private data. 37:00

2h ago37:00

37:00

Researchers uncover a major privacy violation involving tracking scripts from Meta and Yandex. A compliance automation firm discloses a data breach. PumaBot stalks vulnerable IoT devices. The Ramnit banking trojan gets repurposed for ICS intrusions. The North Face suffers a credential stuffing attack. Kaspersky says the Black Owl team is a cyber th…

1
The Future of AI in Medicine: From Rules to Intuition | Awais Aftab, Psychiatrist and writer 53:02

5d ago53:02

53:02

OCD treatment changed my life—but it took me a decade of chasing down wrong answers to be diagnosed. In the rush to create scalable treatments, disorders like depression and OCD are squeezed into diagnostic checklists—from which the complexity of the human mind invariably leaks out. The field of psychiatry is broken, and I spoke to someone on the i…

1
Zero-day déjà vu. 42:44

1h ago42:44

42:44

Google issues an emergency patch for a Chrome zero-day. A new malware campaign uses fake DocuSign CAPTCHA pages to trick users into installing a RAT. A high-severity Splunk vulnerability allows non-admin users to access and modify critical directories. Experts warn congress that Chinese infiltrations are preparations for war. Senators look to stren…

1
PP065: A Microsegmentation Overview 33:47

7d ago33:47

33:47

Microsegmentation divides a network into boundaries or segments to provide fine-grained access control to resources within those segments. On today’s Packet Protector we talk about network and security reasons for employing microsegmentation, different methods (agents, overlays, network controls, and so on), how microsegmentation fits into a zero t…

1
AVCheck goes dark in Operation Endgame. 29:16

22h ago29:16

29:16

An international law enforcement operation dismantles AVCheck. Trump’s 2026 budget looks to cut over one thousand positions from CISA. Cyber Command’s defensive wing gains sub-unified command status. A critical vBulletin vulnerability is actively exploited. Acreed takes over Russian markets as credential theft kingpin. Qualcomm patches three active…

1
Brandon Karpf: A sailor of the 21st century. [Transitioning service member] [Career Notes] 11:27

10d ago11:27

11:27

Please enjoy this encore of Career Notes. Lieutenant in the US Navy and Skillbridge Fellow at the CyberWire, Brandon Karpf, knew he wanted to join the military at a young age. He achieved that through the US Naval Academy where he was a member of the men’s heavyweight rowing team. Commissioned as a cryptologic warfare officer, Brandon was sent to M…

1
Triofox and the key to disaster. [Research Saturday] 22:26

11d ago22:26

22:26

This week, we are joined by John Hammond, Principal Security Researcher at Huntress, who is sharing his PoC and research on "CVE-2025-30406 - Critical Gladinet CentreStack & Triofox Vulnerability Exploited In The Wild." A critical 9.0 severity vulnerability (CVE-2025-30406) in Gladinet CentreStack and Triofox is being actively exploited in the wild…

1
All systems not go. 37:05

11d ago37:05

37:05

SentinelOne suffers a global service outage. A major DDoS attack hits a Russian internet provider. U.S. banking groups urge the SEC to scrap cybersecurity disclosure rules. Australia mandates reporting of ransomware payments. Researchers uncover a new Browser-in-the-Middle (BitM) attack targeting Safari users. A Florida health system pays over $800…

1
When "out of the box" becomes "out of control." 32:08

12d ago32:08

32:08

Children’s DNA in criminal databases. ASUS routers get an unwanted houseguest. New APT41 malware uses Google Calendar for command-and-control. Interlock ransomware gang deploys new Trojan. Estonia issues arrest warrant for suspect in massive pharmacy breach. The enemy within the endpoint. New England hospitals disrupted by cyberattack. Tim Starks f…

1
Relatively new things you should know about HTML with Chris Coyier (Repeat) 40:06

11d ago40:06

40:06

In this repeat episode, Chris Coyier, co-founder of CodePen, talks about the evolving landscape of HTML heading into 2025. He delves into topics like the slow evolution of HTML compared to CSS and JavaScript, the importance of backwards compatibility, new HTML elements and pseudo-elements, and the potential of declarative shadow DOM for server-side…

1
Fingers point east. 34:47

13d ago34:47

34:47

The Czech Republic accuses Chinese state-backed hackers of cyber-espionage. CISA’s leaders head for the exits. Cybercriminals are using fake AI video generator websites to spread malware. A stealthy phishing campaign delivers the Remcos RAT via DBatLoader. A fake Bitdefender website spreads malware targeting financial data. Medusa ransomware claims…

