Advertise on podcast: @BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure (LS 30 · TOP 5% what is this?)Episode: Is Critical Infrastructure Ready for AI Attacks? with Booz Allen's Brad MedairyPub date: 2026-10-20Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationCan cyber defenses built around human attackers keep pace with AI? Brad Medairy, president of Booz Allen's National Cyber Practice and a McCrary Institute senior fellow, joins Frank Cilluffo to discuss what his team's testing reveals about AI's ability to conduct cyber operations and navigate industrial systems. They examine how these capabilities lower barriers for attackers, why deploying defensive AI requires trust and human accountability, and what executives should do to assess readiness. The conversation also explores active cyber defense and the need to keep essential services running through a compromise. Main topics AI-driven cyber operations Frontier model testing U.S.–China capability gaps Industrial systems at risk AI attack simulations Human oversight and accountability Deception and active defense Operating through compromise Board oversight and readiness Key quotes "Today, with an agentic attack, with an AI-enabled cyber operator that can operate at speed and scale, I think the defender does not have the advantage. It can't move at that pace." — Brad Medairy The way that we've seen models be able to rip apart these [OT] environments, understand the protocols, understand the control system, it's really phenomenal in terms of the capabilities that they provide… the risk to critical infrastructure is at an all-time high." — Brad Medairy "I don't think that we're going to defeat the threat of the future that's so transformative by just automating past operating models and approaches." — Brad Medairy "These adversary capabilities are progressing much faster than cyber defenses. And so you're gonna have to continually assess your environment, continually assess your controls, continually evolve your program." — Brad Medairy "We're inventing new operating models, we're inventing new technologies for cybersecurity. And I think now is our time to really define the future. It's going to take… really working this problem together." — Brad Medairy Resources discussed Booz Allen's Cyber Weapons Index McCrary Institute–Booz Allen joint paper: "AI-enabled threats demand mission-speed resilience – here's how to build it" McCrary Institute–Booz Allen joint paper: "Outpacing AI-enabled cyber threats: A playbook for government CISOs" About the Guest: Brad Medairy is president of Booz Allen's national cyber business, leading the development of defensive and offensive cyber solutions to address America's toughest cyber challenges. His work spans AI, machine learning, cloud innovation, and intelligence tradecraft. He leads thousands of cyber operators, security researchers, and software engineers who secure supply chains, protect critical infrastructure, and defend 5G networks, space systems, and advanced weapons platforms. His team counters sophisticated adversaries for customers including the intelligence community, U.S. Cyber Command, FBI, CISA, and the Department of War. The podcast and artwork embedded on this page are from Frank Cilluffo / McCrary Institute, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: (CS)²AI Podcast Show: Control System Cyber SecurityEpisode: 137: From Conference to Change: Asset Owners on What They Actually Did After Level ZeroPub date: 2026-10-20Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationFrom Conference to Change: Asset Owners on What They Actually Did After Level Zero Asset owners from UPS and Southern California Edison get specific about what changed after Level Zero: a talk that became a deployed AI harness, a team member who went on to NIMS certification after the tabletop, and ideas borrowed across sectors. Christian Harter, Blake Gilson, and Brian Foster debate who should attend (almost everyone), how to prepare (don't just show up), why the hallway track matters most, and why more asset owners should take the stage. They close on AI: powerful, but it needs an operator. Guests: Blake Gilson (IT Planning & Strategy Manager, ExxonMobil); Brian Foster (Grid Security – Enterprise Sr Advisor, Southern California Edison) Host / moderator: Christian Harter (BISO OT & Director of OT Security and Engineering, UPS) Chapters: 00:41 Panel introductions 02:02 What stuck from Level Zero 04:48 Bringing a team (UPS brought 16) 09:12 What actually changed afterwards 14:49 Send a group or one person? Budgets and training 19:28 Who should attend 23:12 How to prepare 24:38 The hallway track 30:11 What to preserve and grow: asset owner stories 43:19 Where AI ends and humans begin 49:40 A new class of worker Recorded at the CS²AI Online Symposium, "Level Zero: Visions & Reflections." Join us at Level Zero 2027, April 23–30 at Georgia Tech in Atlanta: pre-conference