Jack Rhysider (host + producer)
Long-form storytelling. 60-90 min episodes. Released bi-weekly. 150+ episodes.
Narrative cybersecurity stories — Cambridge Analytica, Stuxnet, NotPetya, the rise of LulzSec, the disappearance of Mt. Gox. Rhysider's production is closer to This American Life than typical tech podcasts. If you can only listen to one cyber podcast, this is it.
Why subscribe: Single best 'feel of the field' podcast in cybersecurity. The narrative quality is unmatched in the category.
Patrick Gray (host) + Adam Boileau (regular co-host)
Weekly news + interviews. ~60-80 min. Pat is Australian.
The definitive weekly cybersecurity news podcast. Pat's editorial voice on threat-intel and policy is widely respected. Adam Boileau is technical, calm, and consistently sharp. Interviews are with named researchers + policymakers.
Why subscribe: Your weekly anchor for staying current on cyber news. Most well-known cyber pros listen to this.
Dave Bittner + Joe Carrigan (CyberWire team)
Weekly. ~30-45 min. Caller-Q+A format with weekly story analysis.
Social engineering + phishing + scam analysis. Less technical than Risky Business; more focused on the human-attacker dynamic. Useful for AppSec + security-awareness practitioners.
Why subscribe: Best podcast on social engineering specifically. Caller stories + weekly scam-of-the-week analysis.
Graham Cluley + Carole Theriault
Weekly. ~50-65 min. British, dryly funny.
Cybersecurity news with personality. Cluley is a long-standing security commentator; Carole has industry background. They explain technical events for general audience without dumbing down.
Why subscribe: Best balance of accessible-to-non-pro + interesting-to-pro. Reliable weekly listen.
Dina Temple-Raston (host) + Recorded Future team
Weekly. ~25-35 min. National-security framing.
Cyber + intelligence + national-security stories with NPR-quality production. Temple-Raston was NPR national-security correspondent for 13 years before this. Editorial voice tilts toward foreign-policy implications.
Why subscribe: Best podcast for the cyber-policy angle. Reads like NPR did a cyber spinoff.
06
The Privacy, Security, and OSINT Show
Michael Bazzell (former FBI cybercrime investigator)
Variable cadence. ~45-90 min. Information-security focus.
Privacy + OSINT (open-source intelligence) + investigative methodology. Bazzell wrote the canonical Open Source Intelligence Techniques textbook. The show drifts into deep specific technique demonstrations.
Why subscribe: Best podcast on OSINT methodology. Niche but extremely deep.
07
SANS Internet Storm Center Daily Stormcast
Dr. Johannes Ullrich + ISC staff
Daily. 5-10 min. SANS Internet Storm Center curated.
Daily 5-10 minute briefing on the day's threat-intel + new CVEs + observed attacks. Curated by SANS Internet Storm Center handlers. The morning-coffee podcast for SOC + IR teams.
Why subscribe: Daily current-events for cyber pros. Best low-time-investment way to stay on top of new CVEs.
Dave Bittner + CyberWire team
Daily. 20-30 min.
Daily news roundup + occasional deeper interviews. Production value is high; less editorial opinion than Risky Business. Good for those wanting straight news.
Why subscribe: Daily anchor for cyber news without strong editorial voice. Pairs well with Risky Business weekly.
Ran Levi (host) + Cybereason team
Weekly. ~35-50 min. Narrative history.
Historical cybersecurity stories — early viruses, named hackers, big breaches. Less current-events, more 'how did we get here.' Pairs well with the /learn/cyber/timeline page on this site.
Why subscribe: Best podcast for cybersecurity history specifically. Good complement to Darknet Diaries.
David Ruiz (Malwarebytes Labs)
Bi-weekly. ~30-45 min.
Consumer-cybersecurity + privacy + ransomware focus. Less corporate/enterprise-tilted than Risky Business. Strong on the lived-experience side of cybersecurity events.
Why subscribe: Consumer angle covered better than most cyber podcasts. Useful if your work touches consumer security or privacy.