@BEERISAC: OT/ICS Security Podcast Playlist
- Episodes
- 300
- Released
- daily
- Latest episode
- Nov 14, 2026
About the podcast
A curated playlist of Operational Technology (OT) and Industrial Control Systems (ICS) cybersecurity podcast episodes in any language, compiled by ICS security enthusiasts. Missing something? Contact Anton Shipulin on LinkedIn. Subscribe for updates!
Episodes 300
How To Lose Millions Without Getting Hacked
Podcast: Industrial Cybersecurity InsiderEpisode: How To Lose Millions Without Getting HackedPub date: 2026-11-11Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationManufacturing …
Show notes
Podcast: Industrial Cybersecurity Insider
Episode: How To Lose Millions Without Getting Hacked
Pub date: 2026-11-11
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationManufacturing cybersecurity mistakes that cost millions without a hacker in sight, and the steps that prevent them, in this rewind episode.
We pulled one of our earliest conversations out of the archive, and it hits harder now than when we first recorded it. Dino and Craig share stories from the plant floor about mistakes that quietly cost manufacturers millions:
- A vending machine with a duplicate IP address that took down a $35 million wheel press
- Thirty Siemens PLCs that wiped their own IP addresses after an IT technician scanned the wrong network at the wrong time
- Federal agents who scanned a beverage plant’s control system while hunting malware on its mail servers
- A steel mill that had to choose between pulling an unpatched server off the network and shutting the plant down
None of these came from a sophisticated attacker. Competent people doing normal jobs caused them, with no idea how the plant floor would react.
Dino explains what actually closes the gap: an accurate asset inventory, a network built to contain mistakes, continuous monitoring, control over remote access, and an incident response plan rehearsed before the bad day arrives. His advice for where to start is to run one tabletop exercise and name one owner for plant floor security at every site.
Chapters:
- (00:00:00) Cold open: a soda machine takes down a $35 million wheel press
- (00:01:12) The incidents that never make the news
- (00:02:26) Thirty Siemens PLCs reset their IP addresses to zero
- (00:05:38) When federal agents scan your control network
- (00:07:02) WannaCry, SMBv1, and the steel plant standoff
- (00:11:16) A pen tester can't tell a PLC from a printer
- (00:18:12) The air gap myth and the contractor laptop
- (00:21:09) Five ICS controls IT and OT can work on together
- (00:25:41) Windows 7 on the plant floor and the CISO's purview
- (00:31:22) Start here: a tabletop exercise and one OT owner per plant
Links And Resources:
- Want to Sponsor an episode or be a Guest? Reach out here.
- Industrial Cybersecurity Insider on LinkedIn
- Cybersecurity & Digital Safety on LinkedIn
- BW Design Group Cybersecurity
- Dino Busalachi on LinkedIn
- Craig Duckworth on LinkedIn
Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!
The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Layer 0 Security: What If the PLC and HMI Are Lying? | OT Security Made Simple
Podcast: OT Security Made SimpleEpisode: Layer 0 Security: What If the PLC and HMI Are Lying? | OT Security Made SimplePub date: 2026-11-10Get Podcast Transcript →powered by Listen411 - fast audio-to-text and …
Show notes
Podcast: OT Security Made Simple
Episode: Layer 0 Security: What If the PLC and HMI Are Lying? | OT Security Made Simple
Pub date: 2026-11-10
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationKlaus Mochalski and Joe Weiss (Applied Control Solutions) explore Layer 0 security in ICS. Learn why network monitoring misses unauthenticated sensor data and how real-time physics monitoring restores true visibility.
Links:
https://www.controlglobal.com/blogs/unfettered/blog/55416557/the-plc-says-the-valve-is-open-the-hmi-agrees-but-what-if-neither-is-telling-the-truth
https://ieeexplore.ieee.org/document/9928204
The podcast and artwork embedded on this page are from Klaus Mochalski, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Grocery Fridge Hacks and the Shadow IT Gap
Podcast: Trust Me, It's Air-GappedEpisode: Grocery Fridge Hacks and the Shadow IT GapPub date: 2026-11-09Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationA cyberattack that …
Show notes
Podcast: Trust Me, It's Air-Gapped
Episode: Grocery Fridge Hacks and the Shadow IT Gap
Pub date: 2026-11-09
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationA cyberattack that took down grocery store refrigerators across Europe reveals that risks behind shadow IT, third-party vendor management and remote access.
GrayMatter's Scott Christensen and Jeff Dunham look at why connected devices bought outside IT’s view are a growing risk. They cover what a vendor security review should ask before procurement and discuss GrayMatter’s SOC 2 journey.
Topics covered:
- Lessons from the European grocery store refrigerator cyberattack
- Shadow IT and shadow AI in IT and OT environments
- Third-party vendor risk and security questionnaires
- SOC 2 compliance and proving that security controls work
- Network segmentation for IoT and OT devices
- Containment, visibility and recovery as core security practices
- Why IT/OT security works best as a team sport
Visit graymattersystems.com.
The podcast and artwork embedded on this page are from GrayMatter, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Walk the Floor: Why Your Asset Count Is Wrong
Podcast: PrOTect It All (LS 28 · TOP 10% what is this?)Episode: Walk the Floor: Why Your Asset Count Is WrongPub date: 2026-11-09Get Podcast Transcript →powered by Listen411 - fast audio-to-text and …
Show notes
Podcast: PrOTect It All (LS 28 · TOP 10% what is this?)
Episode: Walk the Floor: Why Your Asset Count Is Wrong
Pub date: 2026-11-09
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationWork with Aaron: https://protectitallpod.com/work/
The book: https://protectitallpod.com/book/
This episode: https://protectitallpod.com/ep131/
The OT Security Starter Kit: https://protectitallpod.com/starter-kit/Kevin Kumpf started out strapping steel under gantry cranes, found the crane control systems had never been updated, and has worked in OT security ever since, including leading OT security at a large US utility. He and Aaron spend this episode on the things that do not show up in a tool: safety culture, knowing what good looks like, and walking the floor.
Why an IT data center would never post a "days since last incident" sign, and why OT treats safety as the job. Two engineers at one plant who count 50 and 200 control cabinets. Ten engines on one ship, one running different. Why plants protect the most expensive asset instead of the most critical one, and the five-cent part nobody budgets for.
Then data and AI: a boiler tube failure spreadsheet that decided outage plans without ever being on a critical asset list, why AI without context is just numbers, and why a human who can check the work still matters. Aaron's zip tie that left a core switch failed for months, the only backup server sitting next to a space heater, and how to sell OT security to the business: uptime, reliability and competitive advantage, done securely.
Key takeaways- Count it yourself. If two people at the same plant give you 50 and 200, you do not have an inventory, and a tool will not settle it.
- Know what good looks like. A baseline of temperatures, flows, RPMs and who talks to whom is what makes the odd one out visible.
- Criticality is not price. Ask what stops production, including the small part and the small site on the same network.
- Walk the floor and ask what the red light means. If nobody knows, find out or remove the light.
- AI needs context and a human who can check its answer.
- Lead with uptime and reliability. Security comes along with it.
- 0:00 Intro
- 0:22 Welcome and introduction
- 1:58 From strapping steel to crane controls
- 3:16 Hard hats and safety culture in OT
- 6:08 Days since last incident: IT vs OT
- 6:58 A sticker for every year without an incident
- 8:29 No shortcuts to safety
- 9:54 Teaching IT people the safety mindset
- 13:11 No-judgment zone: who knows their baseline?
- 15:39 50 cabinets or 200: asset counts that disagree
- 17:17 Who controls the plant, and knowing your baseline
- 21:17 You have to know what good looks like
- 22:41 Ten engines, one running different
- 23:49 The most expensive asset is not the most critical
- 25:03 The boiler tube failure spreadsheet
- 28:04 Excel, history and data in context
- 30:57 If the AI says 42
- 33:42 Data versus information
- 36:17 The cloud and trust but verify
- 40:47 Firewalls, passive monitoring, people and process
- 42:41 Enterprise IT tools in a plant, done the OT way
- 44:58 One zip tie and a failed core switch
- 48:03 The backup server next to the space heater
- 50:48 Protecting the device from the human
- 51:15 What Kevin is building
- 53:51 Changing the oil: lessons learned the hard way
- 56:50 Where to find Kevin
- 57:38 Selling uptime, not security
Kevin Kumpf has more than 20 years of IT and OT security and governance and compliance experience in energy, communications, the defense industrial base, transportation, manufacturing, healthcare, financial services and other sectors. As Director of OT Security (Iberdrola N.A.) he oversaw the security and regulatory compliance programs for operating companies including NYSEG, RG&E and CMP. Today he is Chief OT Strategist at Kasm Technologies.
- Kasm Technologies: https://kasm.com/
- Kevin on LinkedIn: https://www.linkedin.com/in/kevin-kumpf-b5021412
Learn more about PrOTect IT All:
Work with Aaron: https://protectitallpod.com/work/
The book: https://protectitallpod.com/book/
This episode: https://protectitallpod.com/ep131/
The OT Security Starter Kit: https://protectitallpod.com/starter-kit/
Support the show: https://protectitallpod.com/go/support/podcast
YouTube: https://www.youtube.com/@PrOTectITAll
Email: [email protected]
X: https://twitter.com/protectitall
Facebook: https://facebook.com/protectitallpodcastTo be a guest or suggest a guest or episode, email [email protected].
Please leave us a review on Apple or Spotify:
Apple: https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124
Spotify: https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4
The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.2/4 Análisis del riesgo de la IA en la digitalización industrial
Podcast: Casos de Ciberseguridad IndustrialEpisode: 2/4 Análisis del riesgo de la IA en la digitalización industrialPub date: 2026-11-09Get Podcast Transcript →powered by Listen411 - fast audio-to-text and …
Show notes
Podcast: Casos de Ciberseguridad Industrial
Episode: 2/4 Análisis del riesgo de la IA en la digitalización industrial
Pub date: 2026-11-09
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization
En este episodio se profundiza en si el modelo tradicional de evaluación de ciberseguridad (amenazas, vulnerabilidades e impacto) resulta suficiente para evaluar sistemas de inteligencia artificial o si requiere incorporar otras dimensiones.
The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.GPT-6 Cyber Sets Price of a Linux Exploit; Europe Silent on Fridge Hacks
Podcast: Three Buddy Problem (LS 40 · TOP 2% what is this?)Episode: GPT-6 Cyber Sets Price of a Linux Exploit; Europe Silent on Fridge HacksPub date: 2026-11-08Get Podcast Transcript →powered by Listen411 …
Show notes
Podcast: Three Buddy Problem (LS 40 · TOP 2% what is this?)
Episode: GPT-6 Cyber Sets Price of a Linux Exploit; Europe Silent on Fridge Hacks
Pub date: 2026-11-08
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem - Episode 119: We discuss the supermarket fridge hacks rolling across Europe, why no government wants to say the word Russia out loud, active measures and cyber-warfare, and the European silence on attribution.
Plus, OpenAI's GPT-6 Cyber and the cost of 948 Linux exploits, the Daybreak Blue training flap, a tough-love pep talk for researchers mourning the loss of the old game and the Binance postmortem the FBI pinned on North Korea's TraderTraitor.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.
Timestamps:
0:00 Introductory banter
3:00 TLP Black and AI agents watching your edge devices
10:21 Supermarket fridge hacks spread across Europe
16:27 How the refrigeration attacks work
18:49 Is this Russia?
21:12 Boundary testing and the Article 5 problem
34:20 Sabotage short of war
40:06 The IOCs nobody is sharing
44:41 Costin's hunting playbook
51:24 Not just a European story
57:25 What do intelligence agencies know?
1:06:22 GPT-6 Cyber and Daybreak Red
1:26:40 948 Linux root exploits for $1.2 million
1:36:48 Daybreak Blue training and the mathematicians
2:09:01 Binance postmortem and TraderTraitorLinks:
- Transcript
- TBP Ep54: Train brake hack, GRU sanctions
- Tom Hegel: Defrost and Disrupt - Europe’s Refrigeration Attacks
- French blood service hit by Europe-wide fridge hacks
- Govs Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems
- Germany, Romania and UK report supermarket cyberattacks
- OpenAI Ships GPT‑6 Cyber
- A thousand fewer paths to root | OpenAI
- OpenAI plans to train models on Daybreak Blue cybersecurity session data
- Free Chinese AI Models Are Getting Scary Good at Hacking
- Tal Be'ery: Dense in Depth: Rethinking Security When Vulns Are Everywhere
- FBI blames N. Korea’s TraderTraitor for Binance theft
- Binance $6.5B Crypto Theft Post-Mortem
- FBI: North Korea Responsible for $6 Billion+ Binance Attack
- SkiSides 2027
- CYBERWARCON Agenda
- RE//verse Conference
- TLPBLACK
The podcast and artwork embedded on this page are from Security Conversations, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.015 - ISA Automation Summit & Expo: CRA and Regulation, AI, SCADA, and more!
Podcast: PodomationEpisode: 015 - ISA Automation Summit & Expo: CRA and Regulation, AI, SCADA, and more!Pub date: 2026-11-04Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIn …
Show notes
Podcast: Podomation
Episode: 015 - ISA Automation Summit & Expo: CRA and Regulation, AI, SCADA, and more!
Pub date: 2026-11-04
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationIn this episode, we're continuing our journey inside the ISA Automation Summit and Expo in Orlando. Our conversations kept returning to three questions. How do we protect critical infrastructure, especially water? How do we keep up with new regulations like Europe's Cyber Resilience Act? And how do we bring AI into the plant safely? ISA talked to experts on each of these topics... and their answers are more hopeful, and more practical, than the headlines suggest.
The podcast and artwork embedded on this page are from ISA - International Society of Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Why Your Disaster Recovery Strategy Is At Risk (And How to Fix It)
Podcast: Industrial Cybersecurity InsiderEpisode: Why Your Disaster Recovery Strategy Is At Risk (And How to Fix It)Pub date: 2026-11-04Get Podcast Transcript →powered by Listen411 - fast audio-to-text and …
Show notes
Podcast: Industrial Cybersecurity Insider
Episode: Why Your Disaster Recovery Strategy Is At Risk (And How to Fix It)
Pub date: 2026-11-04
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationA successful backup is reassuring, but can your team actually restore a critical system when production is on the line?
Dino sits down with Hannah Bergin and Jack Mansfield of Macrium Software to explore what recovery looks like in manufacturing environments, from fragile legacy Windows machines to isolated networks and plant systems with different owners.
They discuss why backup and recovery should be considered during system design, how IT and OT teams can share responsibility without losing sight of safety and production, and why documentation, training and recovery drills matter as much as the technology itself.
Whether the disruption comes from a cyber incident or a failed drive, the conversation offers practical questions to help plant leaders and security teams prepare before something goes wrong.
Chapters:
- (00:00:00) The risk of untested backups
- (00:03:00) Backup and recovery for industrial systems
- (00:06:00) On premises backup for isolated OT networks
- (00:09:00) Backup retention and recovery objectives
- (00:12:00) Building a disaster recovery program
- (00:15:00) Balancing plant control and enterprise oversight
- (00:19:00) Recovery by design for OEMs and integrators
- (00:23:00) Funding OT security through capital projects
- (00:27:00) Testing recovery before a disruption
Links And Resources:
- Want to Sponsor an episode or be a Guest? Reach out here.
- Industrial Cybersecurity Insider on LinkedIn
- Cybersecurity & Digital Safety on LinkedIn
- BW Design Group Cybersecurity
- Hannah Bergin on LinkedIn
- Jack Mansfield on LinkedIn
- Dino Busalachi on LinkedIn
- Craig Duckworth on LinkedIn
Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!
The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.EP 94: When AI Hands Anyone the Keys to the Grid
Podcast: Error Code (LS 28 · TOP 10% what is this?)Episode: EP 94: When AI Hands Anyone the Keys to the GridPub date: 2026-11-03Get Podcast Transcript →powered by Listen411 - fast audio-to-text and …
Show notes
Podcast: Error Code (LS 28 · TOP 10% what is this?)
Episode: EP 94: When AI Hands Anyone the Keys to the Grid
Pub date: 2026-11-03
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationLast summer 30+ Minnesota water utilities got hacked. No zero-days. No malware. Just default passwords on internet-exposed PLCs exposed. Eric Stride, Chief Security Officer at Huntress, discusses how AI now lets anyone attack US critical infrastructure.