1
GitHub CEO on the AI Coding Arms Race: One Agent, 150M+ Devs 30:30

12d ago30:30

30:30

GitHub Copilot has 15 million users—more than Cursor and Windsurf combined. So why does it feel like they're losing the AI coding race? Last week at Microsoft Build, I interviewed the CEO of GitHub Thomas Dohmke to find out. I wanted to know: Is their huge existing user base a blessing or a curse? And will their latest launch—an autonomous coding a…

1
BEAR-ly washed and dangerous. 35:43

14d ago35:43

35:43

“Laundry Bear” airs dirty cyber linen in the Netherlands. AI coding agents are tricked by malicious prompts in a Github MCP vulnerability.Tenable patches critical flaws in Network Monitor on Windows. MathWorks confirms ransomware behind MATLAB outage. Feds audit NVD over vulnerability backlog. FBI warns law firms of evolving Silent Ransom Group tac…

1
PP064: How Aviatrix Tackles Multi-Cloud Security Challenges (Sponsored) 42:51

15d ago42:51

42:51

Aviatrix is a cloud network security company that helps you secure connectivity to and among public and private clouds. On today’s Packet Protector, sponsored by Aviatrix, we get details on how Aviatrix works, and dive into a new feature called the Secure Network Supervisor Agent. This tool uses AI to help you monitor and troubleshoot... Read more …

1
AWS in Orbit: Automated Satellite Management. [T-Minus Space] 22:38

16d ago22:38

22:38

While our team is observing Memorial Day in the United States, please enjoy this episode from our team from T-Minus Space Daily recorded recently at Space Symposium. You can learn more about AWS in Orbit at space.n2k.com/aws. Our guests on this episode are Dax Garner, CTO at Cognitive Space and Ed Meletyan, AWS Sr Solutions Architect. Remember to l…

1
Hugh Thompson on Building the RSA Conference [Afternoon Cyber Tea] 37:34

16d ago37:34

37:34

While our team is observing Memorial Day in the United States, please enjoy this episode from the N2K CyberWire network partner, Microsoft Security. You can hear new episodes of Ann Johnson's Afternoon Cyber Tea podcast every other Tuesday. Dr. Hugh Thompson, Executive Chairman of RSA Conference and Managing Partner at Crosspoint Capital joins Ann …

1
Pattie Dillon: Take the leap. [Anti-fraud] [Career Notes] 9:06

17d ago9:06

9:06

Please enjoy this encore of Career Notes. Product Manager in Anti-Fraud Solutions at SpyCloud, Pattie Dillon shares her journey from raising her family to specializing in the anti-fraud space. Upon reentering the workforce, Pattie worked on identity verification and developed a system with privacy concerns in mind. She moved to work in gift cards a…

1
Purple teaming in the modern enterprise. [CyberWire-X] 26:30

17d ago26:30

26:30

In large enterprise software companies, Red and Blue Teams collaborate through Purple Teaming to proactively detect, respond to, and mitigate advanced threats. In this episode of CyberWire-X, N2K's Dave Bittner is joined by Adobe’s Justin Tiplitsky, Director of Red Team and Ivan Koshkin, Senior Detection Engineer to discuss how their teams work tog…

1
Pandas with a purpose. [Research Saturday] 20:20

18d ago20:20

20:20

This week, we are joined by Deepen Desai, Zscaler's Chief Security Officer and EVP of Cyber and AI Engineering, taking a dive deep into Mustang Panda’s latest campaign. Zscaler ThreatLabz uncovered new tools used by Mustang Panda, including the backdoors TONEINS, TONESHELL, PUBLOAD, and the proxy tool StarLoader, all delivered via phishing. They al…

1
When malware masters meet their match. 39:41

18d ago39:41

39:41

Operation Endgame dismantles cybercriminal infrastructure. DOGE’s use of the Grok AI chatbot raises ethical and privacy concerns. Malware on the npm registry uses malicious packages to quietly gather intelligence on developer environments. Researchers link Careto malware to the Spanish government. Exploring proactive operations via letters of marqu…

1
Lights out for Lumma. 32:29

19d ago32:29

32:29

A joint operation takes down Lumma infrastructure. The FTC finalizes a security settlement with GoDaddy. The Telemessage breach compromised far more U.S. officials than initially known. Twin hackers allegedly breach a major federal software provider from the inside. U.S. telecom providers fail to notify the Senate when law enforcement agencies requ…

1
The design of web design with Miriam Suzanne 33:22

18d ago33:22

33:22

Miriam Suzanne, web developer, artist, and co-founder of OddBird, talks about the philosophy and evolution of web design. We explore CSS origins, the cascade, accessibility, and how the balance between user control and brand expression defines the spirit of the web. Links Website: https://www.miriamsuzanne.com Mastodon: https://front-end.social/@mi…

1
Bear in the network. 40:40

20d ago40:40

40:40

A joint advisory warns of Fancy Bear targeting Western logistics and technology firms. A nonprofit hospital network in Ohio suffers a disruptive ransomware attack. The Consumer Financial Protection Bureau (CFPB) drops plans to subject data brokers to tighter regulations. KrebsOnSecurity and Google block a record breaking DDoS attack. A phishing cam…

1
Kevin Scott on The Future of Programming, AI Agents, and Microsoft’s Big Bet on the Agentic Web 28:02

21d ago28:02

28:02

I interviewed Microsoft CTO Kevin Scott about the future of agents and software engineering for another special edition of AI & I. With 41 years of programming behind him, Kevin has lived through nearly every big shift in modern software development. Here’s his clear-eyed take on what’s changing with AI, and how we can navigate what’s next: The rea…

1
PP063: Wi-Fi Security and AI in the WLAN at Mobility Field Day 52:57

21d ago52:57

52:57

Wireless security takes center stage in this episode of Packet Protector. Jennifer Minella and guests discuss “secure by default” efforts by WLAN vendors; the current state of PSK, SAE, and WPA3; NAC and zero trust; more WLAN vendors adding AI to their products (or at least their messaging); and more. Jennifer is joined by Jonathan... Read more »…

1
The Take It Down Act walks a fine line. 35:13

21d ago35:13

35:13

President Trump signs the Take It Down Act into law. A UK grocer logistics firm gets hit by ransomware. Researchers discover trojanized versions of the KeePass password manager. Researchers from CISA and NIST promote a new metric to better predict actively exploited software flaws. A new campaign uses SEO poisoning to deliver Bumblebee malware. A s…

1
Redacted realities: Inside the MoJ hack. 33:20

22d ago33:20

33:20

The UK’s Ministry of Justice suffers a major breach. Mozilla patches two critical JavaScript engine flaws in Firefox. Over 200,000 patients of a Georgia-based health clinic see their sensitive data exposed. Researchers track increased malicious targeting of iOS devices. A popular printer brand serves up malware. PupkinStealer targets Windows system…

1
Dave Bittner: From puppet shows to podcasts. [Media] [Career Notes] 10:47

24d ago10:47

10:47

Please enjoy this encore of Career Notes. Host of the CyberWire Podcast, Dave Bittner, wanted to work with the Muppets, so naturally he landed in cybersecurity. Dave and his Cookie Monster puppet spent much of his childhood putting on shows for his parents friends. During one of those performances, he was discovered and got his start at the local P…

1
Leveling up their credential phishing tactics. [Research Saturday] 20:46

25d ago20:46

20:46

This week, Dave speaks with Max Gannon of Cofense Intelligence to dive into his team's research on "The Rise of Precision-Validated Credential Theft: A New Challenge for Defenders." Threat actors continuously develop new tactics, techniques, and procedures (TTPs) to bypass existing defenses. When defenders identify these methods and implement count…

1
Preparing for the cyber battlespace. 40:21

25d ago40:21

40:21

NATO hosts the world’s largest cyber defense exercise. The DOJ charges a dozen people in a racketeering conspiracy involving the theft of over $230 million in cryptocurrency. Japan has enacted a new Active Cyberdefense Law. Lawmakers push to reauthorize the Cybersecurity Information Sharing Act. Two critical Ivanti Endpoint Manager Mobile vulnerabi…

1
OpenAI Launches Codex: An Autonomous Programming Agent 42:39

25d ago42:39

42:39

OpenAI just launched Codex, a brand-new coding agent that can build features and fix bugs autonomously. We’ve been testing it at Every for a few days, and I’m impressed. I invited Alexander Embiricos, a member of the OpenAI product staff responsible for Codex, to demo the agent live on a special edition of AI & I. We talk through: What Codex is and…

1
Bypassing Bitlocker encryption. 39:08

26d ago39:08

39:08

Google issues an emergency patch for a high-severity Chrome browser flaw. Researchers bypass BitLocker encryption in minutes. A massive Chinese-language black market has shut down. The CFPB cancels plans to curb the sale of personal information by data brokers. A cyberespionage campaign called Operation RoundPress targets vulnerable webmail servers…

1
RedwoodSDK with Peter Pistorius 33:28

27d ago33:28

33:28

Peter Pistorius, co-creator of RedwoodJS, talks about the evolution from RedwoodJS GraphQL to the new Redwood SDK, a React framework built for Cloudflare. They dive deep into serverless architecture, React Server Components, durable objects, AI-assisted development, and the challenges of modern deployment and hosting. Learn how Redwood SDK is empow…

1
Get to patching: Patch Tuesday updates. 38:15

27d ago38:15

38:15

A busy Patch Tuesday. Investigators discover undocumented communications devices inside Chinese-made power inverters. A newly discovered Branch Privilege Injection flaw affects Intel CPUs. A UK retailer may claim up to £100mn from its cyber insurers after a major cyberattack. A Kosovo national has been extradited to the U.S. for allegedly running a…

1
The $10B Hedge Fund CEO Who’s Betting Big on AI | Will England, Walleye Capital 1:07:27

27d ago1:07:27

1:07:27

Will England just pivoted his $10B AUM hedge fund to go all in on AI with a firm-wide email: “I wrote this email using ChatGPT—you should too. As a hedge fund, we should be ashamed to leave money on the table by ignoring AI.” It’s working: 75% of his 400-person team are using ChatGPT daily—and Walleye is well on its way to transforming into an AI-f…

1
Jamming in a ban on state AI regulation. 32:51

28d ago32:51

32:51

House Republicans look to limit state regulation of AI. Spain investigates potential cybersecurity weak links in the April 28 power grid collapse. A major security flaw has been found in ASUS mainboards’ automatic update system. A new macOS info-stealing malware uses PyInstaller to evade detection. The U.S. charges 14 North Korean nationals in a re…

1
PP062: Hunting for Host Security and Performance Issues with Stratoshark 33:45

28d ago33:45

33:45

Stratoshark is a new tool from the Wireshark Foundation that analyzes system calls on a host. Network, security, and application teams can use Stratoshark to diagnose performance issues and investigate behavior that may indicate malware or other compromises of the host. On today’s Packet Protector we talk with Gerald Combs of the Wireshark Foundati…

1
No quick fix for a ClickFix attack. 32:26

29d ago32:26

32:26

A major student engagement platform falls victim to the ClickFix social engineering attack. Google settles privacy allegations with Texas for over one point three billion dollars. Stores across the UK face empty shelves due to an ongoing cyberattack. Ascension Health reports that over 437,000 patients were affected by a third-party data breach. A c…

1
Limor Kessem: Be an upstander. [Security Advisor] [Career Notes] 8:27

1M ago8:27

8:27

Enjoy this encore of Career Notes. Executive Security Advisor at IBM Security Limor Kessem says she started her cybersecurity career by pure chance. Limor made a change from her childhood dream of being a doctor and came into cybersecurity with her passion, investment, discipline, and perseverance. Limor talks about how we must tighten our core sec…

1
Beyond cyber: Securing the next horizon. [Special Edition] 1:03:13

1M ago1:03:13

1:03:13

Cybersecurity is no longer confined to the digital world or just a technical challenge, it’s a global imperative. The NightDragon Innovation Summit convened a group of industry leaders to discuss how public and private entities can work together to address emerging threats and harness the power of AI, cybersecurity, and innovation to strengthen nat…

1
Hijacking wallets with malicious patches. [Research Saturday] 20:09

1M ago20:09

20:09

This week, we are joined by Lucija Valentić, Software Threat Researcher from ReversingLabs, who is discussing "Atomic and Exodus crypto wallets targeted in malicious npm campaign." Threat actors have launched a malicious npm campaign targeting Atomic and Exodus crypto wallets by distributing a fake package called "pdf-to-office," which secretly pat…

1
Scrutinizing the security of messaging apps continues. 32:26

1M ago32:26

32:26

The messaging app used by CBP and the White House faces continued security scrutiny. Hacktivists breach the airline used for U.S. deportation flights. The FBI warns that threat actors are exploiting outdated, unsupported routers. Education giant Pearson confirms a cyberattack. Researchers report exploitation of Windows Remote Management (WinRM) for…

Podcasts Worth a Listen

Wired In Software Podcasts

Podcasts Worth a Listen

Quick Reference Guide