Podcast
@BEERISAC: OT/ICS Security Podcast Playlist
Hosted by Anton Shipulin / Listen Notes · EN
A curated playlist of Operational Technology (OT) and Industrial Control Systems (ICS) cybersecurity podcast episodes in any language, compiled by ICS security enthusiasts. Missing something? Contact Anton Shipulin on LinkedIn. Subscribe for updates!
139episodes
Episodes
Newest firstAll episodes
EP 90: Your Weakest Vendor Is Someone’s Biggest Problem
4d ago00:35:42Tap to summarizePodcast: Error Code (LS 27 · TOP 10% what is this?)Episode: EP 90: Your Weakest Vendor Is Someone’s Biggest ProblemPub date: 2026-07-22Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationWhy one vendor breach can take down dozens of banks — third-party risk, AI-driven attacks, and why patching fast may beat patching safe today. Jeffrey Wheatman, Senior Vice President, Cyber Risk Strategist at Black Kite, explains.The podcast and artwork embedded on this page are from Robert Vamosi, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
Securing AI and Digital Transformation with Schneider Electric
4d ago00:48:55Tap to summarizePodcast: Digital Transformation ViewpointsEpisode: Securing AI and Digital Transformation with Schneider ElectricPub date: 2026-07-22Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIn this episode, Larry O'Brien speaks with Schneider Electric cybersecurity leaders Zakarya Drias and Nasir Mundh about the critical role of cybersecurity in enabling successful industrial digital transformation initiatives. The conversation explores Schneider Electric’s approach to helping industrial organizations assess cyber risk, develop cybersecurity roadmaps, implement governance and security controls, and operate resilient OT environments through managed security services. Cybersecurity must be designed into digital transformation programs from the beginning rather than treated as an afterthought, particularly as cloud computing, IT/OT convergence, artificial intelligence, and connected operations expand the industrial attack surface. The discussion also addresses the challenges of protecting legacy industrial assets while modernizing operations, the importance of lifecycle management and compensating controls, and how AI can augment cybersecurity capabilities while still requiring human oversight and risk management.Would you like to be a guest on our growing podcast?Do you have an intriguing or thought provoking topic you'd like to discuss on our podcast? Please contact the Host, Colin Masson: cmasson@Arcweb.com (or the Producer Tom Cabot) TCabot@Arcweb.comView all the episodes here: https://thedigitaltransformationpodcast.buzzsprout.comThe podcast and artwork embedded on this page are from ARC Advisory Group, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
Plant Floor Cybersecurity Starts at the Top. Not the Server Room, with Robert Maxwell
5d ago00:30:16Tap to summarizePodcast: Industrial Cybersecurity InsiderEpisode: Plant Floor Cybersecurity Starts at the Top. Not the Server Room, with Robert MaxwellPub date: 2026-07-22Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationFor industrial leaders responsible for keeping plants productive, connected, and secure, cybersecurity cannot sit only with IT. Robert Maxwell joins Dino to address the leadership and operational gaps that leave OT environments exposed, especially when aging control systems, diverse automation platforms, and decentralized plant operations are part of the picture. They discuss what it takes to move beyond fragmented ownership and point solutions: giving an accountable leader the authority to coordinate security across IT, OT, engineering, operations, and outside partners. The conversation covers practical priorities for building a durable cyber program, including organization-wide awareness, stronger visibility into industrial assets, and a security strategy that can keep pace with AI adoption. The takeaway is clear: cybersecurity is an operational investment that protects uptime, production, and long-term business resilience.Chapters:(00:00:00) Cybersecurity is a management responsibility(00:01:00) Robert Maxwell’s journey into cybersecurity(00:04:35) Why organizations need a clear cybersecurity owner(00:08:40) Building a long-term security strategy across the business(00:12:00) What happens when companies ignore cybersecurity(00:14:10) Why vendor-led security programs fall short(00:17:05) The IT and OT divide in manufacturing(00:20:00) AI, data protection, and the growing security challenge(00:23:25) Visibility gaps across manufacturing plants(00:26:20) Why leaders should view cybersecurity as an investmentLinks And Resources:Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityRobert Maxwell on LinkedInDino Busalachi on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
One Security am Flughafen: Wie der BER hybride Bedrohungen und Komplexität meistert | OT Security Made Simple