training, the Conflag Zero™ tabletop exercise, and three days of practitioner-led sessions built so you can put what you learn to work the Monday you get back. Questions: [email protected] · Sponsorship: [email protected] Produced by CS²AI (Control System Cyber Security Association International). The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)Episode: Trust Is Not a Security Control: Blast Radius and the Management PlanePub date: 2026-10-19Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationWork with Aaron: https://protectitallpod.com/work/ The book: https://protectitallpod.com/book/ This episode: https://protectitallpod.com/ep128/ The OT Security Starter Kit: https://protectitallpod.com/starter-kit/ Zero trust asks whether something should be allowed. Zach Miller asks a different question: if it is allowed, and something blows up, how far does it go? Zach is a cybersecurity engineer in Colorado Springs who came up through K-12 network support on a shoestring budget, defense contracting and managed services. On the side he runs Skip to Secure, where he publishes research on trust concentration and management-plane abuse, including his Blast Radius framework. He and Aaron trace one pattern through five years of incidents. Kaseya and SaltStack in 2020 and 2021, then Stryker in 2026: each time the management platform itself became the way in, and the authority it already held decided how far the damage went. Segmentation is the fix everyone already knows. It is still a hard sell. What you will take away Why trust is something you delegate, not a security control, and how to put a limit on it What Zach's blast radius framework measures: reach, scope crossing, standing privilege, human concentration, automation visibility and recoverability Why the same PLC with the same vulnerabilities is not the same risk on a turbine as it is on an ice machine Why attacks now look like a normal workday from a cloud address, not a foreign IP in the logs Why one any-any rule undoes 477 good ones, and why a firewall starts from deny Why you verify every piece of work an AI agent hands back, however good the prompt was In this episode 5:03 Sleeping under the conference table 8:30 The open proxy everyone borrowed 10:24 From K-12 to defense contracting 12:59 How careers really get built 16:36 Where is the puck going? 23:22 A heat map for the smoker 25:41 Verify everything the agent does 32:31 Attacks that look like a normal workday 34:33 The work laptop on the home network 39:15 Security is never done 41:39 Where the word firewall comes from 43:33 The same failure, five years apart 44:21 What blast radius measures 46:28 The turbine and the ice machine 49:43 When the right account does the wrong thing 51:53 A firewall with one any-any rule 54:08 Where to find Zach's research About the guest Zach Miller is a cybersecurity engineer based in Colorado Springs. He started as a network and switching specialist supporting K-12 education, then moved through defense contracting, consulting and managed services into cybersecurity engineering. Through Skip to Secure, his independent research and training effort, he publishes white papers on trust concentration and management-plane abuse, including the Blast Radius framework and the LOLMgmt paper on living-off-the-land management attacks. Blast Radius white paper and scoring workbook: https://github.com/ridgestoneco/blast-radius LOLMgmt white paper: https://zenodo.org/records/21255394 Zach on LinkedIn: https://www.linkedin.com/in/zacharymiller0111/ Learn more about PrOTect IT All: Work with Aaron: https://protectitallpod.com/work/ The book: https://protectitallpod.com/book/ This episode: https://protectitallpod.com/ep128/ The OT Security Starter Kit: https://protectitallpod.com/starter-kit/ YouTube: https://www.youtube.com/@PrOTectITAll Email: [email protected] X: https://twitter.com/protectitall Facebook: https://facebook.com/protectitallpodcast To be a guest or suggest a guest or episode, email [email protected]. Please leave us a review on Apple or Spotify: Apple: https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124 Spotify: https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4 The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Trust Me, It's Air-GappedEpisode: AI and OT Cybersecurity: Managing Risk Inside and Outside the PlantPub date: 2026-10-09Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationAI is a force multiplier for your workforce and for attackers. In this episode of Trust Me, It’s Air-Gapped, GrayMatter OT Cybersecurity Practice Lead Scott Christensen unpacks what industrial leaders are saying about AI and cyber risk. Scott explains how AI-powered reconnaissance lets bad actors launch attacks in minutes instead of weeks. He also covers the risks growing inside the house: well-meaning employees adopting AI tools without a plan, vendors adding undisclosed AI to their products and plant-floor data flowing to the cloud without zero trust architecture. Also discussed: Why every manufacturer needs a cross-functional AI working groupTreating AI like a new employee with least-privilege accessKeeping a human in the loop for agentic AI decisionsCapturing tribal knowledge before your veteran operators retireQuestions to ask vendors about their AI roadmapWhy AI won’t replace your SOC anytime soon Visit graymattersystems.com. The podcast and artwork embedded on this page are from GrayMatter, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Talk OT to MeEpisode: When does OT remote access become infrastructure?Pub date: 2026-10-07Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationRemote access started as a way to save time and avoid unnecessary travel. But as industrial operations become more connected, distributed and dependent on remote expertise, its role is changing. In this episode of Talk OT to Me, Jesper and Jeff explore when OT remote access stops being just another tool and becomes part of the infrastructure an operation depends on. They discuss what happens when access goes down, how dependency and downtime change the equation, when redundancy starts to matter, and why the conversation should begin with operational needs — not just cybersecurity. Because the real question isn’t simply whether remote access is secure. It’s: what happens to your operation when it’s no longer there? The podcast and artwork embedded on this page are from Secomea, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure (LS 30 · TOP 5% what is this?)Episode: Pushing Cyber Planning Beyond Prevention with Stephanie Crowe and Nick AndersenPub date: 2026-10-06Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationKeeping power, water, and other essential services running requires planning for what happens when cyber defenses fail. On this episode of Cyber Focus, Frank Cilluffo speaks with Stephanie Crowe, head of the Australian Cyber Security Centre, and Nick Andersen, acting director of the Cybersecurity and Infrastructure Security Agency (CISA), about how two close allies are preparing critical infrastructure to operate through compromise. The conversation examines how governments and industry identify their most critical systems, turn shared intelligence into joint action, and prepare for attacks that cross sectors and borders. Crowe and Andersen also discuss how AI is changing cyber defense and what that means for infrastructure investment, workforce skills, and decisions in the boardroom. Main Topics Operating through cyberattacks Protecting critical assets and dependencies China's infrastructure prepositioning CI Fortify and joint industry planning U.S.-Australia and Five Eyes cooperation AI defense and aging infrastructure AI's energy demands Workforce skills and boardroom decisions Key Quotes "You have to be able to fight through compromise now, which is a really different way of thinking about the cyber threat." — Stephanie Crowe "We've come a long way from thinking about our number one cyber risk being data breaches and theft of information into a world where service disruption is now the thing that we have to really consider and plan in our cyber risk management." — Stephanie Crowe "And just to be completely honest, Australia really bailed us out when we were in the middle of our shutdown… Australia led from the front." — Nick Andersen "If the Congress decided that in the next budget that CISA needed to be quintupled in size, we're still not going to have enough resources to be able to meet every single area that we'd like to be able to stray into with our attention." — Nick Andersen "We know that we're seeing exceedingly aggressive, well-orchestrated campaigns, in particular from entities like China, that are engaged in a significant way to preposition across our critical infrastructure to hold it at risk at a time and place of their choosing." — Nick Andersen Links and Resources Cybersecurity and Infrastructure Security Agency (CISA) Australian Cyber Security Centre: Guidance and Resources About the Guests: Stephanie Crowe is Deputy Director-General of the Australian Signals Directorate and Head of the Australian Cyber Security Centre. She has held senior roles in signals intelligence and cybersecurity, leading efforts to strengthen Australia's cyber defenses, build threat intelligence capabilities, and support industry during major cyber incidents. Nick Andersen is Acting Director of the Cybersecurity and Infrastructure Security Agency (CISA), where he leads efforts to reduce risks to America's cyber and physical infrastructure. A U.S. Marine Corps veteran, he has held senior cybersecurity roles at the Department of Energy, the White House, and in the private sector. The podcast and artwork embedded on this page are from Frank Cilluffo / McCrary Institute, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Casos de Ciberseguridad IndustrialEpisode: 3/4 Acciones de la estrategia global de ciberseguridad industrialPub date: 2026-10-19Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationEn este episodio se detallan las decisiones estratégicas que marcan la diferencia entre los proyectos de ciberseguridad industrial que obtienen resultados tangibles y los que fracasan. A través de este bloque, definiremos las capacidades imprescindibles que cualquier compañía industrial debe consolidar de cara a los próximos cinco años. Por último, abordaremos fórmulas prácticas de optimización […]The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Industrial Talk Podcast Network (LS 39 · TOP 2% what is this?)Episode: Cesar Tascon with EYPub date: 2026-10-16Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIndustrial Talk/BCC is talking to Cesar Tascon, Cybersecurity Partner with EY about "OT / ICS - cyber physical and critical infrastructure security". Overview The discussion focused on adapting cybersecurity to connected operational technology while protecting safe, continuous operations. OT Risk and Approach OT security prioritizes availability and safety; outages can disrupt essential services or cause physical harm.Security must fit each organization’s assets, structure, and risk tolerance. Prioritize critical scenarios, contain incidents, and scale controls to asset criticality.Treat cybersecurity as an ongoing business process, with asset inventories, consistent practices, and rapid detection and response. People and Emerging Risks Introduce changes incrementally with operators, integrating security into existing workflows rather than imposing disruptive processes.OT security ownership depends on the organization; IT and OT responsibilities should align with its operating model.Regulations can overlap and differ in terminology. AI may strengthen attacks but also help analysts review alerts and respond faster.How should each organization assign OT security responsibilities? The transcript identifies no universal model. Outline OT Cybersecurity Context Connected devices and remote operations create significant business benefits, but expand cyber exposure.OT security differs from IT: availability and safety are central concerns, alongside confidentiality. Risk Assessment and Controls Assess assets, organizational structure, operational constraints, threats, and potential impacts before choosing controls.Prioritize critical facilities and prevent incidents from spreading across sites.Maintain asset and software information, responsibilities, backups, and restoration processes; use standards such as NIST and IEC 62443 as applicable. Operating Model and Change Assign security responsibilities according to the organization’s structure; there is no one-size-fits-all IT/OT ownership model.Involve operators and add security requirements to existing workflows to reduce resistance and preserve operations. Regulation and Shared Threats EU regulation promotes protection but may create complexity through overlapping requirements and inconsistent terminology.Coordinate across vendors, peers, sectors, and governments to address supply-chain and shared infrastructure risks. AI in Cybersecurity AI can make attacks and social engineering more convincing and scalable.Defensive uses include helping analysts process alerts and freeing time for incident response. If interested in being on the Industrial Talk show, simply contact us and let's have a quick conversation. Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2026. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy! CESAR TASCON'S CONTACT INFORMATION: Personal LinkedIn: https://www.linkedin.com/in/c%C3%A9sar-tasc%C3%B3n-1198973/ Company LinkedIn: https://www.linkedin.com/company/ernstandyoung/ Company Website: https://www.ey.com/en_gl PODCAST VIDEO: https://youtu.be/JbG5VG1UbdI THE STRATEGIC REASON "WHY YOU NEED TO PODCAST": OTHER GREAT INDUSTRIAL RESOURCES: Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/ Industrial Academy: https://industrialtalk.com/industrial-academy/ Industrial Dojo: https://industrialtalk.com/industrial_dojo/ Business Beatitude the Book Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES! TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES! Reserve My Copy and My 25% Discount The podcast and artwork embedded on this page are from The Industrial Talk Podcast with Scott MacKenzie, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Industrial Talk Podcast Network (LS 39 · TOP 2% what is this?)Episode: Martijn Grooten with CensysPub date: 2026-10-15Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIndustrial Talk/BCC is talking to Martijn Grooten, Principal Security Researcher at Censys about "State of the Internet Report". Overview The discussion examined findings from Censys’ State of the Internet Report and their implications for organizational cybersecurity. Report Findings The report uses Censys’ internet-wide data to describe exposed services, vulnerabilities, threats, and infrastructure; it provides evidence rather than prescriptive guidance.Many vulnerabilities are patched by vendors, but organizations often delay applying updates. HTTP services are frequently found on nonstandard ports. Exposure Risks About 80% of internet-visible hosts running industrial control system services also run a non-ICS service, such as HTTP, SSH, or FTP, expanding potential attack surfaces.Public-facing AI infrastructure grew 63% during the nine-month period covered. Among observed n8n hosts, 76% had at least one vulnerability with a severity score above 9; patches existed, but updates were not applied promptly.Threat actors select hosting providers based partly on permissiveness and resistance to takedowns. Shadow IT and shadow AI can arise when employees use unofficial tools to get work done. Outline Report Purpose Censys shares data from its internet-wide observations to inform cybersecurity professionals and organizations.The report describes exposure and trends rather than providing detailed remediation instructions. Vulnerabilities and Protocols Vulnerabilities are routinely discovered and patched, but organizations may be slow to install updates.Services such as HTTP can run on nonstandard ports, so monitoring only default ports may miss exposed services. Industrial Systems About 80% of observed hosts running an industrial control system service also ran a non-ICS service, including HTTP, SSH, or FTP.These additional services can broaden the attack surface of industrial environments. Threat Infrastructure Threat actors choose hosting providers based on cost, functionality, and permissiveness, rather than choosing infrastructure by country alone.The report observes phishing pages and command-and-control servers, not malware activity on individual computers. AI and Shadow IT Public internet-facing AI infrastructure grew 63% during the report’s covered period.Many observed n8n hosts had severe known vulnerabilities; the interview emphasized delayed patching.Unofficial tools and AI use can create security risks when organizational systems do not meet employees’ work needs. If interested in being on the Industrial Talk show, simply contact us and let's have a quick conversation. Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2026. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy! MARTIJN GROOTEN'S CONTACT INFORMATION: Personal LinkedIn: https://www.linkedin.com/in/martijngrooten/ Company LinkedIn: https://www.linkedin.com/company/censysio/ Company Website: https://censys.com/ State of the Internet Blog: https://censys.com/blog/state-of-the-internet-report-2026/ State of the Internet Report: https://censys.com/2026-state-of-the-internet-report/ PODCAST VIDEO: https://youtu.be/t_k-lsrLBGU THE STRATEGIC REASON "WHY YOU NEED TO PODCAST": OTHER GREAT INDUSTRIAL RESOURCES: Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/ Industrial Academy: https://industrialtalk.com/industrial-academy/ Industrial Dojo: https://industrialtalk.com/industrial_dojo/ Business Beatitude the Book Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES! TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES! Reserve My Copy and My 25% Discount The podcast and artwork embedded on this page are from The Industrial Talk Podcast with Scott MacKenzie, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Smart Buildings Academy Podcast | Teaching You Building Automation, Systems Integration, and Information Technology (LS 44 · TOP 1% what is this?)Episode: SBA 566: Integrating Audio Visual Systems into BASPub date: 2026-10-15Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationYour building automation system may be missing valuable information that already exists elsewhere in the building. What happens when your BAS and audio visual (AV) systems operate independently, even though both are designed to support the same spaces? Conference rooms experience unnecessary heating and cooling, occupancy data goes unused, and facility teams are left troubleshooting comfort complaints that could have been avoided. In Episode 566 of the Smart Buildings Academy Podcast, we explore the opportunities and challenges of integrating AV systems with building automation systems. For BAS professionals, understanding how these systems interact can open new possibilities for improving occupant comfort, energy efficiency, and building performance. But successful integration involves more than connecting devices and exchanging data. Topics Covered How AV systems can provide valuable occupancy and scheduling information to your BAS Integration options and communication methods between AV and building automation systems Network architecture, cybersecurity, and coordination challenges across AV and BAS environments Common integration failures that can impact system reliability and occupant experience Why commissioning, documentation, and clearly defined responsibilities matter