The podcast and artwork embedded on this page are from Robert Vamosi, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.The FDA's Biggest Stick: Medical Device Cybersecurity with Billy Rios
Podcast: (CS)²AI Podcast Show: Control System Cyber SecurityEpisode: The FDA's Biggest Stick: Medical Device Cybersecurity with Billy RiosPub date: 2026-11-03Get Podcast Transcript →powered by Listen411 - fast …
Show notes
Podcast: (CS)²AI Podcast Show: Control System Cyber Security
Episode: The FDA's Biggest Stick: Medical Device Cybersecurity with Billy Rios
Pub date: 2026-11-03
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationBilly Rios, vulnerability researcher and (CS)²AI Fellow, joins Derek Harp for the audience Q&A after presenting his team's research on a connected wheelchair that was later recalled. Billy explains why the FDA's power to keep a device off the US market is the biggest stick in any industry, what a recall means when the problem is software, and why a manufacturer can't simply switch off a core feature to fix a flaw. They get into legacy "big iron" devices (Billy has bought a CT scanner and a C-arm), why the FDA's guidance works even though it isn't prescriptive, and how manufacturers' behavior has changed in about ten years. Billy also gives advice to researchers: bug bounties, making a living as an independent, how the CFAA and DMCA good-faith exception affect legal risk, and a plain-English explanation of side-channel attacks.
Watch the wheelchair clip: https://youtu.be/6-iBC5ugiSo
More from (CS)²AI on YouTube: https://www.youtube.com/@cs2ai
Guest: Billy Rios, (CS)²AI Fellow, Cybersecurity Researcher, Author, and Co-Founder of QED Solutions
Host: Derek Harp, Founder and Chairman, (CS)²AI
Recorded live during a (CS)²AI Online webinar on October 21, 2026.
Chapters:
00:42 Welcome from Trisha Harp and the wheelchair research
02:01 Who decides whether a manufacturer reports to the FDA?
04:44 Are manufacturers getting better? Why the FDA matters
08:43 The FDA's biggest stick: keeping a device off the market
09:16 What a recall means when the problem is software
11:15 Guidance that isn't prescriptive
14:16 Controlled vs. uncontrolled vulnerabilities, and the wheelchair dilemma
17:30 How the FDA process changed manufacturers
20:11 Legacy "big iron": CT scanners, C-arms and VBScript
24:08 Standards, secure by design and the "soup" analogy
26:10 Connected devices multiplying inside and outside the hospital
28:24 Advice for researchers: the 300 backdoor passwords and the PATCH Act
30:58 Bug bounties and making a living as a researcher
34:55 Legal risk: the CFAA and the DMCA good-faith exception
37:11 Side-channel attacks explained
38:56 Why only the FDA can do this 41:13 Parting words
Legal topics in this episode are Billy's views, not legal advice.
Produced by (CS)²AI (Control System Cyber Security Association International).
The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Cybersecurity in der OT richtig starten
Podcast: Let's talk OT – Die Zukunft der IndustrieEpisode: Cybersecurity in der OT richtig startenPub date: 2026-11-03Get Podcast Transcript →powered by Listen411 - fast audio-to-text and …
Show notes
Podcast: Let's talk OT – Die Zukunft der Industrie
Episode: Cybersecurity in der OT richtig starten
Pub date: 2026-11-03
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationCybersecurity in der OT klingt für dich nach unbezahlbaren Software-Tools, endlosen Audits und riesigen Bergen von Papier? Keine Sorge, es geht auch anders!
In dieser Folge von „Let's Talk OT – die Zukunft der Industrie“ räumen Max und Michael mit dem Mythos auf, dass OT-Security ein unbezwingbares Schreckgespenst sein muss. Sie zeigen dir, wie der pragmatische, risikobasierte Einstieg in die Absicherung deiner Produktion gelingt ganz ohne fortwährenden Abhängigkeiten und/oder übertriebener Bürokratie.
Erfahre, warum das Lösen von ganz alltäglichen „Sünden“ (wie standardisierten Passwörtern) oft viel wertvoller für deine Betriebsresilienz ist als das x-te theoretische Gutachten. Denn, die OT muss das Rad gar nicht immer neu erfinden! Die beiden Branchenexperten schlagen eine spannende Brücke zu Maschinensicherheit (Safety), die in unseren Werken ohnehin schon gelebt wird.
In dieser Folge erfährst du:
- Wie du die Logik klassischer Risikobeurteilungen der Maschinensicherheit für deine OT-Security nutzen kannst.
- Warum wir in der Industrie exzellent im Analysieren, aber oft schwach im echten Patchen sind (und wie wir diesen Knoten platzen lassen).
- Wie du deine Konstrukteure und Planer befähigst, Security ganz natürlich und ohne Zusatzaufwand im normalen Entwicklungsprozess mitzudenken.
- Eine ehrliche Einschätzung, was der Cyber Resilience Act für den Maschinenbau wirklich bedeutet und wie der Markt darauf reagieren wird.
Hör jetzt rein und nimm die Abkürzung zu einer sicheren, stabilen Produktion!
(Vergiss nicht, den Podcast zu abonnieren und uns einen Daumen nach oben dazulassen!)
Kapitel:
00:00 Einstieg und Einleitung
00:31 Wie startet man eigentlich strategisch sinnvoll in die OT-Cybersecurity?
02:12 Safety vs. Security: Was können wir bei der Risikobeurteilung aus der Maschinensicherheit lernen?
05:14 Abhängigkeit verhindern: Wie befähigst du dein eigenes Team für interne Risikoanalysen?
12:09 Gap-Analyse vs. risikobasierter Ansatz: Warum schützt dich reine Dokumentation vor keinem Hacker?
14:21 Das Umsetzungs-Dilemma: Warum sind wir genial im Auditieren, aber katastrophal beim eigentlichen Patchen?
18:44 Passwörter und Zertifikate: Wo liegen die ungenutzten Low-Hanging-Fruits im Schaltschrank?
23:09 Wohin mit dem knappen Budget: Investierst du besser in Passwort-Management oder Netzwerksegmentierung?
31:04 Cyber Resilience Act (CRA): Wie gut sind Maschinenbauer wirklich auf die neue Meldepflicht vorbereitet?Jetzt reinhören und das volle Potenzial deiner OT-Daten entfesseln!
- Michael Grollmus auf LinkedIn
https://www.linkedin.com/in/michael-grollmus/- Max Weidele auf LinkedIn
https://www.linkedin.com/in/max-weidele-ot-security/Intro: Music by raspberrymusic
https://pixabay.com/music/funk-feel-good-upbeat-percussion-logo-388050/
The podcast and artwork embedded on this page are from Michael Grollmus, Max Weidele, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Water Utility Cybersecurity, AI & Emergency Readiness with Kevin Morley and Cris Perez
Podcast: Utility Emergency Response with Isaac Alatorre and Jim WollbrinckEpisode: Water Utility Cybersecurity, AI & Emergency Readiness with Kevin Morley and Cris PerezPub date: 2026-10-01Get Podcast …
Show notes
Podcast: Utility Emergency Response with Isaac Alatorre and Jim Wollbrinck
Episode: Water Utility Cybersecurity, AI & Emergency Readiness with Kevin Morley and Cris Perez
Pub date: 2026-10-01
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationWhat happens when a water utility loses access to its control systems—and who still knows how to operate manually?
Dr. Kevin Morley of AWWA and Cris Perez of Santa Clarita Valley Water Agency return to the Utility Emergency Response Podcast after appearing in our most-downloaded episode last year.
Joining hosts Isaac Alatorre and Jim Wollbrinck for Cybersecurity Awareness Month, they discuss cybersecurity fundamentals, emergency exercises, retiring operators, and the practical questions utilities should ask before adopting AI.
The conversation explores: • Cyber threats and the operational consequences of compromised control systems • Manual operations and preserving institutional knowledge • Connecting risk assessments with emergency response actions • AI governance, realistic expectations, and data ownership • Cybersecurity requirements in procurement and contracts • Emerging concerns involving data centers, equipment availability, and drones • Training opportunities and collaboration across the water sector
Kevin brings a national water-sector perspective, while Cris shares the realities of leading technology services at a water agency.
A practical discussion for utility operators, supervisors, IT teams, emergency managers, and decision-makers. Watch video version on YouTube: https://youtu.be/_XKpd9ibDKc
The podcast and artwork embedded on this page are from Portable Pipeline System, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Backup & Recovery
Podcast: Let's talk OT – Die Zukunft der IndustrieEpisode: Backup & RecoveryPub date: 2026-09-22Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationCPU defekt, Maschine steht? …
Show notes
Podcast: Let's talk OT – Die Zukunft der Industrie
Episode: Backup & Recovery
Pub date: 2026-09-22
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationCPU defekt, Maschine steht? Kein Grund zur Panik! Wenn das richtige Sicherheitsnetz gespannt ist, läuft die Produktion im Handumdrehen wieder reibungslos.
In der neuen Folge von „Let's Talk OT – die Zukunft der Industrie“ widmen sich Max und Michael einem absoluten Lieblingsthema für ruhige Nächte und maximale Betriebssicherheit: Backup und Recovery in der OT.
Die beiden zeigen, dass ein cleveres Backup-Konzept weit mehr ist als eine lästige Pflichtaufgabe. Es ist dein stärkster Beschleuniger für eine resiliente Produktion, vermeidet ungeplante Stillstandszeiten und sichert das wertvolle Know-how deiner Anlagen für die Zukunft.
In dieser Folge erfährst du:
- Wie dich ein funktionierendes Backup-Konzept im Ernstfall binnen Minuten wieder handlungsfähig macht.
- Warum neben der SPS auch HMIs, Roboter-Parameter und sogar digitale Schaltpläne in dein Backup gehören – und wie einfach das geht.
- Warum du für den Start kein teures Software-Monster brauchst, sondern ein einfaches Konzept und klare Prozesse bereits Wunder wirken.
- Wie du mit einer schnellen Risikoanalyse genau herausfindest, welche Systeme du zuerst sichern solltest, um den größten Nutzen zu erzielen.
Michael und Max teilen unterhaltsam Best Practices und Learnings aus der Praxis und zeigen dir Schritt für Schritt, wie du ohne großen Aufwand ein verlässliches Backup-Fundament für deine Produktion baust.
Jetzt reinhören und die Resilienz deiner Produktion auf das nächste Level heben!
(Vergiss nicht, den Podcast zu abonnieren und uns einen Daumen nach oben dazulassen!)
Kapitel:
00:00 Einleitung
00:45 Was sind die klassischen Schreckensszenarien im Feld?01:48 Welche Komponenten musst du in der OT wirklich sichern?
07:59 Warum gehört die Dokumentation zwingend in dein Backup-Konzept?
10:35 Reicht die manuelle Datensicherung heute noch aus?
13:56 Warum sind Metadaten und Versionierung der Schlüssel zum Erfolg?
19:48 Warum können unterschiedliche Firmware-Stände deine Anlage lahmlegen?
22:06 Wie sicherst du deine flüchtigen Produktionsdaten richtig?
24:29 Womit solltest du beim Backup-Konzept starten?
25:58 Wie planst du ein Backup-Projekt strukturiert und bedarfsgerecht?
28:23 Warum ist Backup & Recovery keine freiwillige Option mehr?
Interessante Shownotes für dich:
- Michael Grollmus auf LinkedIn
https://www.linkedin.com/in/michael-grollmus/- Max Weidele auf LinkedIn
https://www.linkedin.com/in/max-weidele-ot-security/
- Backup & Recovery-Fachartikel
https://www.sichere-industrie.de/backup-recovery-strategie/Intro: Music by raspberrymusic
https://pixabay.com/music/funk-feel-good-upbeat-percussion-logo-388050/
The podcast and artwork embedded on this page are from Michael Grollmus, Max Weidele, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Assetmanagement
Podcast: Let's talk OT – Die Zukunft der IndustrieEpisode: AssetmanagementPub date: 2026-09-08Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationHand aufs Herz: Weißt du ganz …
Show notes
Podcast: Let's talk OT – Die Zukunft der Industrie
Episode: Assetmanagement
Pub date: 2026-09-08
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationHand aufs Herz: Weißt du ganz genau, welche Firmware auf der SPS-Steuerung in Halle 3 läuft? Oder liegt der aktuelle Schaltplan doch eher als vergilbter Papierausdruck mit handgeschriebenen Notizen in irgendeiner Schublade?
In der allerersten Folge von „Let's Talk OT – die Zukunft der Industrie“ erörtern Max und Michael warum professionelles OT-Asset-Management oft aktuell noch reine Science-Fiction ist. Stattdessen regiert die Excel-Hölle und der Glaube: „läuft doch irgendwie.“
Im Zeitalter von Cyber-Bedrohungen und IoT brandgefährlich. Denn eins ist klar:
Du kannst nicht schützen, was du nicht kennst!In dieser Folge erfährst du:
- Wie Asset-Inventarisierung den Arbeitsalltag in der Instandhaltung und im Lifecycle-Management massiv erleichtert
- Wie Instandhaltung und Cybersecurity an einem Strang ziehen, um teure Produktionsausfälle zu verhindern
- Warum „klein starten“ der wahre Schlüssel zum Erfolg ist
- Wie du Schritt für Schritt und ganz einfach eine solide Datenbasis schaffst
Michael und Max beleuchten Operational Technology von zwei unterschiedlichen und spannenden Blickwinkeln mit jeder Menge Insights aus ihrem Daily Business in der OT.
Jetzt reinhören und die Produktion zukunftssicher machen!
(Vergiss nicht, den Podcast zu abonnieren und uns einen Daumen nach oben dazulassen!)
Für wen ist diese Episode interessant?
Diese Folge ist der perfekte Wegweiser für alle, die das Fundament ihrer Fabrik digitalisieren wollen. Sie ist besonders wertvoll für Instandhaltungsleiter (Maintenance Manager), SPS-Programmierer, Automatisierungstechniker und EMSR-Meister, die den täglichen Schmerz von veralteten Excel-Listen und analogen Schaltplänen am eigenen Leib spüren. Gleichzeitig bietet sie CISOs, IT-Sicherheitsbeauftragten und IT-Leitern die nötige Orientierung, wie sie die dringend benötigte Asset-Transparenz für NIS 2 und den Cyber Resilience Act (CRA) erlangen, ohne die Produktion zu lähmen. Auch Verantwortliche für die digitale Transformation (Digital Manufacturing Manager) und IT/OT-Infrastruktur-Leads erfahren hier, warum eine getrennte statt einer gemeinsamen IT/OT-Datenbank oft der cleverere Start ist, um die Anlagenverfügbarkeit und Ersatzteilplanung sofort auf ein neues Level zu heben. Viel Spaß beim Hören!
Interessante Shownotes für dich:
- Weitere Infos zu OT-Asset-Management
https://www.sichere-industrie.de/handlungsfelder/ot-asset-management/
- Michael Grollmus auf LinkedIn
https://www.linkedin.com/in/michael-grollmus/- Max Weidele auf LinkedIn
https://www.linkedin.com/in/max-weidele-ot-security/
- Sichere Industrie auf LinkedIn:
- Link Sichere-Industrie LinkedIn
Intro: Music by raspberrymusic
https://pixabay.com/music/funk-feel-good-upbeat-percussion-logo-388050/
The podcast and artwork embedded on this page are from Michael Grollmus, Max Weidele, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Sell the Value, Not the Fear: Funding OT Security and Getting Ready for Post-Quantum
Podcast: PrOTect It All (LS 28 · TOP 10% what is this?)Episode: Sell the Value, Not the Fear: Funding OT Security and Getting Ready for Post-QuantumPub date: 2026-11-02Get Podcast Transcript →powered by …
Show notes
Podcast: PrOTect It All (LS 28 · TOP 10% what is this?)
Episode: Sell the Value, Not the Fear: Funding OT Security and Getting Ready for Post-Quantum
Pub date: 2026-11-02
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationWork with Aaron: https://protectitallpod.com/work/
The book: https://protectitallpod.com/book/
This episode: https://protectitallpod.com/ep130/
The OT Security Starter Kit: https://protectitallpod.com/starter-kit/You do not need to scare anyone to get OT security funded. Shaun Six, President of UTSI International, makes the case for selling the value instead of the fear.
Shaun spent about a decade on the operator side before his company fell into cybersecurity, and he and Aaron cover the ground in between: who is leaving the OT workforce and who is coming in, losing engineers to venture-funded apps, where to put the X and what OT expertise is actually worth, a one-page budget the board will read, and why a water district's cyber budget competes with a police cruiser. The last third is post-quantum readiness for long-lived control systems: pair the retiring expert with a junior, and build the inventories, including a cryptographic bill of materials, while you are out in the plant.
Key takeawayYou do not need to scare anyone to get OT security funded or understood. Put what you spent, what you got and what you are asking for on one page. Pair the people who are about to retire with the people who are just arriving and have them do the inventory together. And while you are out there, build the lists (including cryptographic) that tell you what is actually in the plant.
Chapters- 0:00 Intro
- 0:19 Welcome and introduction
- 0:55 From oil and gas operator to CEO: how UTSI fell into cybersecurity
- 2:16 Deploying connected equipment, and learning the exposures later
- 3:54 Aaron: learning from the intern, and "stop when unsure"
- 7:34 Why OT people are humbler: the risk profile starts with people
- 9:33 The workforce gap: who is leaving and who is coming in
- 11:12 Quantum at the conference: a myth on one side, a research team on the other
- 12:46 Losing engineers to venture-funded apps
- 13:42 Getting people into OT: Mike Holcomb, ICS Village and community colleges
- 15:49 Entry level with five years of experience
- 17:00 Physical I/O on the show floor, and the pay problem
- 18:22 Maslow's hierarchy and the 16 critical infrastructure sectors
- 20:33 The value gap: the expert with the hammer, and the five-day assessment
- 24:38 Where to put the X, fixed price, and the three-day fix
- 26:57 Quantifying the value: a trusted advisor, not selling fear
- 28:42 The one-page budget for the board
- 29:42 Water districts and city council budgets
- 31:08 Selling availability and reliability, not "cyber"
- 33:09 Cyber safety is physical safety: educating the board
- 34:30 Water: a lower-cost assessment for utilities
- 36:07 How Shaun got into quantum: the box he could not test
- 37:29 A book for CISOs: quantum and cryptography for non-specialists
- 38:51 Why AI and quantum are accelerating each other
- 41:59 Timelines for post-quantum plans
- 43:47 "Moore's law is dead" and the book behind the term
- 44:06 Aaron: what should listeners ask their boards this budget season
- 45:01 Insurance, assessments and standard frameworks
- 45:48 Pair the retiring expert with a junior
- 47:32 Segmentation, deprecation and a migration you have tested
- 48:01 How to find Shaun and UTSI
- 50:34 Close
Shaun Six is the President of UTSI International, a Houston-based leader in OT cybersecurity and ICS engineering. A recognized voice on OT innovation and quantum, Shaun is a frequent speaker and panelist at industry events and has spoken on quantum cryptography at several conferences. He has entered a joint venture with Quantum River to provide an entropy-as-a-service platform, including specialized blockchain technology services, and UTSI has partnered with SeQure Quantum to apply QRNG products in OT environments.
- UTSI International: https://utsi.com/
- UTSI on LinkedIn: https://www.linkedin.com/company/utsiinternational
- Shaun on LinkedIn: https://www.linkedin.com/in/shaunsix/
- A Practical Path to Post-Quantum Readiness in Operational Technology (Automation.com): https://www.automation.com/article/a-practical-path-post-quantum-readiness-operational-technology
- What OMB Memorandum M-26-15 Requires for Your Agency's PQC Migration Plan: https://www.zscaler.com/blogs/product-insights/what-omb-memorandum-m-26-15-requires-your-agency-pqc-migration-plan
- Post-Quantum Leadership: Knowledge and Practical Perspectives by Dr. Georgianna Shea and Adam C. Firestone, the book Shaun recommends for CISOs: https://www.amazon.com/dp/B0H3H72RHX
- Quantum Supremacy: How the Quantum Computer Revolution Will Change Everything by Michio Kaku: https://www.amazon.com/dp/B0B8HCLTYY
- Shaun's Grok deep dive, military facilities and 90-day self-sufficiency: https://grok.com/share/c2hhcmQtMw_71698ae4-f820-4205-862f-312b4dc36f38
- Recent cold wallet hacks: https://www.google.com/search?q=cold+wallet+hack+recent
- Recent cold wallet hacks, Ledger: https://www.google.com/search?q=cold+wallet+hack+recent+ledger
Learn more about PrOTect IT All:
Work with Aaron: https://protectitallpod.com/work/
The book: https://protectitallpod.com/book/
This episode: https://protectitallpod.com/ep130/
The OT Security Starter Kit: https://protectitallpod.com/starter-kit/
Support the show: https://protectitallpod.com/go/support/podcast
YouTube: https://www.youtube.com/@PrOTectITAll
Email: [email protected]
X: https://twitter.com/protectitall
Facebook: https://facebook.com/protectitallpodcastTo be a guest or suggest a guest or episode, email [email protected].
Please leave us a review on Apple or Spotify:
Apple: https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124
Spotify: https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4
The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.#72 - Vernetztes Auto: Cybersicherheit auf vier Rädern – mit Richard Goebelt
Podcast: Update verfügbarEpisode: #72 - Vernetztes Auto: Cybersicherheit auf vier Rädern – mit Richard GoebeltPub date: 2026-11-02Get Podcast Transcript →powered by Listen411 - fast audio-to-text and …
Show notes
Podcast: Update verfügbar
Episode: #72 - Vernetztes Auto: Cybersicherheit auf vier Rädern – mit Richard Goebelt
Pub date: 2026-11-02
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization
Bundeamt für Sicherheit in der InformationstechnikAutos können heute selbstständig bremsen, einparken und mit Smartphones kommunizieren. Aber können sie auch gehackt werden? Je smarter unsere Fahrzeuge werden, desto wichtiger wird auch ihre Cybersicherheit. Moderne Autos sind Computer auf Rädern – und bieten damit eine Angriffsfläche. In dieser Folge von „Update verfügbar“ sprechen wir mit Richard Goebelt vom TÜV-Verband darüber, welche digitalen Risiken im Auto lauern, wie sicher unsere Daten dort sind und was wir selbst für mehr Schutz tun können.
Eine Folge über… • Autos als rollende Computer • neue Angriffsflächen durch Apps und Funkverbindungen • Sicherheitsupdates über viele Fahrzeugjahre • Datenschutz beim Koppeln des Handys • Fahrassistenten und ihre Grenzen • den digitalen Check bei der Hauptuntersuchung
Können eure Autos zur Zielscheibe für Hacker werden – und was könnt ihr dagegen tun? Jetzt reinhören.
Weiterführende Informationen:
Vernetztes Fahren – Chancen und Risiken: https://www.bsi.bund.de/DE/Themen/Verbraucherinnen-und-Verbraucher/Informationen-und-Empfehlungen/Internet-der-Dinge-Smart-leben/Vernetztes-Fahren/vernetztes-fahren_node.html
Branchenlagebild Cybersicherheit im Straßenverkehr: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/Branchenlagebild/Cybersicherheit_Strassenverkehr_2025.pdf?__blob=publicationFile&v=11
TÜV-Verband: https://www.tuev-verband.de/
Transkript: https://multimedia.gsb.bund.de/BSI/Podcast/BSI-PodcastFolge72_Transkript_barr.pdf
Kontakt: • Website https://www.bsi.bund.de/ • Instagram / bsi_bund
• Mastodon https://social.bund.de/@bsi • E-Mail [email protected]
The podcast and artwork embedded on this page are from Bundesamt für Sicherheit in der Informationstechnik, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.1/4 Contexto del riesgo de la IA en la digitalización industrial
Podcast: Casos de Ciberseguridad IndustrialEpisode: 1/4 Contexto del riesgo de la IA en la digitalización industrialPub date: 2026-11-02Get Podcast Transcript →powered by Listen411 - fast audio-to-text and …
Show notes
Podcast: Casos de Ciberseguridad Industrial
Episode: 1/4 Contexto del riesgo de la IA en la digitalización industrial
Pub date: 2026-11-02
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization
En este episodio se aborda el cambio en el perfil de riesgo cuando las organizaciones industriales incorporan IA sobre procesos ya digitalizados, pasando de automatizar tareas a introducir sistemas que recomiendan, priorizan o apoyan decisiones.
The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Black October
Podcast: OT After HoursEpisode: Black OctoberPub date: 2026-10-30Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIt has been quite the month for cybersecurity vulnerabilities …
Show notes
Podcast: OT After Hours
Episode: Black October
Pub date: 2026-10-30
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationIt has been quite the month for cybersecurity vulnerabilities, but is there more to it than the doom and gloom?
In this episode of OT After Hours, Ken Kully (Delivery Readiness at Rockwell Automation) is joined by Tyler Bergman (Manager, SecureOT Managed Services at Rockwell Automation) to discuss "Black October" and other scary cybersecurity stories.
Key Takeaways
- Automation Fair And SecureOT Platform: Rockwell's Automation Fair in happening in Boston from November 16–19, 2026; it's a broad showcase of Rockwell Automation technologies, partners, robotics, educational efforts, and the SecureOT Platform.
- Physical Security In Industrial Facilities: Can you envision walking into a gas plant unnoticed and finding a decommissioned control room containing powered-on workstations? Physical security is still an important OT control!
- PHP Vulnerability And Availability Risk: Of course, we had to discuss the recent PHP vulnerability. Thus far, observed exploitation doesn't seem to quite match the fear and hype around "Black October," but it's good to be vigilant.
- Embedded Software And SBOM Management: PHP vulnerabilities may affect applications indirectly through embedded web servers or bundled components, making software-bill-of-materials visibility, vendor coordination, and dependency management necessary for accurate exposure assessment.
- AI-Accelerated Cybersecurity Arms Race: If "Black October" showed anything, it is that AI is an accelerator for both attackers and defenders, leading to faster vulnerability discovery and exploit development. OT cybersecurity teams will need to become more proactive about legacy assets and maintenance.
Subscribe
Follow and subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts.
Get in Touch
🔗 LinkedIn | YouTube | X | Contact Us
The podcast and artwork embedded on this page are from Rockwell Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Jake Braun on DEF CON Franklin, Water Cybersecurity
Podcast: Nexus: A Claroty Podcast (LS 32 · TOP 5% what is this?)Episode: Jake Braun on DEF CON Franklin, Water CybersecurityPub date: 2026-10-28Get Podcast Transcript →powered by Listen411 - fast audio-to-text …
Show notes
Podcast: Nexus: A Claroty Podcast (LS 32 · TOP 5% what is this?)
Episode: Jake Braun on DEF CON Franklin, Water Cybersecurity
Pub date: 2026-10-28
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationJake Braun, cofounder of DEF CON Franklin and former White House acting Principal Deputy National Cyber Director, joins the Nexus Podcast to discuss cybersecurity for water and wastewater utilities.
DEF CON Franklin is a volunteer-driven program that connects security researchers and hackers associated with the DEF CON conference with U.S.-based water wastewater utilities and K-12 schools. This summer at DEF CON, DEF CON Franklin and the National Rural Water Association announced the Water Watch Center, which provides support to water utilities in the event of a breach.
Jake explains how both initiatives are progressing, the cybersecurity challenges smaller water utilities face, and what the government can do to help from a policy and regulatory standpoint.
Subscribe and listen to the Nexus Podcast here.
The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Managed Services for OT: When to Outsource Your Cyber Defense
Podcast: Industrial Cybersecurity InsiderEpisode: Managed Services for OT: When to Outsource Your Cyber DefensePub date: 2026-10-28Get Podcast Transcript →powered by Listen411 - fast audio-to-text and …
Show notes
Podcast: Industrial Cybersecurity Insider
Episode: Managed Services for OT: When to Outsource Your Cyber Defense
Pub date: 2026-10-28
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationYour plant has monitoring tools. But is anyone watching what they find?
Dino Busalachi sits down with Justin Carlson, Chief Strategy Officer at Kasm, to talk about one of the biggest challenges in manufacturing cybersecurity: a shrinking pool of people who understand both the plant floor and security. They explore when managed services make sense, what decisions should always stay with your own team, and why buying more tools is not enough.
The conversation also covers consolidating remote access into a single controlled entry point, keeping vendors and integrators aligned, protecting legacy systems without disrupting production, and funding OT cybersecurity through capital projects so security becomes part of the work instead of an unplanned expense.
For CISOs, CIOs, plant managers, and engineering leaders, the takeaway is practical: know what is in your environment, keep that inventory current, and use your next plant project to become more secure.
Industrial Cybersecurity Insider brings practical conversations on securing manufacturing and critical infrastructure.
Chapters:
- (00:00:00) Industrial Cybersecurity Insider: Securing Industrial Operations
- (00:01:00) Kasm’s Origins and Ephemeral Computing Environments
- (00:04:00) Secure Remote Access and the OT Workforce Gap
- (00:07:00) Consolidating Plant Access and Protecting Legacy Systems
- (00:11:00) Funding OT Cybersecurity Through Capital Projects
- (00:17:00) Managed Services and the Business Case for Outside Expertise
- (00:20:00) Browser Based Access and Third Party Oversight
- (00:24:00) AI, Cyber Threats, and Manufacturing Downtime
- (00:31:00) Asset Inventory, Capital Planning, and Taking Action
Links And Resources:
- Want to Sponsor an episode or be a Guest? Reach out here.
- Industrial Cybersecurity Insider on LinkedIn
- Cybersecurity & Digital Safety on LinkedIn
- BW Design Group Cybersecurity
- Justin Carlson on LinkedIn
- Dino Busalachi on LinkedIn
- Craig Duckworth on LinkedIn
Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!
The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.138: From Army Engineer to Critical Infrastructure Security with Marcus Sachs
Podcast: (CS)²AI Podcast Show: Control System Cyber SecurityEpisode: 138: From Army Engineer to Critical Infrastructure Security with Marcus SachsPub date: 2026-10-27Get Podcast Transcript →powered by Listen411 …
Show notes
Podcast: (CS)²AI Podcast Show: Control System Cyber Security
Episode: 138: From Army Engineer to Critical Infrastructure Security with Marcus Sachs
Pub date: 2026-10-27
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationFrom Army Engineer to Critical Infrastructure Security with Marcus Sachs
Marcus Sachs, SVP and Chief Engineer at the Center for Internet Security, joins Derek Harp for a long-overdue conversation about how a civil engineer in the Army ended up securing critical infrastructure. Marcus traces his path from an unusual start across Alabama, Pakistan and Germany, through ROTC and the Army Engineers, to the events of the mid-1990s that gave rise to the formal term "critical infrastructure." He explains what Y2K taught the military about inventory and interdependencies, how far OT security has come since SCADA was the term of art, and the advice he would give people entering the field today. They close with the Enigma machines he brings to Level Zero and why technology alone never covers all the bases.
Guest: Marcus Sachs, SVP and Chief Engineer, Center for Internet Security Host: Derek Harp, Founder and Chairman, (CS)²AI
Chapters: 00:42 Welcome and introducing Marcus Sachs 02:24 An unusual starting point: Alabama, Pakistan and Germany 05:53 ROTC, the Cold War and early hacking in Germany 09:30 Choosing engineering and the Army Engineers 14:59 Fort Belvoir: staying behind to fix things 20:00 Physics, culture and new technology in OT 22:48 From civil engineering to cyberspace 27:31 Oklahoma City, PDD 63 and critical infrastructure 31:00 The 1998 intrusion, Y2K and the great inventory 35:48 How far OT security has come 40:51 Crossing paths: a Navy flagship and Haiti 42:34 Advice for people entering the field 51:20 Enigma machines and mechanical encryption 54:39 People, process and technology: the work never ends 56:36 Closing thoughts and thanks
Produced by (CS)²AI (Control System Cyber Security Association International).
The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.247 Days Later
Podcast: Security BreachEpisode: 247 Days LaterPub date: 2026-10-23Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationSend us Fan MailRecently, the conversation in industrial …
Show notes
Podcast: Security Breach
Episode: 247 Days Later
Pub date: 2026-10-23
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationRecently, the conversation in industrial cybersecurity has shifted from detection to response. The onset of faster-moving and easier to scale attacks driven by AI makes detection significantly more difficult, and faced with limited resources, it’s easy to understand why many are embracing the mantra of “it’s not if, but when you’re attacked” and allocating more time and money to their response capabilities.
However, this episode's guest offers some insight on the flaws of downplaying the detection element of cybersecurity. Chris Nyhuis is the Co-Founder and CEO of Vigilant. Listen as he offers perspective on:
• Establishing priorities and applying them to tactics like segmentation when addressing the expanding threat landscape.
• What data flow can tell you about soft spots on your network. • Why detection is so critical in not only developing strategies for your response, but in understanding the right ways to respond.
• How the right detection tools can help minimize the impacts of breaches that often result from dwelling, or living-off-the-land attacks.
• And, or course, the best ways to leverage AI in developing and implementing cybersecurity strategies.
To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at [email protected].
As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts.
Click Here to Become a Sponsor.To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast.
If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at [email protected].
The podcast and artwork embedded on this page are from Eric Sorensen, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Network Security - Don't Fix the Engine While The Plane is Flying
Podcast: Security BreachEpisode: Network Security - Don't Fix the Engine While The Plane is FlyingPub date: 2026-10-08Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationSend us …
Show notes
Podcast: Security Breach
Episode: Network Security - Don't Fix the Engine While The Plane is Flying
Pub date: 2026-10-08
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationIf there’s one area where the old adage of “you have to see it to believe it” might not resonate as strongly, it’s OT cybersecurity. I say this because one of the biggest challenges for our sector continues to be visibility.
Although it’s clearly one of those blocking and tackling-type elements, identifying and securing all our assets, endpoints, connections and devices is tough. And not only do we know this – so do the bad guys, and they’re continuing to find new and creative ways to leverage these defensive soft spots in stealing data, extorting funds and shutting down operations.
That’s why I was excited to bring in this episode's guest. Mitch Densley is a Principle Solutions Architect for Opengear. Watch/listen as we discuss:
- Avoiding the temptation to "fix the engine while the airplane is flying" when it comes to network patching.
- Why reliability and resiliency need to be treated like a "first class citizen" instead of being relegated to lower priorities.
- Using AI to negate some of industrial cybersecurity's lacking resources.
- The tools and strategies widely available to help manufacturers get a better vantage point of the expanding threat landscape - on their network and with OT assets.
- Identifying and managing network vulnerabilities stemming from legacy infrastructure.
To catch up on past episodes, you can go to Manufacturing.net,IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at [email protected].
As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts.
Click Here to Become a Sponsor.To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast.
If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at [email protected].
The podcast and artwork embedded on this page are from Eric Sorensen, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Water Treatment Hacks Reflect Larger OT Threats
Podcast: Security BreachEpisode: Water Treatment Hacks Reflect Larger OT ThreatsPub date: 2026-09-23Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationSend us Fan MailAlthough …
Show notes
Podcast: Security Breach
Episode: Water Treatment Hacks Reflect Larger OT Threats
Pub date: 2026-09-23
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationAlthough the need to defend the networks, data and endpoints of critical infrastructure dates back to the first time a PLC was connected to an HMI, the realization of how damaging such a compromise could be was probably Stuxnet.
And while we’ve progressed enough to typically spot an unknown or malicious player armed with a suspicious USB, the threat landscape has expanded, and the bad actors have evolved.
Combining those factors with a lack of funds, training, expertise and resources has opened the doors to ransomware groups and state-sponsored hackers to infiltrate, shutdown or compromise infrastructure operations across the globe, and more recently, across the United States.
These growing threats were recently on display when over 100 water treatment facilities across 12 states experienced temporary shutdowns due to breeches believed to have been carried out by Iranian hacking groups. Here to discuss the rise in these attacks, and what they mean in the broader scope of industrial cybersecurity is Jen Sovada, General Manager for Public Sector initiatives at Claroty.
Listen as we discuss:
- The blocking and tackling of OT security that has become vital in defending critical assets on any plant floor.
- How Watershed 250 is working to help utilities protect their OT infrastructure.
- How the ongoing IT/OT divide is hurting new cybersecurity initiatives.
- The proper implementation of strategies like microsegmentation, artificial intelligence tools.
- How, despite all the challenges facing industrial cybersecurity, she can still sleep at night.
To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at [email protected].
As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts.
Click Here to Become a Sponsor.To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast.
If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at [email protected].
The podcast and artwork embedded on this page are from Eric Sorensen, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.Small Utility, Big Target: Rethinking Cyber Resilience in Water Treatment
Podcast: Trust Me, It's Air-GappedEpisode: Small Utility, Big Target: Rethinking Cyber Resilience in Water TreatmentPub date: 2026-09-21Get Podcast Transcript →powered by Listen411 - fast audio-to-text and …
Show notes
Podcast: Trust Me, It's Air-Gapped
Episode: Small Utility, Big Target: Rethinking Cyber Resilience in Water Treatment
Pub date: 2026-09-21
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationA coordinated nation-state campaign has hit more than 100 water utilities since it was first spotted near Minneapolis two months ago, prompting warnings from CISA and the FBI andtargeting one thing in particular: publicly addressable PLCs and industrial automation systems.
In this episode, GrayMatter's Cyber Practice Director Scott Christensen sits down with water and SCADA veteran Aaron Cromer, along with Zach Vera and Dan Topley from AMDT, makers of Octoplant, to unpack what's actually happening in the field.
They dig into why "we're too small to be a target" no longer holds up (it was the suburban utilities near major cities that got hit first), why claiming you're air-gapped rarely means you actually are, and why utilities should focus more on recovery. Aaron, Zach and Dan walk through what real asset awareness looks like, how change management separates a good recovery from a scramble.
Visit graymattersystems.com.
The podcast and artwork embedded on this page are from GrayMatter, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.The EU CRA and OEMs
Podcast: OT After HoursEpisode: The EU CRA and OEMsPub date: 2026-09-16Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationHow can industrial device OEMs comply with the new EU …
Show notes
Podcast: OT After Hours
Episode: The EU CRA and OEMs
Pub date: 2026-09-16
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationHow can industrial device OEMs comply with the new EU CRA and its requirements for digital devices sent to the European market?
In this episode of OT After Hours, Ken Kully (Delivery Readiness at Rockwell Automation) is joined by Lance Lamont (Special Projects & Protocols Team Lead at Rockwell Automation), Tyler Bergman (Principal Security Consultant at Rockwell Automation), Zach Woltjer (Technical Account Manager), and by special guests Maria Else (Global Product Manager for Industrial Cybersecurity) and Stefan Turi (EMEA Cybersecurity Lead for OEMs) to discuss the EU Cyber Resilience Act (CRA), its implications for industrial device original equipment manufacturers (OEMs), and how the SecureOT™ solution suite can help drive both compliance and security in response.
Key Takeaways
- EU Cyber Resilience Act Scope: The CRA applies broadly to products with digital elements placed on the EU market, including industrial machines. These responsibilities extend across manufacturers, OEMs, system integrators, importers, distributors, and end users.
- OEM Compliance And Product Lifecycle: CRA obligations include having a secure-by-design processes, vulnerability handling, documentation, risk analysis, and support throughout the product lifecycle. OEMs must establish repeatable processes rather than simply purchase security technology.
- Asset Inventory And Vulnerability Traceability: Under the CRA, maintaining a durable record of shipped equipment, its configuration, ownership, location, and software or firmware versions so OEMs can identify affected customers and respond to newly disclosed vulnerabilities across their installed base.
- Vulnerability Remediation And Patching: Vulnerability findings should be prioritized and remediated without disrupting industrial production, including update limitations for embedded devices, vendor dependencies, maintenance windows, and the need for tested procedures.
- Digital Twins And Security Validation: Digital twins can be used to model manufacturing lines and test patches before deployment. Rockwell's Emulate3D and associated consulting capabilities provide a solution for validating dependencies and developing secure operational procedures.
- Cybersecurity Governance And Safety: CRA compliance requires sustained organizational ownership and collaboration, while cybersecurity must be treated as part of machine safety because exploitation can affect operators, equipment, production, and the surrounding environment.
Subscribe
Follow and subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts.
Get in Touch
🔗 LinkedIn | YouTube | X | Contact Us
The podcast and artwork embedded on this page are from Rockwell Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.What a Water Cyber Event Teaches You About Building an OT Security Program
Podcast: Trust Me, It's Air-GappedEpisode: What a Water Cyber Event Teaches You About Building an OT Security ProgramPub date: 2026-09-08Get Podcast Transcript →powered by Listen411 - fast audio-to-text and …
Show notes
Podcast: Trust Me, It's Air-Gapped
Episode: What a Water Cyber Event Teaches You About Building an OT Security Program
Pub date: 2026-09-08
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationHost Scott Christensen, cyber practice director for GrayMatter, talks with Dr. Eric Dowdy, IT director and data systems manager for City of Fort Collins Water, about building an OT cybersecurity program in the aftermath of a real water sector cyber event. Dowdy, who joined the utility after the incident, shares what it took to lead recovery, win board-level support for cybersecurity funding, and break down the historic silos between IT and OT teams. The episode covers steps for any critical infrastructure organization: getting plugged into threat intelligence networks, using the NIST framework to benchmark risk as federal cyber regulations catch up to water and wastewater utilities, and building a multiyear cybersecurity roadmap instead of chasing every vulnerability at once.
What listeners will learn:
- How a water utility recovers operationally and culturally after a cyberattack
- Why board buy-in and funding are critical to sustaining an OT cybersecurity program
- Which threat intelligence sources matter most for water and wastewater utilities
- How the NIST framework helps utilities prepare for coming federal cybersecurity regulations
- How to build IT/OT collaboration instead of an adversarial "office of no" dynamic
The podcast and artwork embedded on this page are from GrayMatter, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.The Maginot Line & OT Cybersecurity: Lessons in Defence in Depth
Podcast: Cyber Brews - The Operational Technologies PodcastEpisode: The Maginot Line & OT Cybersecurity: Lessons in Defence in DepthPub date: 2026-09-03Get Podcast Transcript →powered by Listen411 - fast …
Show notes
Podcast: Cyber Brews - The Operational Technologies Podcast
Episode: The Maginot Line & OT Cybersecurity: Lessons in Defence in Depth
Pub date: 2026-09-03
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationWhat does a French military fortification from the 1930s have to teach us about OT cybersecurity? Quite a lot, actually.
In this episode of Cyber Brews, we take a trip back to the Second World War and explore the story of the Maginot Line a hugely engineered defensive system that largely worked as designed, but failed to stop the attack because the attacker didn't follow the route its designers expected.
We explore what this can teach us about modern OT and industrial cybersecurity, including why having a firewall doesn't mean you have a security strategy, why defence in depth is about more than simply adding more security products, and why organisations need to plan for what happens when a control fails.
We discuss:
- Network segmentation, zones and conduits
- Identity, authentication and least privilege
- Physical and application security
- Monitoring, detection and incident response
- Recovery, resilience and maintaining safe operations
- And perhaps most importantly challenging the assumptions behind our security strategy.
Because the lesson of the Maginot Line isn't that walls don't work. It's that a wall is only useful if you've thought about what happens when someone gets around it.
So grab a brew and join us for another Cyber Brews story.
The podcast and artwork embedded on this page are from Dave A. and Chris F., which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.How DARPA Is Preparing for the Next Technological Surprise with Patrick Lincoln
Podcast: Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure (LS 30 · TOP 5% what is this?)Episode: How DARPA Is Preparing for the Next Technological Surprise with Patrick LincolnPub …
Show notes
Podcast: Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure (LS 30 · TOP 5% what is this?)
Episode: How DARPA Is Preparing for the Next Technological Surprise with Patrick Lincoln
Pub date: 2026-09-01
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationCybersecurity has spent decades in a reactive cycle: find a vulnerability, patch it and wait for the next one. Dr. Patrick Lincoln joins Frank Cilluffo to discuss DARPA's effort to break that cycle by building systems that are inherently secure, private and resilient from the start. They explore lessons from the AI Cyber Challenge, the role of mathematical proof in eliminating vulnerabilities and the challenge of making complex systems trustworthy even when individual components fail. The conversation also examines how research can move beyond isolated demonstrations to strengthen the technologies and infrastructure society increasingly depends on.
Main Topics
- Preventing and providing technological surprise
- IPTO's return to computer science foundations
- Inherent security and privacy
- AI-enabled vulnerability discovery and patching
- Formal methods and mathematical proof
- Trust and resilience in megasystems
- Moving research into real-world use
Key Quotes
"This back and forth or cat and mouse game has been going on a long time. I'm getting tired of that. And so we're trying to find new foundations to build inherently secure systems and inherently private systems." — Patrick Lincoln
"We need power tools to let people do more, better, faster, with quicker reaction time and higher assurance that what they do actually does lead to really fixing the problem and not creating new problems, not causing harm to the system." — Patrick Lincoln
"Software is difficult. And so how can you get to high assurance for a complex system involving the analog systems, the sensors and actuators, the digital systems and hardware, and the digital systems and software? And there are processes for this, some of those involving mathematical proof and formal methods." — Patrick Lincoln
"If you've got a million subsystems, there will be failures, and perhaps some of them even maliciously so. ... By building these compositional—think internal firewalls—within a complex system, and ways that we can understand the emergent properties of a large collective of systems, ... we can then predict and therefore give assurance about its behavior long term." — Patrick Lincoln
"My favorite answer to this problem, the world's most urgent critical problem, I'll say the DARPA answer is improving our collective ability to solve urgent critical problems." — Patrick Lincoln
Links and Resources
- DARPA Information Processing Techniques Office
- Patrick Lincoln biography
- DARPA AI Cyber Challenge
- PROVERS formal-methods program
- Resilient Software Systems Capstone
About the Guest:
Patrick Lincoln is director of the Information Processing Techniques Office at DARPA, where he leads work spanning artificial intelligence, cybersecurity and privacy, and resilient complex systems.
Before joining DARPA, Lincoln held senior research leadership roles at SRI, an independent nonprofit research and development institute, where he led multidisciplinary work across computing, cybersecurity, artificial intelligence, and advanced systems research.
Lincoln holds a Ph.D. in computer science from Stanford University and a B.S. in computer science from MIT.
The podcast and artwork embedded on this page are from Frank Cilluffo / McCrary Institute, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.CI Fortify: Isolation, Recovery and a Minimum Viable America with CISA's Matt Rogers
Podcast: Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure (LS 30 · TOP 5% what is this?)Episode: CI Fortify: Isolation, Recovery and a Minimum Viable America with CISA's Matt RogersPub …
Show notes
Podcast: Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure (LS 30 · TOP 5% what is this?)
Episode: CI Fortify: Isolation, Recovery and a Minimum Viable America with CISA's Matt Rogers
Pub date: 2026-08-25
Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarizationIf communications fail and operational technology is damaged during a cyber attack, critical infrastructure operators may have to keep essential services running without internet access, outside assistance or readily available replacement hardware.
Matt Rogers of the Cybersecurity and Infrastructure Security Agency (CISA) explains how CI Fortify prepares water, energy and transportation systems for that scenario. He and Frank Cilluffo discuss operating through compromise, uncovering hidden dependencies and testing whether critical systems can isolate and recover before a crisis arrives.
Main Topics
- CI Fortify and emergency planning
- Operating through compromise
- Communications outages
- Hidden IT/OT dependencies
- Isolation and functional testing
- OT sovereignty
- Secure by Design for OT
- Public service and technical talent
Key Quotes
"If there is another Colonial Pipeline type incident again... how do we make sure that their incentive structure isn't I go from 100 to 0, it's that I go from 100 to 30? 40, where that... X is defense critical infrastructure, it's health and public safety, because we just can't afford to go to zero for our minimal services. We need sort of a minimum viable America." — Matt Rogers
"Nobody is coming to save you unless you've prearranged to be saved, which is a bit grim. But in a communications outage, you can't call for help." — Matt Rogers
"The more you tell me you have an air gap, the less I believe you... It's just really unsustainable for a lot of organizations.." — Matt Rogers
"Security doesn't have to be frictional and hard. The goal should be to design security such that you are kind of the well-lit path, the easy path, the default state is the secure thing to do." — Matt Rogers
Links and Resources
- CISA: CI Fortify
- CISA: Secure Connectivity Principles for Operational Technology
- CISA: Barriers to Secure OT Communication: Why Johnny Can't Authenticate
- CISA: Secure by Design
About the Guest:
Matthew Rogers, PhD is an Industrial Control Systems cybersecurity expert in CISA's Office of the Technical Director and leads the agency's Secure by Design initiative for Operational Technology. He earned his bachelor's degree in software engineering from Auburn University and later completed a DPhil in Cyber Security at the University of Oxford as a Rhodes Scholar, focusing on securing legacy OT networks in vehicles. Before joining CISA, Rogers was a founding engineer at Shift5 and worked on broader ICS cybersecurity efforts at MITRE. His work at CISA focuses on translating ICS research and development into practical capabilities for critical infrastructure.
The podcast and artwork embedded on this page are from Frank Cilluffo / McCrary Institute, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
These are the latest 40 of 300 episodes. You’ll find older episodes in the podcast’s feed.
Similar podcasts
More Technology podcasts
Is this your podcast?
Confirm it with an entry in your feed: you get a code here, add it as podcast:txt to the channel of your feed, and we check it. Your podcast is then shown as “verified” on SoundNode.