6d ago00:28:31Tap to summarizePodcast: OT Security Made SimpleEpisode: One Security am Flughafen: Wie der BER hybride Bedrohungen und Komplexität meistert | OT Security Made SimplePub date: 2026-07-21Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationKlaus Mochalski und Oliver Braun (SVP Corporate Security am Flughafen BER) diskutieren die immense Komplexität der Flughafensicherheit. Erfahren Sie, warum bei hybriden Bedrohungen klassisches Silodenken versagt und physische Sicherheit sowie Cybersicherheit als "One Security" zwingend vereint werden müssen. Zudem erklärt Braun, weshalb reine Compliance-Security nicht ausreicht und wie KRITIS-Betreiber durch abteilungsübergreifendes Training echte Resilienz aufbauen.Mehr zum Thema OT Security Made simple findet Ihr auf rhebo.com oder schreibt uns mit Euren Ideen, Fragen oder Gastvorschlägen an podcast@rhebo.com. The podcast and artwork embedded on this page are from Klaus Mochalski, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
Conficker Still Exists? The Hidden OT Malware Threat Putting Critical Infrastructure at Risk
1w ago00:45:30Tap to summarizePodcast: PrOTect It All (LS 27 · TOP 10% what is this?)Episode: Conficker Still Exists? The Hidden OT Malware Threat Putting Critical Infrastructure at RiskPub date: 2026-07-20Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationSome of the biggest cybersecurity threats to critical infrastructure aren't new - they've simply never gone away. In this episode of Protect It All, host Aaron Crow welcomes back Lesley Carhart for a fascinating conversation about why decades-old malware like Conficker continues to infect operational technology (OT) environments around the world. Drawing on nearly two decades of industrial incident response experience, they share real-world stories from the front lines of critical infrastructure, explaining why legacy systems, operational constraints, and workforce shortages continue to make remediation incredibly challenging. The discussion goes far beyond "just patch it," exploring the difficult risk decisions organizations face when uptime, safety, and cybersecurity all compete for priority. Aaron and Lesley also examine one of the industry's most pressing issues: the growing shortage of OT cybersecurity talent and the need to rebuild foundational technical skills for the next generation of defenders. Key Learnings: Why malware like Conficker still exists in modern OT environments The unique challenges of removing malware from industrial control systems Why patching isn't always possible in operational technology How legacy infrastructure creates long-term cybersecurity risk The growing OT cybersecurity skills gap - and how the industry can address it Practical lessons from real-world industrial incident response Key Moments: 05:47 Challenges with Old Industrial Systems 06:58 Struggles with malware cleanup 11:02 Challenges in Cyber Security Careers 16:19 Dealing with malware spread 17:53 Managing infection risk long-term 23:04 Challenges with nuclear hardware upgrades 27:05 Training the Next Tech Generation 29:33 Importance of Computer Basics 34:04 Discovering hidden technical issues 37:01 Troubleshooting in industrial environments 39:10 Malware and botnets era 42:20 Developing low-touch security solutions Whether you're responsible for manufacturing, utilities, energy, transportation, or any critical infrastructure environment, this episode provides practical insight into one of OT cybersecurity's longest-running challenges. Tune in to discover why yesterday's malware is still creating today's biggest industrial cybersecurity problems - and what organizations can do about it. About the guest : Lesley Carhart is a Principal Industrial Incident Responder at Dragos and a recognized expert in OT and industrial cybersecurity. With nearly two decades of experience in incident response, digital forensics, and threat hunting, they help organizations defend critical infrastructure from cyber threats targeting industrial control systems. Lesley is also a respected speaker, instructor, and advocate for cybersecurity education, regularly sharing their expertise with industry professionals and the next generation of defenders. How to connect Lesley: LinkedIn: https://www.linkedin.com/in/lcarhart/ Youtube: https://www.youtube.com/user/hacks4pancakes Bluesky : https://bsky.app/profile/hacks4pancakes.com Instagram: https://www.instagram.com/hacks4pancakes/ Website: https://tisiphone.net/ Learn more about PrOTect IT All: Email: info@protectitall.co Website: https://protectitallpod.com/ep115 X: https://twitter.com/protectitall YouTube: https://www.youtube.com/@PrOTectITAll FaceBook: https://facebook.com/protectitallpodcast To be a guest or suggest a guest/episode, please email us at info@protectitall.co Please leave us a review on Apple/Spotify Podcasts: Apple - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124 Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →Trust But Verify: Why Every Air-Gap Claim Deserves Scrutiny
2w ago00:30:19Tap to summarizePodcast: Industrial Cybersecurity InsiderEpisode: Trust But Verify: Why Every Air-Gap Claim Deserves ScrutinyPub date: 2026-07-14Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationThis week we're bringing back one of our most requested episodes, because the problem it covers hasn't gone away.Dino and Jim break down one of the most dangerous assumptions in industrial security: that OT environments are air-gapped and therefore safe. Through real examples from actual plant floors, they show exactly how that assumption falls apart, from cellular modems inside machine centers to third-party technicians on guest Wi-Fi to VPN concentrators IT doesn't know exist, and explain why the gap between IT and OT teams is just as much an organizational problem as a technical one. They also get into why point-in-time assessments aren't enough, where zero trust runs into its limits in industrial settings, and what continuous visibility on the plant floor actually looks like. If you're responsible for securing manufacturing or critical infrastructure, this one is as relevant today as when it was first recorded.Chapters:(00:00:00) - The Air Gap Myth: Introduction(00:03:00) - How OT Devices End Up Connected Without IT Knowing(00:07:00) - Why Plant Managers Bypass IT Security(00:12:00) - The Compliance and Insurance Stakes(00:15:00) - Why Zero Trust Struggles in OT Environments(00:17:00) - Bringing in Outside Experts to Find the Truth(00:20:00) - Supply Chain and Hidden Connectivity(00:24:00) - What Visibility Tools Reveal on the Plant Floor(00:26:00) - Wrap-Up: Trust But Verify, Then Monitor ContinuouslyLinks And Resources:Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityDino Busalachi on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →OT Cybersecurity: Why Trust Beats Technology | Jacob McCune | Ep 114
2w ago00:47:04Tap to summarizePodcast: PrOTect It All (LS 27 · TOP 10% what is this?)Episode: OT Cybersecurity: Why Trust Beats Technology | Jacob McCune | Ep 114Pub date: 2026-07-13Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationThe biggest challenge in OT cybersecurity isn't technology - it's earning trust. In this episode of Protect It All, host Aaron Crow sits down with Jacob McCune, a cybersecurity architect with more than 20 years of hands-on experience across both IT and OT environments. Jacob shares his unconventional journey from the help desk to securing critical infrastructure, highlighting the lessons that only real-world experience can teach. Together, Aaron and Jacob explore why communication, collaboration, and trust are often the deciding factors between successful cybersecurity programs and failed initiatives. The conversation also dives into the future of OT security, examining how AI, cloud technologies, and evolving architectures are changing industrial environments and why organizations need to rethink traditional approaches while keeping operational realities front and center. Key Learning: Why trust is the foundation of successful OT cybersecurity programs How practical experience shapes better cybersecurity decisions The importance of communication between IT, OT, and leadership teams Why compliance alone doesn't guarantee security How AI and cloud technologies are reshaping OT environments What the future may look like beyond traditional industrial architectures Key Moments: 05:18 Building a Power Plant Team 09:06 Balancing cybersecurity with business needs 11:01 Avoiding project delays during downtime 16:04 Importance of Broad Experience 17:59 A mentor's lesson on teamwork 23:41 Challenges with job postings and requirements 26:27 Managing risk and resource challenges 29:59 Helping Your Compliance Team 33:12 Dad's long career and expertise 36:44 Discussing cybersecurity risk management 39:44 Cloud resources and AI discussions 41:08 Exploring future solutions and technologies Whether you're building an OT security program, managing critical infrastructure, or looking to grow your cybersecurity career, this episode delivers practical lessons from years of real-world experience. Tune in to discover why people, trust, and communication remain the most valuable assets in modern cybersecurity only on Protect It All. About the guest: Jacob McCune is a cybersecurity architect with more than 20 years of experience across IT and OT environments, helping organizations secure critical infrastructure through practical, real-world security strategies. From starting his career on the help desk to designing enterprise security architectures, Jacob has built a reputation for bridging the gap between IT and OT through collaboration, communication, and trust. He is passionate about helping organizations move beyond compliance to build resilient cybersecurity programs that protect both people and operations. Links to connect Jacob : LinkedIn: https://www.linkedin.com/in/jake-mccune-33a08984/ CornCon Cybersecurity Conference : https://corncon.net/ Learn more about PrOTect IT All: Email: info@protectitall.co Website: https://protectitallpod.com/ep114 X: https://twitter.com/protectitall YouTube: https://www.youtube.com/@PrOTectITAll FaceBook: https://facebook.com/protectitallpodcast To be a guest or suggest a guest/episode, please email us at info@protectitall.co Please leave us a review on Apple/Spotify Podcasts: Apple - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124 Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