for long-term integration success Are you overlooking valuable building data because your AV and BAS systems aren't communicating? Listen in to discover what these integration opportunities could mean for your next project. The podcast and artwork embedded on this page are from Smart Buildings Academy, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: BrakeSec Education Podcast (LS 42 · TOP 1.5% what is this?)Episode: Password issues for Danish org, mimosas at midnight, and SocVel quizPub date: 2026-10-15Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationThis episode discusses the breach of Denmark's CPR register with a weak password, CrowdStrike's identification of the ARTEX AI pen test tool, a double-cross in the Gentleman ransomware gang, and the Silent Ransom Group's $200 million earnings from stolen data. Chapters 00:00 Denmark's CPR register breached through an admin password of 123456 10:52 SocVel quiz Q1: China-linked attack on South Africa's air traffic control 15:34 Q2: How a New Jersey engineer who ransomed his employer was caught 22:40 Q3: CrowdStrike finds the ARTEX AI pentest tool used in attacks 25:35 Q4: The Gentleman ransomware: an affiliate double-crosses his gang 29:43 Q5: Silent Ransom Group's $200 million from data theft alone 34:47 Q6: Empire Market co-creator sentenced to 40 years 37:59 Q7: Iranian hackers pose as Dubai airport IT 42:19 Q8: Influencers targeted with fake brand deals 43:40 Q9: Midnight Mimosa, Android malware preinstalled on fake flagship phones 48:14 Q10: FBI on MicroScan and PhishHub, Flax Typhoon's tools 51:37 Quiz score, and Malware & Monsters, an OWASP incident-response game Watch the full video on YouTube: https://www.youtube.com/watch?v=SRTtp5QX9dg. Over an hour more content! The podcast and artwork embedded on this page are from Bryan Brake, Amanda Berlin, and Brian Boettcher, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Industrial Talk Podcast Network (LS 39 · TOP 2% what is this?)Episode: Ulrich Seldeslachts with LSEC, The Digital Security CatalystPub date: 2026-10-14Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIndustrial Talk/BCC is talking to Ulrich Seldeslachts, CEO at LSEC about "What CISOs are losing sleep over in 2026". Overview The discussion examined cybersecurity risks facing organizations and how leaders can protect operations without slowing business activity. Key Challenges Legacy operational technology, IT/OT alignment, and supplier vulnerabilities make it difficult to keep manufacturing and other critical operations secure.The European NIS2 regulation requires covered organizations to demonstrate cybersecurity measures and address supply-chain risk. Scarce cybersecurity talent and expensive, complex tools add to the burden.Ulrichdescribed difficulty securing management support and resources when executives do not prioritize cybersecurity. Approaches and Open Questions AI can help analyze security data and review product documentation, but its output needs guardrails and human review.The Cyber Resilience Act will require products with digital elements sold in Europe to meet cybersecurity and documentation requirements; noncompliant products may be removed from the market. New products must comply from January 2028.How can organizations secure extensive supplier networks and legacy systems while maintaining business continuity and pace of innovation? Outline CISO and Operational Risk Legacy operational technology and IT/OT alignment create ongoing security challenges.Supplier cybersecurity is a business-continuity risk, reinforced by NIS2 requirements.Cybersecurity staffing gaps and poorly fitted or underused tools constrain organizations. AI and Regulation AI supports analysis of large volumes of security data and review of compliance documentation; guardrails and human review remain important.The Cyber Resilience Act applies to products with digital elements entering the European market, with requirements for new products from January 2028. Organizational Readiness Executives must understand cybersecurity risks and provide appropriate resources.Ulrich described practical engagement with hospital teams and boards to build awareness and improve cybersecurity maturity. If interested in being on the Industrial Talk show, simply contact us and let's have a quick conversation. Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2026. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy! ULRICH SELDESLACHTS' CONTACT INFORMATION: Personal LinkedIn: https://www.linkedin.com/in/ulrichseldeslachts/ Company LinkedIn: https://www.linkedin.com/company/lsec---leaders-in-security/ Company Website: https://www.digitalsecuritycatalyst.com/ PODCAST VIDEO: https://youtu.be/eitsjlTMKhk THE STRATEGIC REASON "WHY YOU NEED TO PODCAST": OTHER GREAT INDUSTRIAL RESOURCES: NEOM: https://www.neom.com/en-us Hexagon: https://hexagon.com/ Arduino: https://www.arduino.cc/ Fictiv: https://www.fictiv.com/ Hitachi Vantara: https://www.hitachivantara.com/en-us/home.html Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/ Industrial Academy: https://industrialtalk.com/industrial-academy/ Industrial Dojo: https://industrialtalk.com/industrial_dojo/ We the 15: https://www.wethe15.org/ YOUR INDUSTRIAL DIGITAL TOOLBOX: LifterLMS: Get One Month Free for $1 – https://lifterlms.com/ Active Campaign: Active Campaign Link Social Jukebox: https://www.socialjukebox.com/ Business Beatitude the Book Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES! TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES! Reserve My Copy and My 25% Discount The podcast and artwork embedded on this page are from The Industrial Talk Podcast with Scott MacKenzie, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Hack the Plant (LS 35 · TOP 3% what is this?)Episode: Securing What Feeds UsPub date: 2026-10-14Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIn this episode, Bryson Bort talks with Kristin King, technologist, environmental manager, and host of the Bites and Bytes podcast, on why food and agriculture remain a dangerously overlooked piece of critical infrastructure. Kristin explains how human emotional responses drive social engineering, how rapidly expanding OT and connected tech in farms, factories, and fisheries create new attack surfaces, and what the JBS ransomware attack reveals about cascading risks from animal welfare to empty grocery shelves. She also offers a preview into her forthcoming book Securing What Feeds Us, outlining a path from today’s cyber-physical vulnerabilities toward better policy, shared language, and a new generation of “food cybersecurity” practitioners. “We are creating the potential for a foodborne illness to happen from a cyber attack that may not be noted,” Kristin said. Join us for this and more on this episode of Hack the Plan[e]t. The views and opinions expressed in this podcast represent those of the speaker(s) and do not necessarily represent the views and opinions of their employers. Hack the Plant is brought to you by ICS Village and the Institute for Security and Technology.   The podcast and artwork embedded on this page are from Bryson Bort, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Risky Business (LS 56 · TOP 0.5% what is this?)Episode: Risky Business #855 -- ShinyHunters done sowing, enters reaping phasePub date: 2026-10-14Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationOn this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including: Sacré bleu! Hackers turn up the heat at French supermarket freezers ShinyHunters enters “find out” stage Netscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wild More models “behave badly” (by… doing exactly what we’re telling them to do) Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quiet Much, much more… This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work. This episode is also available on YouTube Show notes Cyberattack disrupts refrigeration at hundreds of French supermarkets | therecord.media Dangerous flaws in refrigeration equipment were disclosed months before retail attacks | Cybersecurity Dive Retail giant Ahold Delhaize takes systems offline after cyberattack | BleepingComputer Hacked FBI data has sensitive information about employees' intelligence roles | reuters.com Hackers stole millions of US military personnel records during months-long data breach | TechCrunch Security ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks | BleepingComputer Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation | krebsonsecurity.com Key ShinyHunters hacker detained in Jordan, is cooperating, sources say | reut.rs FBI Arrests Founder of Ransomware Negotiation Firm | krebsonsecurity.com Ransomware recovery CEO charged over secret ransom payments | BleepingComputer Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts | Cybersecurity Dive Citrix confirms two NetScaler RCE zero-days exploited in attacks | BleepingComputer Kiteworks urges customers to stop using platform after warning from federal intelligence agencies | therecord.media Attackers have been exploiting critical Zimbra flaw to steal emails | arstechnica.com FBI, Secret Service add to warnings of FortiBleed credential stealing campaign | therecord.media Check Point warns of hackers exploiting Security Gateway VPN RCE flaw | BleepingComputer Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks | securityweek.com Hackers exploit critical Atlassian flaw after public PoC release | BleepingComputer CISA: Ransomware gangs now exploiting critical TeamCity flaw | BleepingComputer Anthropic Agents Tried to Fill Out Visa Forms on State Dept. Website | nytimes.com An Anthropic AI model sent a false homicide tip to Philadelphia police | TechCrunch OpenAI bots meddled with US government agencies, including SEC and Census | bbc.com OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government | wired.com Anthropic Says Its A.I. Agents Attempted to Access a Range of Government Sites | nytimes.com OpenAI agent breached Australian government health website, Albanese says | therecord.media Doubts grow over claims OpenAI agent hacked Australian Medicare portal | therecord.media OpenAI agents tried to hack Wikipedia tools and flooded it with traffic | arstechnica.com OpenAI Ignored Employees' Warnings About Safely Testing A.I. Models | nytimes.com AI models may be capable of self-replicating without access to a datacenter | South Korean officials believe AI agents were used to hack several banks | therecord.media JadePuffer agentic AI attacks target Azure, destroy cloud resources | BleepingComputer GLM-5.3 and the Spread of Advanced Cyber Capabilities | anthropic.com New bill would create federal investigative body for AI-driven hacks | cyberscoop.com Court rules Trump can blacklist Anthropic for refusing to enable Claude features | Ars Technica Apple changes full-disk access permissions to curb abuse from AI agents | arstechnica.com Google Gemini could soon get full access to your Mac’s files, apps and the web | BleepingComputer Bitget hacked via zero-day in third-party security products | BleepingComputer Ledger confirms spy chip implant behind wallet crypto thefts | BleepingComputer Who Is Planting Backdoors in Ledger Crypto Wallets? | zetter-zeroday.com Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware | zscaler.com New Spectre v2 attack variant leaks Linux root password hash in minutes | BleepingComputer Data breach at Denmark’s national population register exposes 8.8 million people | therecord.media Shares in British clothing company ASOS dive after hackers apparently send push notification | therecord.media Google halts open-source bug bounty program amid AI spam surge | BleepingComputer International coalition seizes tools used by cyber firm behind Flax Typhoon | therecord.media Hackers hijack Google domains after breaching ccTLD registries | BleepingComputer GoBalance Flaw Lets Attackers Hijack.onion Addresses by Recovering Tor-Format Keys | The Hacker News Ukraine strikes third Yandex data center, disrupting digital services across Russia | therecord.media Provably Better Data | Corelight The podcast and artwork embedded on this page are from Risky Business Media, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity InsiderEpisode: Why Your Security Team Isn't Ready for a Real CyberattackPub date: 2026-10-14Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationMost manufacturers have an incident response plan. Few have tested it at 2 AM on a Sunday, with a skeleton crew and the people who know the equipment best nowhere to be found. Fresh from the ICS Cybersecurity Conference in Nashville, Craig Duckworth and Dino Busalachi compare notes on what keeps industrial organizations from being ready for a real attack. The risk today goes beyond ransomware. It's attackers who blend into normal plant activity, process data that quietly exposes your intellectual property, security tools that never get used after the sale, and teams that still work in separate camps. Craig and Dino talk through why IT, plant floor teams, system integrators, and equipment builders need to operate as one technology team, why new projects are the best place to build security in, and why passing an audit is not the same as being secure. They also look at how AI is speeding up both attacks and defenses, leaving manufacturers less time to react. If you lead a plant, an engineering team, or a security program, this conversation will help you answer one question: if your plant was hit tonight, who makes the first call and who's on the other end receiving the call? Listen now and share it with the people who own your plant floor. Chapters: 00:00:00 Incident response plans must work outside office hours00:01:00 Inside the OTICS Cyber Security Conference00:02:00 Threat actors living in the normal00:04:00 Why process data can expose intellectual property00:07:00 The gap between tools, skills, and operating practice00:08:00 Moving beyond the IT and OT divide00:11:00 Why technology adoption matters after the sale00:12:00 Building security into projects from the start00:15:00 Defense in depth and protecting critical assets00:17:00 Practicing incident response when it counts00:19:00 Bringing integrators and asset owners to the table00:20:00 Authority, accountability, and the CISO challenge00:23:00 CMMC, continuous monitoring, and process data00:24:00 Artificial intelligence changes the threat timeline00:27:00 Asset discovery and security baselines00:29:00 Checking a box versus improving the environment00:32:00 Staying ahead through collaboration and readiness Links And Resources: Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityDino Busalachi on LinkedInCraig Duckworth on LinkedIn Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review! The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.