Best Code To Cloud Inc Podcasts (2025)

1
Juneteenth: Reflecting, belonging, and owning your seat at the table. [Special Edition] 35:26

Play Pause

a day ago35:26

35:26

We put together an open conversation between our podcast hosts, CyberWire Daily's Dave Bittner, T-Minus Space Daily’s Maria Varmazis, and CISO Perspectives podcast’s Kim Jones. Their conversation goes deeper than just the historical significance of Juneteenth, diving into candid conversations on allyship, representation, and the enduring value of d…

1
Typhoon on the line. 28:35

a day ago28:35

28:35

Viasat confirms it was breached by Salt Typhoon. Microsoft’s June 2025 security update giveth, and Microsoft’s June 2025 security update taketh away. Local privilege escalation flaws grant root access on major Linux distributions. BeyondTrust patches a critical remote code execution flaw. SMS low cost routing exposes users to serious risks. Erie In…

1
Can’t DOGE the inquiry. 33:09

2 days ago33:09

33:09

A House oversight committee requests DOGE documents from Microsoft. Predatory Sparrow claims a cyberattack on an Iranian bank. Microsoft says data that happens in Europe will stay in Europe. A complex malware campaign is using heavily obfuscated Visual Basic files to deploy RATs. A widely used CMS platform suffers potential RCE bugs. North Korea’s …

1
Darknet drug marketplace closed for business. 37:24

3 days ago37:24

37:24

International law enforcement takes down a darknet drug marketplace. The Washington Post is investigating a cyberattack targeting several journalists' email accounts. Anubis ransomware adds destructive capabilities. The GrayAlpha threat group uses fake browser update pages to deliver advanced malware. Researchers uncover a stealthy malware campaign…

1
Bob Ward: SQL Server 2025 - Episode 354 42:07

4 days ago42:07

42:07

Bob Ward is a Principal Architect for the Microsoft Azure Data team, which owns the development for Microsoft SQL Edge to Cloud. Bob has worked for Microsoft for 31-plus years on every version of SQL Server shipped, from OS/2 1.1 to SQL Server 2025, including Azure SQL. Bob is a well-known speaker on SQL Server, Azure SQL, AI, and Microsoft Fabric,…

1
Mark Nunnikhoven: Providing clarity about security. [Cloud strategy] 8:53

5 days ago8:53

8:53

Please enjoy this encore of Career Notes. Distinguished Cloud Strategist at Lacework, Mark Nunnikhoven, has gone from taking technology to its limits for his own understanding to providing clarity about security for others. Mark fell in love with his Commodore 128 and once he realized he could bend the machine to his will, it set him on the path to…

1
Hiding in plain sight with vibe coding. 21:49

6 days ago21:49

21:49

This week, Dave is joined by ⁠Ziv Karliner⁠, ⁠Pillar Security⁠’s Co-Founder and CTO, sharing details on their work on "New Vulnerability in GitHub Copilot and Cursor: How Hackers Can Weaponize Code Agents." Vibe Coding - where developers use AI assistants like GitHub Copilot and Cursor to generate code almost instantly - has become central to how e…

1
Cloudflare’s cloudy day resolved. 29:03

6 days ago29:03

29:03

Cloudflare says yesterday’s widespread outage was not caused by a cyberattack. Predator mobile spyware remains highly active. Microsoft is investigating ongoing Microsoft 365 authentication services issues. An account takeover campaign targets Entra ID users by abusing a popular pen testing tool. Palo Alto Networks documents a JavaScript obfuscatio…

1
Scam operations disrupted across Asia. 34:04

7 days ago34:04

34:04

Interpol’s Operation Secure dismantles a major cybercrime network, and Singapore takes down scam centers. GitLab patches multiple vulnerabilities in its DevSecOps platform. Researchers unveil a covert method for exfiltrating data using smartwatches. EchoLeak allows for data exfiltration from Microsoft Copilot. Journalists are confirmed targets of P…

1
Ghost students “haunting” online colleges. 37:06

8 days ago37:06

37:06

Patch Tuesday. Mozilla patches two critical FireFox security flaws. A critical flaw in Salesforce OmniStudio exposes sensitive customer data stored in plain text. The Badbox botnet continues to evolve. AI-powered “ghost students” enrolling in online college courses to steal government funds. Hackers steal nearly 300,000 vehicle crash reports from t…

1
Jedai tricks, human risks. 33:59

9 days ago33:59

33:59

An unsecured Chroma database exposes personal information of Canva Creators. A researcher brute-forces Google phone numbers. Five zero-day vulnerabilities in Salesforce Industry Cloud are uncovered. Librarian Ghouls target Russian organizations with stealthy malware. SAP releases multiple security patches including a critical fix for a NetWeaver bu…

1
White House reboots cybersecurity priorities. 36:12

10 days ago36:12

36:12

A new White House executive Order overhauls U.S. cybersecurity policy. The EU updates its “cybersecurity blueprint”. The Pentagon’s inspector general investigates Defense Secretary Hegseth’s Signal messages. Chinese hackers target U.S. smartphones. A new Mirai botnet variant drops malware on vulnerable DVRs. 17 popular Gluestack packages on NPM hav…

1
Push and Pray: From Docker to Dagger with Solomon Hykes🎙️ 1:11:22

11 days ago1:11:22

1:11:22

In this episode of the Code to Cloud podcast, we’re joined by legendary developer and founder Solomon Hykes, the mind behind Docker and now Dagger. Solomon shares his origin story, the challenges of building a revolutionary platform, and what it was like watching Docker shape the containerization movement. We talk about the “push and pray” days of …

1
Michael Washington: The Nature Of Data - Episode 353 41:33

11 days ago41:33

41:33

Michael is an ASP.NET and C# programmer who has extensive knowledge in process improvement, AI and Large Language Models, and student information systems. He is also the founder of the following websites, BlazorData.net, AIStoryBuilders.com, and BlazorHelpWebsite.com — fantastic resources that help empower developers. Michael resides in Los Angeles…

1
Ell Marquez: It's okay to be new. [Linux] [Career Notes] 9:52

12 days ago9:52

9:52

Please enjoy this encore of Career Notes. Linux and Security Advocate at Intezer Ell Marquez shares her journey from the family ranch to security. Needing a life change due to a bunch of circumstances that had occurred that left her almost homeless, Ell found out about a six week Linux boot camp that took her down the path toward technology. She fe…

1
A new stealer hiding behind AI hype. [Research Saturday] 25:08

13 days ago25:08

25:08

This week, we are joined by Michael Gorelik, Chief Technology Officer from Morphisec, discussing their work on "New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms." A new threat dubbed Noodlophile Stealer is exploiting the popularity of AI-powered content tools by posing as fake AI video generation platforms, luring users in…

1
Beware of BADBOX. 33:20

13 days ago33:20

33:20

The DOJ files to seize over $7 million linked to illegal North Korean IT workers. The FBI warns of BADBOX 2.0 malware targeting IoT devices. Researchers uncover a major security flaw in Chrome extensions. ESET uncovers Iranian hackers targeting Kurdish and Iraqi government officials. Hitachi Energy, Acronis and Cisco patch critical vulnerabilities.…

1
China’s largest data leak exposes billions. 33:43

14 days ago33:43

33:43

Researchers discover what may be China’s largest ever data leak. CrowdStrike cooperates with federal authorities following last year’s major software bug. A researcher discovers over half a million sensitive insurance documents exposed online. Microsoft offers free cybersecurity programs to European governments. The FBI chronicles the Play ransomwa…