Safety, Security and Mobility: The Future of Industrial Operations
2w ago00:32:36Tap to summarizePodcast: PII PodcastEpisode: Safety, Security and Mobility: The Future of Industrial OperationsPub date: 2026-07-07Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationCalibration is becoming increasingly connected, with mobile technology playing a growing role in helping organisations improve efficiency, compliance and operational performance. However, deploying mobile solutions in industrial environments presents challenges that go far beyond those faced in traditional business settings. In this episode, we explore how industrial mobility is reshaping calibration and maintenance activities across manufacturing and the process industries. From hazardous and explosion-proof areas to highly regulated pharmaceutical facilities, organisations must balance the need for real-time access to calibration and asset data with stringent safety, security and compliance requirements. Joining us is Sami Koskinen, Director of Digital Transformation at Beamex, who discusses why successful mobile deployments require close collaboration between IT and operational teams, the impact of IT/OT convergence and the role of cybersecurity in supporting reliable, connected operations. We also examine the practical considerations for implementing mobile technology, the common pitfalls organisations should avoid and how a strategic approach can improve safety, reliability and productivity.The podcast and artwork embedded on this page are from Process Industry Informer, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
When the Grid Gets Hit: Inside OT Incident Response in Energy & Renewables
3w ago00:25:01Tap to summarizePodcast: Exploited: The Cyber Truth Episode: When the Grid Gets Hit: Inside OT Incident Response in Energy & RenewablesPub date: 2026-07-10Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIn this episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by RunSafe Security CEO Joe Saunders and special guest Derrick Bethea, NERC Compliance Manager and OT Cybersecurity Leader at Cypress Creek Energy, for an inside look at how utilities and renewable energy operators prepare for, respond to, and recover from cyber incidents. Drawing on years of experience securing operational technology (OT) environments, Derrick explains why incident response plans must be tested—not just documented—and how organizations navigate the complex intersection of cybersecurity, regulatory compliance, and operational resilience. Joe explores how AI is changing both cyber defense and attacker capabilities, why legacy infrastructure presents unique security challenges, and how security-by-design and security-by-demand must work together to strengthen the energy sector. Together, Joe and Derrick discuss: Why OT incident response differs from traditional IT securityThe realities of NERC CIP compliance and regulatory reportingHow AI is accelerating vulnerability discovery across critical infrastructureWhy security must be part of procurement and engineering decisionsThe importance of testing incident response plans before an emergency occursHow utilities can balance innovation with operational resilience Whether you secure power generation, renewable energy assets, industrial control systems, or other critical infrastructure, this episode offers practical lessons for strengthening cyber resilience before the next incident occurs.The podcast and artwork embedded on this page are from RunSafe Security, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
The Attack Surface You Eat: Cyber Risk in Food and Agriculture
3w ago01:10:21Tap to summarizePodcast: Critical Assets PodcastEpisode: The Attack Surface You Eat: Cyber Risk in Food and AgriculturePub date: 2026-07-08Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationThe Attack Surface You Eat: Cyber Risk in Food and AgricultureKristin King joins Patrick Miller to make the case that food cybersecurity is not food security, and that food and agriculture is one of the most under-defended corners of critical infrastructure. From precision agriculture and processing plants to aquaculture, zoos, and aquariums, they trace where the OT and ICS risk actually lives, why the regulatory floor is so thin, and how the threat range runs from opportunistic ransomware to nation-state targeting and agroterrorism.Guest: Kristin King, founder and CEO of AnzenSage, CEO and co-founder of AnzenOT, host of the Bites & Bytes Podcast, and author of Securing What Feeds Us: Cybersecurity in Food and Agriculture (Wiley).Full show notes and every source referenced in this episode: https://ampyxcyber.com/podcast/the-attack-surface-you-eat-cyber-risk-in-food-and-agricultureGuest links AnzenSage: https://www.anzensage.com/ Bites & Bytes Podcast: https://www.bitesandbytespodcast.com/about Kristin King on LinkedIn: https://www.linkedin.com/in/kingmkristin Securing What Feeds Us (Wiley): https://securingwhatfeedsus.com/The podcast and artwork embedded on this page are from Patrick Miller, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →