Podcast
@BEERISAC: OT/ICS Security Podcast Playlist
Hosted by Anton Shipulin / Listen Notes · EN
A curated playlist of Operational Technology (OT) and Industrial Control Systems (ICS) cybersecurity podcast episodes in any language, compiled by ICS security enthusiasts. Missing something? Contact Anton Shipulin on LinkedIn. Subscribe for updates!
156episodes
Episodes
Newest firstAll episodes
Cyber Training Will Boost Security Posture
3d ago00:37:19Tap to summarizePodcast: Today with ISSSourceEpisode: Cyber Training Will Boost Security PosturePub date: 2026-08-11Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationWith ongoing attacks occurring via IIoT, digitalization and AI, more and more workers at all levels – from security practitioners to OT users – need training to understand what they should or should not do.The podcast and artwork embedded on this page are from Gregory Hale, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure
4d ago00:26:26Tap to summarizePodcast: Nexus: A Claroty Podcast (LS 32 · TOP 5% what is this?)Episode: Ellen Boehm on Post-Quantum Readiness in Critical InfrastructurePub date: 2026-08-11Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationEllen Boehm, Senior Vice President Strategy and AI Innovation at Keyfactor, joins the Nexus Podcast to discuss post-quantum cryptography (PQC) readiness in critical infrastructure organizations. A recent Executive Order on PQC installed a December 2030 deadline for federal agencies to transition high-value systems and key generation to PQC. The EO also directs CISA, other federal sector risk management agencies to assist with road map development. In this episode, Ellen discusses readiness in this context. She also delves into how critical infrastructure organizations overseeing fleets of cyber-physical systems (CPS) assets transition those environments and avoid disruptions. Governance, budgeting, supply chain management, and the AI-driven threat landscape are also discussed. This episode was recorded during the Black Hat USA Conference. Subscribe and listen to the Nexus Podcast here. The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
Your Most Critical Network May Be Your Least Protected
5d ago00:33:22Tap to summarizePodcast: Industrial Cybersecurity InsiderEpisode: Your Most Critical Network May Be Your Least ProtectedPub date: 2026-08-11Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationThe air gap you're counting on probably isn't there. Dino Busalacchi sits down with cybersecurity veteran and Tulane University Cybersecurity Professor Joshua Copeland, to talk about the realities of protecting industrial environments, where uptime, safety, and production come first. They dig into why legacy systems can't be secured like IT, how routine security tasks can disrupt physical operations, the leadership gap between IT and OT, and why cybersecurity needs to be treated as digital safety. A practical listen for CISOs, CIOs, engineering leaders, and plant operators.Chapters:(00:00:00) Why operational technology is critical to everyday life(00:03:00) Legacy systems and the hidden opportunity in OT security(00:07:00) Ransomware, AI, and attacks designed for physical outcomes(00:10:00) How standard IT security tools can stop production(00:13:00) What cybersecurity events get wrong about OT(00:16:00) The leadership gap and the myth of isolated systems(00:20:00) Why cybersecurity should be treated as digital safety(00:23:00) Compliance, asset inventory, and aging industrial equipment(00:27:00) Building the next generation of OT security professionals(00:31:00) Why every part of modern life depends on OTLinks And Resources:Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityJosh Copeland on LinkedInDino Busalachi on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
AI & Cybersecurity: Why People, Accountability & Resilience Still Matter
6d ago00:51:05Tap to summarizePodcast: PrOTect It All (LS 27 · TOP 10% what is this?)Episode: AI & Cybersecurity: Why People, Accountability & Resilience Still MatterPub date: 2026-08-10Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationAI is changing cybersecurity at an incredible pace. But are organizations prepared for the risks that come with it? In this episode of Protect It All, host Aaron Crow sits down with Brian Schleifer, an industry veteran with decades of experience spanning the military, technology, consulting, defense, and critical infrastructure. Aaron and Brian explore what it really takes to adopt AI responsibly across IT and OT cybersecurity. Beyond the technology itself, they examine the human side of security, including communication, collaboration, accountability, and the skills needed to make new technologies work in the real world. The conversation also tackles the growing challenges of AI governance, shadow AI, continuous monitoring, and cyber-physical resilience. Rather than treating AI as a magic solution, Brian offers a practical perspective on how organizations can be intentional about where and how they use AI while preparing for the disruptions it may create. Key Learnings: How organizations can approach AI adoption in IT and OT cybersecurity Why communication and collaboration are critical to successful security programs The growing risks of shadow AI and AI governance Why human accountability remains essential as AI becomes more capable How continuous monitoring can strengthen cyber-physical security Why organizations need to think beyond prevention and prepare for resilience and business continuity How people, process, and technology must work together in an AI-driven environment Key Moments: 05:22 Working in tech and cybersecurity 07:23 Importance of people skills in business 10:20 Importance of Listening First 14:31 Implementing Machine Learning Thoughtfully 16:44 Importance of Human Oversight in AI 20:21 Discussing security and human accountability 24:24 Publishing a book with AI tools 27:47 Future of computing technology 31:39 Focusing on disaster recovery strategies 35:27 Budgeting Challenges with Emerging Tech 38:00 Focus on proactive security planning 40:40 Evaluating cybersecurity effectiveness 45:49 Challenges in incident response logistics 47:33 Talking about Security Week events Whether you're a cybersecurity leader, OT professional, technology executive, or simply trying to understand what AI means for the future of security, this episode offers practical perspectives on navigating the change without losing sight of what matters most. Listen to the latest episode of Protect It All and discover how organizations can embrace AI while building the trust, accountability, and resilience needed to protect what matters. About the Guest : Brian "SchleiF" Schleifer is a retired United States Air Force veteran, cybersecurity professional, content leader, and owner of PAVE Consulting LLC, which provides digital content creation and cybersecurity consulting. Through PAVE Consulting, he currently supports SecurityWeek as Director of Content and Events, helping lead conferences, podcasts, webinars, and executive-level cybersecurity programming. Brian previously served in senior cybersecurity engineering and leadership roles at Modern Technology Solutions Inc. His experience includes cyber-physical and weapon systems security, security control assessment, cyber testing, risk management, and AI governance. He is pursuing a Doctor of Technology at Purdue University, where his research focuses on adaptive cybersecurity policy for AI-enabled systems. He is also the creator of the Adaptive Artificial Intelligence Risk and Assurance Framework, or AAIRAF. With more than 10,000 hours of public speaking, instruction, and panel moderation experience, Brian is known for making complex cybersecurity, technology, and risk topics practical and accessible. Important links to connect Brian: LinkedIn: https://www.linkedin.com/in/brian-schleifer/ SecurityWeek: https://www.securityweek.com/ SecurityWeek TV: https://www.youtube.com/@SecurityWeek-TV PAVE YouTube: https://www.youtube.com/@P.A.V.E. AI Risk Summit: https://www.airisksummit.com/ ICS Cyber Conference: https://www.icscybersecurityconference.com/ PAVE email: peopleaddvalueexperience@gmail.com Learn more about PrOTect IT All: Email: info@protectitall.co Website: https://protectitallpod.com/ep118 X: https://twitter.com/protectitall YouTube: https://www.youtube.com/@PrOTectITAll FaceBook: https://facebook.com/protectitallpodcast To be a guest or suggest a guest/episode, please email us at info@protectitall.co= Please leave us a review on Apple/Spotify Podcasts: Apple - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124 Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
010 - OT Cybersecurity Summit Day One
1w ago00:40:08Tap to summarizePodcast: PodomationEpisode: 010 - OT Cybersecurity Summit Day OnePub date: 2026-07-31Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationJoin ISA for a recap of day one of the OT Cybersecurity Summit, held in June 2026 in Prague. Speakers include:Claire Fallon, ISAMegan Samford, Schneider ElectricTatyana Bolton, OT Cybersecurity CoalitionBerta Jarošová, Women4Cyber CzechiaCheri Caddy, Savannah River National LaboratoryThe podcast and artwork embedded on this page are from ISA - International Society of Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
When Cybersecurity Becomes a Safety Issue: Protecting Autonomous and Critical Systems
1w ago00:29:33Tap to summarizePodcast: Exploited: The Cyber Truth Episode: When Cybersecurity Becomes a Safety Issue: Protecting Autonomous and Critical SystemsPub date: 2026-08-06Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIn this episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by RunSafe Security Founder and CEO Joe Saunders and returning guest Hemanth Tadepalli, Senior Cybersecurity and Compliance Manager at May Mobility, to explore why cybersecurity and safety are becoming inseparable as software takes control of vehicles and other critical systems. Drawing on his experience securing autonomous mobility platforms, Hemanth explains how connected vehicles have expanded the attack surface across software, cloud infrastructure, APIs, sensors, AI models, and supply chains. Joe explores how organizations can build resilience into software, protect legacy and resource-constrained systems, and move beyond the costly cycle of finding, patching, and deploying fixes. Together, Joe and Hemanth discuss: Why cyber-physical systems require a different security mindsetHow autonomous vehicles connect cybersecurity with physical safetyWhy compliance should be a baseline—not the end goalHow AI is changing both cyberattacks and defenseWhere software resilience and runtime protection fitWhy public trust depends on consistency, transparency, and safetyHow security, engineering, and compliance teams can work together Whether you secure autonomous vehicles, industrial equipment, medical devices, or other critical systems, this episode offers practical lessons for building software that is secure, resilient, and worthy of public trust.The podcast and artwork embedded on this page are from RunSafe Security, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →John Laliberte on AI and Non-Human Identity Controls
1w ago00:27:27Tap to summarizePodcast: Nexus: A Claroty Podcast (LS 32 · TOP 5% what is this?)Episode: John Laliberte on AI and Non-Human Identity ControlsPub date: 2026-08-05Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationJohn Laliberte, CEO of ClearVector, joins the Nexus Podcast in an episode recorded at Black Hat 2026 in Las Vegas. Laliberte discusses how artificial intelligence (AI) is accelerating the creation of so-called non-human identities, including autonomous identities created by AI agents. Laliberte covers the risks and controls that enterprises and critical infrastructure organizations must consider as AI adoption accelerates everywhere. Subscribe and listen to the Nexus Podcast here. Download ClearVector's Identity Intelligence report.The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →Supply Chain Risk: Your Vendors Have Vendors You've Never Heard Of
2w ago00:34:21Tap to summarizePodcast: Industrial Cybersecurity InsiderEpisode: Supply Chain Risk: Your Vendors Have Vendors You've Never Heard OfPub date: 2026-08-04Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationCraig Duckworth sits down with Jowanza Joseph, CEO of Parakeet Risk, to unpack why third-party risk has become one of the most urgent challenges facing manufacturers and critical infrastructure operators. Jowanza spent 15 years in engineering roles at Adobe, Pluralsight, and MasterCard before founding Parakeet Risk to serve an industrial sector he saw as the most underserved when it comes to technology. Together they address why simply knowing who your vendors are is harder than it sounds, how insurers are moving past checkbox questionnaires and demanding real evidence of controls, and what happens when contracts require you to identify a new asset in your OT environment within five minutes. They also get honest about the organizational problem few want to own: security leaders who carry responsibility for the plant floor without the authority to change anything on it. Jowanza closes with a practical, low-cost starting point for any organization and a look at where vendor attestation is headed over the next five years.Chapters:(00:00:00) Why industrial companies must become cybersecurity companies(00:02:08) Cataloging and prioritizing your most dangerous vendors(00:04:37) The hidden layers of subcontractors in your supply chain(00:06:42) Cyber insurance moves past the checkbox era(00:10:47) Contracts that demand new asset identification in five minutes(00:12:58) AI is multiplying vulnerabilities faster than solutions(00:16:31) Three hallmarks of a strong third party risk program(00:21:14) Incident response, game days, and who falls on the sword(00:23:42) Responsibility without authority across the IT and OT divide(00:28:31) Where to start today and the future of vendor attestationLinks And Resources:Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityDino Busalachi on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
Die Psychologie der Hacker: Wie KI das Täterprofil für immer verändert | OT Security Made Simple