1
Appetite for tracking: A feast on private data. 37:00

15 days ago37:00

37:00

Researchers uncover a major privacy violation involving tracking scripts from Meta and Yandex. A compliance automation firm discloses a data breach. PumaBot stalks vulnerable IoT devices. The Ramnit banking trojan gets repurposed for ICS intrusions. The North Face suffers a credential stuffing attack. Kaspersky says the Black Owl team is a cyber th…

1
Zero-day déjà vu. 42:44

16 days ago42:44

42:44

Google issues an emergency patch for a Chrome zero-day. A new malware campaign uses fake DocuSign CAPTCHA pages to trick users into installing a RAT. A high-severity Splunk vulnerability allows non-admin users to access and modify critical directories. Experts warn congress that Chinese infiltrations are preparations for war. Senators look to stren…

1
AVCheck goes dark in Operation Endgame. 29:16

17 days ago29:16

29:16

An international law enforcement operation dismantles AVCheck. Trump’s 2026 budget looks to cut over one thousand positions from CISA. Cyber Command’s defensive wing gains sub-unified command status. A critical vBulletin vulnerability is actively exploited. Acreed takes over Russian markets as credential theft kingpin. Qualcomm patches three active…

1
Rockford Lhotka: Software Architecture & Strategy - Episode 352 45:19

18 days ago45:19

45:19

As the Vice President of Strategy at Xebia Microsoft Services, Rocky leads the vision and direction of the company’s software development solutions and services. He brings extensive expertise in framework design and implementation, distributed systems architecture, and cloud and container technologies, helping clients achieve their business goals a…

1
Brandon Karpf: A sailor of the 21st century. [Transitioning service member] [Career Notes] 11:27

19 days ago11:27

11:27

Please enjoy this encore of Career Notes. Lieutenant in the US Navy and Skillbridge Fellow at the CyberWire, Brandon Karpf, knew he wanted to join the military at a young age. He achieved that through the US Naval Academy where he was a member of the men’s heavyweight rowing team. Commissioned as a cryptologic warfare officer, Brandon was sent to M…

1
Triofox and the key to disaster. [Research Saturday] 22:26

20 days ago22:26

22:26

This week, we are joined by John Hammond, Principal Security Researcher at Huntress, who is sharing his PoC and research on "CVE-2025-30406 - Critical Gladinet CentreStack & Triofox Vulnerability Exploited In The Wild." A critical 9.0 severity vulnerability (CVE-2025-30406) in Gladinet CentreStack and Triofox is being actively exploited in the wild…

1
All systems not go. 37:05

20 days ago37:05

37:05

SentinelOne suffers a global service outage. A major DDoS attack hits a Russian internet provider. U.S. banking groups urge the SEC to scrap cybersecurity disclosure rules. Australia mandates reporting of ransomware payments. Researchers uncover a new Browser-in-the-Middle (BitM) attack targeting Safari users. A Florida health system pays over $800…

1
When "out of the box" becomes "out of control." 32:08

21 days ago32:08

32:08

Children’s DNA in criminal databases. ASUS routers get an unwanted houseguest. New APT41 malware uses Google Calendar for command-and-control. Interlock ransomware gang deploys new Trojan. Estonia issues arrest warrant for suspect in massive pharmacy breach. The enemy within the endpoint. New England hospitals disrupted by cyberattack. Tim Starks f…

1
Fingers point east. 34:47

22 days ago34:47

34:47

The Czech Republic accuses Chinese state-backed hackers of cyber-espionage. CISA’s leaders head for the exits. Cybercriminals are using fake AI video generator websites to spread malware. A stealthy phishing campaign delivers the Remcos RAT via DBatLoader. A fake Bitdefender website spreads malware targeting financial data. Medusa ransomware claims…

1
BEAR-ly washed and dangerous. 35:43

23 days ago35:43

35:43

“Laundry Bear” airs dirty cyber linen in the Netherlands. AI coding agents are tricked by malicious prompts in a Github MCP vulnerability.Tenable patches critical flaws in Network Monitor on Windows. MathWorks confirms ransomware behind MATLAB outage. Feds audit NVD over vulnerability backlog. FBI warns law firms of evolving Silent Ransom Group tac…

1
KubeBuddy, Can You Deploy? – Simplifying Kubernetes with The Pixel Robot🎙️ 45:32

25 days ago45:32

45:32

In this episode of Code to Cloud, host Kevin Evans is joined by none other than Richard Hooper, a.k.a. The Pixel Robot! 🚀 We dive into Richard’s latest CNCF-nominated project, KubeBuddy — a tool designed to simplify production Kubernetes deployments and make life easier for platform engineers everywhere. Richard also shares insights into KRO(kro.ru…

1
Scott Hunter: AI-driven development - Episode 351 40:22

25 days ago40:22

40:22

Scott is the Vice President of Product for Azure Developer Experience. He builds all the .NET tools for Azure. Topics of Discussion: [1:49] Scott’s Microsoft journey and .NET evolution. [3:39] AI's transformative impact on software development. [6:08] Using ChatGPT and Deep Research. [8:41] Software Engineering Agent (Padawan). [11:20] Model Contex…

1
AWS in Orbit: Automated Satellite Management. [T-Minus Space] 22:38

25 days ago22:38

22:38

While our team is observing Memorial Day in the United States, please enjoy this episode from our team from T-Minus Space Daily recorded recently at Space Symposium. You can learn more about AWS in Orbit at space.n2k.com/aws. Our guests on this episode are Dax Garner, CTO at Cognitive Space and Ed Meletyan, AWS Sr Solutions Architect. Remember to l…

1
Hugh Thompson on Building the RSA Conference [Afternoon Cyber Tea] 37:34

25 days ago37:34

37:34

While our team is observing Memorial Day in the United States, please enjoy this episode from the N2K CyberWire network partner, Microsoft Security. You can hear new episodes of Ann Johnson's Afternoon Cyber Tea podcast every other Tuesday. Dr. Hugh Thompson, Executive Chairman of RSA Conference and Managing Partner at Crosspoint Capital joins Ann …

1
Pattie Dillon: Take the leap. [Anti-fraud] [Career Notes] 9:06

26 days ago9:06

9:06

Please enjoy this encore of Career Notes. Product Manager in Anti-Fraud Solutions at SpyCloud, Pattie Dillon shares her journey from raising her family to specializing in the anti-fraud space. Upon reentering the workforce, Pattie worked on identity verification and developed a system with privacy concerns in mind. She moved to work in gift cards a…

1
Purple teaming in the modern enterprise. [CyberWire-X] 26:30

26 days ago26:30

26:30

In large enterprise software companies, Red and Blue Teams collaborate through Purple Teaming to proactively detect, respond to, and mitigate advanced threats. In this episode of CyberWire-X, N2K's Dave Bittner is joined by Adobe’s Justin Tiplitsky, Director of Red Team and Ivan Koshkin, Senior Detection Engineer to discuss how their teams work tog…

1
Pandas with a purpose. [Research Saturday] 20:20

27 days ago20:20

20:20

This week, we are joined by Deepen Desai, Zscaler's Chief Security Officer and EVP of Cyber and AI Engineering, taking a dive deep into Mustang Panda’s latest campaign. Zscaler ThreatLabz uncovered new tools used by Mustang Panda, including the backdoors TONEINS, TONESHELL, PUBLOAD, and the proxy tool StarLoader, all delivered via phishing. They al…

1
When malware masters meet their match. 39:41

27 days ago39:41

39:41

Operation Endgame dismantles cybercriminal infrastructure. DOGE’s use of the Grok AI chatbot raises ethical and privacy concerns. Malware on the npm registry uses malicious packages to quietly gather intelligence on developer environments. Researchers link Careto malware to the Spanish government. Exploring proactive operations via letters of marqu…

1
Lights out for Lumma. 32:29

28 days ago32:29

32:29

A joint operation takes down Lumma infrastructure. The FTC finalizes a security settlement with GoDaddy. The Telemessage breach compromised far more U.S. officials than initially known. Twin hackers allegedly breach a major federal software provider from the inside. U.S. telecom providers fail to notify the Senate when law enforcement agencies requ…

1
Bear in the network. 40:40

29 days ago40:40

40:40

A joint advisory warns of Fancy Bear targeting Western logistics and technology firms. A nonprofit hospital network in Ohio suffers a disruptive ransomware attack. The Consumer Financial Protection Bureau (CFPB) drops plans to subject data brokers to tighter regulations. KrebsOnSecurity and Google block a record breaking DDoS attack. A phishing cam…

1
Bonus Episode: “Push and Pray — The DevOps Ballad You Didn’t Know You Needed” 🎧 3:10

29 days ago3:10

3:10

In this surprise bonus episode, we dive into the heart (and heartbreak) of modern DevOps culture—through the soulful sounds of our AI-generated anthem: Push and Pray. Connect With Us From late-night deployments to the sacred refresh ritual, this episode captures the chaos, comedy, and camaraderie of cloud-native life. You’ll hear: The story behind …

1
The Take It Down Act walks a fine line. 35:13

Play Pause

about a year ago35:13

35:13

President Trump signs the Take It Down Act into law. A UK grocer logistics firm gets hit by ransomware. Researchers discover trojanized versions of the KeePass password manager. Researchers from CISA and NIST promote a new metric to better predict actively exploited software flaws. A new campaign uses SEO poisoning to deliver Bumblebee malware. A s…

1
Redacted realities: Inside the MoJ hack. 33:20

Play Pause

about a year ago33:20

33:20

The UK’s Ministry of Justice suffers a major breach. Mozilla patches two critical JavaScript engine flaws in Firefox. Over 200,000 patients of a Georgia-based health clinic see their sensitive data exposed. Researchers track increased malicious targeting of iOS devices. A popular printer brand serves up malware. PupkinStealer targets Windows system…

1
Scott Forsyth: How Kitchen Copilot uses AI - Episode 350 36:08

Play Pause

about a year ago36:08

36:08

Scott has spent over 25 years in the IT field, working in disciplines such as systems architecture, software development, team growth, and entrepreneurship. He was a Microsoft MVP for 12 years in ASP.NET and IIS. He’s co-authored two books (IIS 7 and IIS 8 Professional), is a Pluralsight author, and has spoken at various conferences, code camps, an…

1
Dave Bittner: From puppet shows to podcasts. [Media] [Career Notes] 10:47

Play Pause

about a year ago10:47

10:47

Please enjoy this encore of Career Notes. Host of the CyberWire Podcast, Dave Bittner, wanted to work with the Muppets, so naturally he landed in cybersecurity. Dave and his Cookie Monster puppet spent much of his childhood putting on shows for his parents friends. During one of those performances, he was discovered and got his start at the local P…

1
Leveling up their credential phishing tactics. [Research Saturday] 20:46

Play Pause

about a year ago20:46

20:46

This week, Dave speaks with Max Gannon of Cofense Intelligence to dive into his team's research on "The Rise of Precision-Validated Credential Theft: A New Challenge for Defenders." Threat actors continuously develop new tactics, techniques, and procedures (TTPs) to bypass existing defenses. When defenders identify these methods and implement count…

1
Preparing for the cyber battlespace. 40:21

Play Pause

about a year ago40:21

40:21

NATO hosts the world’s largest cyber defense exercise. The DOJ charges a dozen people in a racketeering conspiracy involving the theft of over $230 million in cryptocurrency. Japan has enacted a new Active Cyberdefense Law. Lawmakers push to reauthorize the Cybersecurity Information Sharing Act. Two critical Ivanti Endpoint Manager Mobile vulnerabi…