Infosec Blogs/Podcasts
This section of the web site provides a list of security blog and podcast resources that are based in or around the Northern Virginia (NoVA) area for the infosec professional. If there are any mistakes or information we should add, please let us know through our Contact Us form. For recent posts regarding this information, see the Recent Posts area below. Look for a complete list of all related posts on the Infosec Blogs/Podcasts category page.
Northern Virginia Infosec Blogs/Podcasts
Blogs
- TaoSecurity: Richard Bejtlich’s main blog.
- The Guerilla CISO: Michael Smith describes his blog as “The concept behind The Guerilla CISO is a bit of BOFH, a bit of ranting, and a bit of “do it this way because it works”. In other words, exactly what I would give somebody in person, and pretty typical blog fare.”
- Carnal0wnage Blog: Chris Gates blogs about Windows and web security. Chris has also been a presenter at security conferences (e.g., ChicagoCon) in the past.
Podcasts
- Blue Box: The VoIP Security Podcast
- Cyberspeak Podcast: Hosted by two formal federal agents who investigated computer crime, this podcast covers computer security, crime, and forensics. There’s always a slight undertone of something about our local area in Bret and Ovie’s banter - whether it be about traffic, local communities, or weather.
Other Security Blogs/Podcasts
Blogs
- Dark Reading: The Business of IT Security
- Darknet: Ethical Hacking, Penetration Testing, & Computer Security
- F-Secure Weblog: News from the Lab. For more information on F-Secure, see its description on our Infosec Organizations page.
- Network Security Blog: The views of one man (i.e., Martin McKeay) on security, privacy, and anything else that catches his attention.
- Prefessional Security Testers: TBD
- SANS Internet Storm Center: The ISC was created in 2001 following the successful detection, analysis, and widespread warning of the Li0n worm. Today, the ISC provides a free analysis and warning service to thousands of Internet users and organizations, and is actively working with Internet Service Providers to fight back against the most malicious attackers. For more information on SANS, see its description on our Infosec Organizations page.
- Schneier on Security: A blog covering security and security technology. Bruce Schneier is an internationally renowned security technologist and author. Described by The Economist as a “security guru,” he is best known as a refreshingly candid and lucid security critic and commentator. When people want to know how security really works, they turn to Schneier.
- SecurityFocus: Although not technically a blog, this site provides a stream of security information through its News, Infocus, Columnists, Mailing Lists (e.g., BugTrack), Vulnerabilities, Jobs, and Tools areas. For more information on SecurityFocus, see its description on our Infosec Organizations page.
- The Register - Security: Security news and views for the world. For more information on The Register, see its description on our Infosec Organizations page.
Podcasts
- Crypto-Gram Security Podcast: This is the audio version of Bruce Schneier’s monthly Crypto-Gram Newsletter on security. Dan Henage is responsible for the creation of this podcast. The official site of the Crypto-Gram Newsletter is here.
- Network Security Podcast: One of the original security podcasts by Martin McKeay. Rich Mogull joins Martin for a look at the latest computer security news.
- PaulDotCom Security Weekly: Paul Asadoorian and Larry Pesce take an entertaining look into the latest security news and delve into some technical discussions on a weekly basis. Here is their mission: “PaulDotCom Security weekly’s mission is to provide free content within the subject matter of IT security news, vulnerabilities, hacking, and research. We strive to use new technologies to reach a wider audience across the globe to teach people how to grow, learn, and be security ninjas. The mixture of technical content and entertainment will continue to set a new standard for podcasting and Internet TV.” Beyond the podcast they periodically put out videos and have been expanding into monthly webcast summaries. They also run some local Rhode Island training events and teach for SANS.
- Security Now!: Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of Spinrite and ShieldsUP, discusses the hot topics in security today with Leo Laporte. The podcast format alternates between technical topics and listener feedback each week.
- Hak.5: Hak.5 is a video podcast for the hacker, modder and do-it-yourselfer. Hosted by Darren Kitchen and Wess Tobler on the 5th of each month, the show is a hybrid of technology and geek humor.
Recent Posts
- New Infosec Blogs/Podcasts Resource Section
For a complete list of all related posts see the Infosec Blogs/Podcasts category page.