2w ago00:30:47Tap to summarizePodcast: OT Security Made SimpleEpisode: Die Psychologie der Hacker: Wie KI das Täterprofil für immer verändert | OT Security Made SimplePub date: 2026-08-04Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationKlaus Mochalski und Profiler Dr. Mark T. Hofmann diskutieren die Motivation von Cyberkriminellen. Erfahren Sie, warum das "Hoodie"-Klischee veraltet ist, wie generative KI die Einstiegshürde für Angriffe drastisch senkt und weshalb die menschliche Firewall im Zeitalter von Deepfakes wichtiger denn je wird.Mehr zum Thema OT Security Made simple findet Ihr auf rhebo.com oder schreibt uns mit Euren Ideen, Fragen oder Gastvorschlägen an podcast@rhebo.com. The podcast and artwork embedded on this page are from Klaus Mochalski, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →OT Pen Testing: Why Trust, Culture & Hands-On Experience Matter Most
2w ago01:10:41Tap to summarizePodcast: PrOTect It All (LS 27 · TOP 10% what is this?)Episode: OT Pen Testing: Why Trust, Culture & Hands-On Experience Matter MostPub date: 2026-08-03Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationEffective OT penetration testing isn't just about finding vulnerabilities, it's about building trust. In this episode of Protect It All, host Aaron Crow is joined by Oren Niskin and Reynaldo Gonzalez for an engaging discussion on the evolving role of penetration testing in operational technology (OT) environments. Drawing from years of experience in industrial operations, IT, and OT cybersecurity, Oren and Reynaldo explain why successful OT security assessments require far more than technical expertise. They explore how trust, communication, and collaboration help bridge the gap between security teams and operations, making penetration testing a valuable business tool rather than something to fear. The conversation also highlights the importance of diverse career paths, hands-on learning, and mentoring the next generation of cybersecurity professionals. From network segmentation and risk communication to creating realistic lab environments, this episode offers practical lessons for anyone responsible for securing critical infrastructure. Key Learnings: Why trust is essential for successful OT penetration testing How IT and operational experience strengthen OT security teams The value of network segmentation in reducing cyber risk Why "doing nothing" is no longer an acceptable cybersecurity strategy How organizations can bridge the gap between safety, operations, and security Practical ways to develop the next generation of OT cybersecurity professionals Key Moments: 07:00 Oren's technology and security approach 15:04 Discussing network security measures 19:16 Building Trust in Business Relationships 26:17 Understanding and planning security architecture 30:16 Network management and rule assessment 33:39 Managing and Assessing Tool Overload 38:39 Analyzing tool overlap and complementarity 48:41 Building a trusting team culture 49:48 Encouraging Open Communication 56:34 Getting into cybersecurity without IT experience 01:04:56 Entry-level ICS training courses Whether you're an OT engineer, penetration tester, security leader, or just beginning your cybersecurity journey, this episode delivers practical insights into protecting industrial environments while building stronger relationships across teams. Tune in to discover why the most successful OT penetration tests don't just identify vulnerabilities they build trust, strengthen teams, and improve security for the long term. About the guests: Oren Niskin is Principal OT Security Engineer at GuidePoint Security. His 20-year arc runs from the US Navy as a Nuclear Electrician's Mate, to Electronics Technician on offshore drilling rigs, to office OT/IT management, to OT cybersecurity consulting at EY, and now into OT cyber engineering at GuidePoint. He also runs Packets Or It Didn't Happen, a YouTube livestream where he builds a factory-realistic PLC and HMI training kit on camera (the open-source PLC Trainer Kit), aimed at helping newcomers get hands-on with OT for under $500. Link to connect Oren Niskin: LinkedIn: https://www.linkedin.com/in/orenniskin/ YouTube: https://www.youtube.com/@PacketsOrItDidntHappen PLC Trainer Kit (GitHub): https://github.com/oniskin/PLC-Trainer-Kit LinkedIn Group: https://www.linkedin.com/groups/17708001/ Reynaldo Gonzalez is a recognized cybersecurity thought leader with 18+ years of experience helping organizations strengthen cyber resilience and secure critical infrastructure. His expertise spans cybersecurity strategy, IT/OT security, AI security, risk management, and digital transformation, complemented by a passion for education, innovation, and industry collaboration. Link to connect Reynaldo Gonzalez: LinkedIn: https://www.linkedin.com/in/reynaldoglz/ Learn more about PrOTect IT All: Email: info@protectitall.co Website: https://protectitallpod.com/ep117 X: https://twitter.com/protectitall YouTube: https://www.youtube.com/@PrOTectITAll FaceBook: https://facebook.com/protectitallpodcast To be a guest or suggest a guest/episode, please email us at info@protectitall.co Please leave us a review on Apple/Spotify Podcasts: Apple - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124 Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →