Podcast
@BEERISAC: OT/ICS Security Podcast Playlist
Hosted by Anton Shipulin / Listen Notes · EN
A curated playlist of Operational Technology (OT) and Industrial Control Systems (ICS) cybersecurity podcast episodes in any language, compiled by ICS security enthusiasts. Missing something? Contact Anton Shipulin on LinkedIn. Subscribe for updates!
127episodes
Episodes
Newest firstAll episodes
Dan Ricci on OT/CPS Visibility and Risk Reduction
2d ago00:13:26Tap to summarizePodcast: Nexus: A Claroty Podcast (LS 32 · TOP 5% what is this?)Episode: Dan Ricci on OT/CPS Visibility and Risk ReductionPub date: 2026-06-29Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationICS Advisory Project founder Dan Ricci joins the Nexus Podcat to discuss how to turn operational technology (OT) and cyber-physical systems (CPS) visibility into actual risk reduction. Dan describes the need to distinguish between asset lists and actual asset inventories, what those differences are, and how to make the most of the information made available. Device data such as firmware versions, protocol identification, and more are vital to other aspects of the OT and CPS protection program, including exposure management and segmentation initiatives.Dan wrote more on this topic in this article: “From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction.” This interview was pulled from Episode 4 of Nexus Digest. Subscribe and listen to the Nexus Podcast here. The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
OT Cybersecurity That Works: Defense in Depth, AI Risks & Protecting Critical Infrastructure
2d ago00:44:34Tap to summarizePodcast: PrOTect It All (LS 27 · TOP 10% what is this?)Episode: OT Cybersecurity That Works: Defense in Depth, AI Risks & Protecting Critical InfrastructurePub date: 2026-06-29Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationWhen it comes to OT cybersecurity, the fundamentals still matter - even in the age of AI. In this episode of Protect It All, host Aaron Crow sits down with Caleb Davis for a practical discussion on securing industrial environments where uptime, safety, and resilience are non-negotiable. From legacy control systems and tight budgets to AI-powered threats and open-source security tools, Aaron and Caleb explore the real challenges organizations face every day - and the strategies that deliver meaningful protection without requiring massive investments. A major focus of the conversation is defense in depth: building multiple layers of protection, fostering trust between IT and OT teams, and strengthening foundational cybersecurity practices before chasing the latest technology. You'll learn: Why defense in depth remains the cornerstone of OT cybersecurity How to improve security in legacy industrial environments Practical ways to strengthen OT security - even with limited budgets Why asset inventory, segmentation, and basic cyber hygiene still matter most How AI is changing both offensive and defensive cybersecurity The importance of trust and collaboration between IT, engineering, and operations Whether you're responsible for manufacturing, utilities, water treatment, energy, or any critical infrastructure environment, this episode delivers practical strategies you can apply immediately. Tune in to learn how layered defenses, strong relationships, and proven fundamentals create resilient OT security programs - only on Protect It All. Key Moments: 05:41 PLCs and network security challenges 07:24 Challenges in Updating OT Systems 11:33 Impact of Downtime on Security 16:03 Using affordable cybersecurity tools 19:14 Building Trust in Business Deals 23:01 Security challenges in medical devices 25:49 Trust and IT implementation risks 28:35 Using AI for safer software updates 31:05 Cybersecurity best practices for plants 33:40 Balancing Security Costs and Business Needs 37:50 Nurturing OT like raising kids 41:20 AI and cybersecurity concerns About the guest : Caleb Davis is a founding member of SolaSec, a cybersecurity consulting firm specializing in advanced penetration testing for embedded and connected systems. Based in Dallas/Fort Worth, he holds a degree in Electrical Engineering from the University of Texas at Tyler and is a patent-holding expert with vast experience in hardware and firmware security. Caleb leads deep technical assessments across a range of high-impact industries, including medical devices, automotive, industrial control systems, ATMs and financial terminals, aerospace components, and consumer electronics. His work focuses on secure design, trusted boot processes, cryptographic implementations, and threat modeling, helping organizations integrate security throughout the development lifecycle and align with industry and regulatory standards. How to connect Celeb : SolaSec: https://solasec.io LinkedIn: https://www.linkedin.com/in/caleb-davis-400439100/ OTPCAP (OT PCAP analysis tool): https://github.com/SolaSec/otpcap Learn more about PrOTect IT All: Email: info@protectitall.co Website: https://protectitallpod.com/ep111 X: https://twitter.com/protectitall YouTube: https://www.youtube.com/@PrOTectITAll FaceBook: https://facebook.com/protectitallpodcast To be a guest or suggest a guest/episode, please email us at info@protectitall.co Please leave us a review on Apple/Spotify Podcasts: Apple - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124 Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
AIBOM, CBOM, and HBOM with Allan Friedman
5d ago00:34:38Tap to summarizePodcast: Open Source Security (LS 39 · TOP 2% what is this?)Episode: AIBOM, CBOM, and HBOM with Allan FriedmanPub date: 2026-06-29Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationJosh chats with Allan Friedman about all things Bill of Materials. Allan did a ton of work to help turn SBOM into what it is today. He has many thoughts and ideas around the new types of BOMs, a concept he's calling the OmniBOM. Allan is always fun to chat with and he brings a ton of knowledge and advice. The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-06-allan-omnibom The podcast and artwork embedded on this page are from Josh Bressers, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
From Compliance to Resilience: Securing Digital Mission Systems at Military Scale
1w ago00:29:42Tap to summarizePodcast: Exploited: The Cyber Truth Episode: From Compliance to Resilience: Securing Digital Mission Systems at Military ScalePub date: 2026-06-25Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIn this episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by RunSafe Security CEO Joe Saunders and Lt. Gen. (Ret.) Bill Bender, former Chief Information Officer of the U.S. Air Force, to discuss what it takes to build true cyber resilience across some of the world's most complex digital environments. Drawing on his experience overseeing a $17 billion IT portfolio and helping establish the first Chief Information Security Officer (CISO) and Chief Data Officer (CDO) offices within the Department of Defense, Bender explains why organizations must move beyond checklist-driven security and adopt a mission-focused approach to risk management. Together, they explore: Why compliance alone cannot secure mission-critical systemsBuilding cybersecurity leadership, accountability, and culture at scaleManaging technical debt and long-lived systems that cannot easily be replacedThe role of Zero Trust in protecting complex defense environmentsHow software supply chains and SBOMs support mission assuranceWhy public-private collaboration is essential for modernization and innovationThe growing impact of AI on cyber defense and critical infrastructure security From defense acquisition to critical infrastructure protection, this episode examines how organizations can strengthen resilience.The podcast and artwork embedded on this page are from RunSafe Security, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
It's Control System Integrity not just OT Cybersecurity
1w ago00:18:00Tap to summarizePodcast: Industrial Cybersecurity InsiderEpisode: It's Control System Integrity not just OT CybersecurityPub date: 2026-06-24Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationMany manufacturers don't realize that an investment in OT Cybersecurity also enhances Control System Integrity.In this rewind episode, Craig and Dino dig into why so many OT intrusion detection platforms get installed but never become truly operational.They address what gets lost when IT owns the tool while OT owns the equipment, and why the word “cybersecurity” itself can stall progress the moment it lands on the plant floor.They land on a question every CISO, plant leader, and engineering director should be asking right now: who at your sites actually knows how to use the tools you have already paid for, and how do you bring the OT ecosystem into the room before the next outage forces you to?Chapters:(00:00:00) Cold Open: The Diagnostic Tool Sitting Unused in Your Plant(00:01:00) Shadow OT Versus Shadow IT and Why the Distinction Matters(00:02:30) Why IT Gets Left Out of Industrial Lifecycle Decisions(00:04:00) Reframing Cybersecurity as Control System Integrity(00:05:00) The 8:10 AM Production Shutdown Mystery(00:07:00) Three Rogue Servers Hiding in Plain Sight(00:08:00) A Brewery, a Misconfigured Module, and a Network No One Could Diagnose(00:10:00) Buying an MRI Machine and Refusing to Turn It On(00:12:00) Bringing the OT Ecosystem to the Table(00:15:00) Why IT Needs New Friends in ManufacturingLinks And Resources:Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityDino Busalachi on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
Rethinking Ransomware and Human Error in Industrial Security | OT Security Made Simple
1w ago00:31:30Tap to summarizePodcast: OT Security Made SimpleEpisode: Rethinking Ransomware and Human Error in Industrial Security | OT Security Made SimplePub date: 2026-06-23Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationKlaus Mochalski and OT security veteran Daniel Ehrenreich discuss the true nature and measurement of industrial cyber incidents. Discover why paying for OT ransomware is a critical mistake that won't guarantee safe operations, why applying classic IT SOC concepts to operational technology is fundamentally flawed, and why the biggest threat to your infrastructure isn't necessarily a hacker, but untrained personnel.You can find more information on OT Security Made Simple at rhebo.com or send us your ideas, questions, or guest suggestions at podcast@rhebo.com.The podcast and artwork embedded on this page are from Klaus Mochalski, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →Quantum Readiness: The Cybersecurity Threat Most Organizations Aren’t Prepared For
2w ago00:41:03Tap to summarizePodcast: PrOTect It All (LS 27 · TOP 10% what is this?)Episode: Quantum Readiness: The Cybersecurity Threat Most Organizations Aren’t Prepared ForPub date: 2026-06-22Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationQuantum computing isn't a future problem - it's a cybersecurity challenge organizations need to start preparing for today. In this episode of Protect It All, host Aaron Crow welcomes Jim Sortino for a timely discussion on quantum readiness, cryptographic risk, and the future of cybersecurity. As organizations continue accumulating technical debt and relying on aging cryptographic systems, the arrival of quantum computing threatens to disrupt the very foundations of digital trust. Jim explains why leaders need to think beyond today's threats and begin preparing for a future where current encryption standards may no longer provide adequate protection. Together, Aaron and Jim explore the practical realities of quantum risk, how organizations can identify vulnerable systems, and why crypto agility is becoming one of the most important cybersecurity priorities of the next decade. You'll learn: What quantum computing means for modern cybersecurity Why cryptographic technical debt creates long-term business risk How to assess your organization's quantum readiness The importance of crypto agility and encryption modernization Practical steps security leaders can take today Why IT and OT environments must prepare for the same emerging threats Whether you're a cybersecurity professional, technology leader, board member, or simply curious about the future of digital security, this episode provides actionable insights to help you prepare before quantum disruption arrives. Tune in to learn why the organizations that start preparing today will be the ones best positioned to protect tomorrow. Key Moments: 06:02 Challenges with product maintenance and AI integration 08:42 Importance of Software in Everything 12:30 Addressing cybersecurity risks 16:00 Authentication and trust challenges 18:13 Preparing for technological changes 20:56 Planning and Implementing Projects 25:38 Budget planning for cybersecurity risks 28:54 Challenges for Small Financial Institutions 31:27 Importance of regulations in business 33:37 Legacy security systems and protocols 36:38 Quantum readiness and future risks About the guest : Jim Sortino is the Chief Revenue Officer and a Board Member at Isera Corporation, where he helps organizations address emerging cybersecurity challenges through innovative identity and cryptographic security solutions. With decades of experience working with global enterprises, Jim specializes in helping leaders navigate complex technology risks, from technical debt and encryption modernization to quantum readiness. He is a passionate advocate for proactive cybersecurity strategies that prepare organizations for the next generation of digital threats. How to connect Jim Sortino : https://www.linkedin.com/in/jamessortino/ Learn more about PrOTect IT All: Email: info@protectitall.co Website: https://protectitallpod.com/ep109 X: https://twitter.com/protectitall YouTube: https://www.youtube.com/@PrOTectITAll FaceBook: https://facebook.com/protectitallpodcast To be a guest or suggest a guest/episode, please email us at info@protectitall.co Please leave us a review on Apple/Spotify Podcasts: Apple - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124 Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4 The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
Col. (Res.) Dr. Avi Cohen CTO @Kodeglass & Yubo Founder on Cyber Paradigm shifts in a chaotic era
2w ago00:51:18Tap to summarizePodcast: ICS Cyber Talks PodcastEpisode: Col. (Res.) Dr. Avi Cohen CTO @Kodeglass & Yubo Founder on Cyber Paradigm shifts in a chaotic eraPub date: 2026-06-18Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationמה הקשר בין ממר"ם, ניהול משבר הקורונה בבני ברק, מלחמת ה-7 באוקטובר וסייבר? על פניו, מדובר באירועים מנותקים לחלוטין. בפועל, החוט המקשר ביניהם מבוסס על שתי מילים: טכנולוגיות שו"ב (שליטה ובקרה) ואיש אחד – ד"ר אבי כהן. נחשון פינקו מארח את אל"מ (מיל') ד"ר אבי כהן לשיחה מרתקת על ניהול משברים לאומיים: משדה הקרב ועד למגפות עולמיות, מהפכת ה-AI והסוכנים האוטונומיים (Agents): פיתוח מאובטח ותפקיד ה-DPO בעולם החדש. עידן הקוונטום: האיום (וההזדמנות) שמגיעים אלינו הרבה יותר מהר מהצפוי. הצטרפו לניתוח עמוק של שינויי הפרדיגמה בהגנת הסייבר בעולם כאוטי.The podcast and artwork embedded on this page are from Nachshon Pincu, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →
THE FISH FLUENCER: James Sibley on How Tech Is Changing the Way We Farm the Sea
2w ago00:57:21Tap to summarizePodcast: Bites and Bytes Podcast (LS 27 · TOP 10% what is this?)Episode: THE FISH FLUENCER: James Sibley on How Tech Is Changing the Way We Farm the SeaPub date: 2026-06-15Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationWelcome to the Seafood Summer Series 2026 on the Bites and Bytes Podcast, and we are kicking it off with a great one!Over 120 million tons of seafood are farmed every year. Most people have no idea. And the technology making it happen: AI-powered feeding systems, underwater robots, satellite-connected ocean farms, is advancing faster than the policy and security frameworks trying to keep up with it. That disconnect is exactly why this conversation matters.James Sibley, known in the aquaculture world as the Fish Fluencer, is an aquaculture educator and content creator who has spent five years visiting fish farms across four continents to explain one of the most consequential and overlooked food systems on the planet. From salmon farms in Scotland and New Zealand to shellfish operations in Southeast Asia, James has seen firsthand how technology is transforming the way we farm the sea, and what happens when that technology outpaces the people managing it.This episode covers aquaculture technology, smart fish farming, ocean farming innovation, seafood supply chain transparency, and food security. If you eat seafood, work in food and agriculture, or care about where your food comes from, this one is for you.---------------Guest: James Sibley"Fish Fluencer" | Aquaculture Creator & Founder🌐 james-sibley.com💼 linkedin.com/in/jameslsibley📸 Instagram: @sibleyaqua▶️ TikTok: @sibleyaqua---------------Episode Key Highlights00:03:15 Meet James Sibley: The Fish Fluencer00:07:26 James’s Origin Story: From Fishmonger to Content Creator00:14:12 Inside the Farm: AI, 4K Cameras, and Live Monitoring00:18:19 Cleaner Fish: Nature's Answer to Sea Lice00:24:33 Climate Change: The Ocean Feels It First00:36:09 Aquaculture and Global Food Security00:38:39 IoT, Drones, and Tech on the Water00:41:39 Underwater Robots and ROVs00:47:00 Cybersecurity on the Water00:53:04 The Supply Chain Reality: 3 Years vs. 48 Hours---------------📘 Info on Kristin’s upcoming book “Securing What Feeds Us: Cybersecurity in Food and Agriculture.” Publish Date: September 29, 2026, published by Wiley Learn More here: https://securingwhatfeedsus.com/Newsletter: https://kristin-king.kit.com/newsletter---------------🎤 Book Kristin Demoranville to Speak Invite Kristin to speak at your conference, corporate event, webinar, or workshop. Visit the website and submit a request.---------------🎤 Bites and Bytes Podcast Info:Website: Explore all our episodes, articles, and more on our official website. Merch Shop: Show your support with some awesome Bites and Bytes gear!Substack: Stay updated with the latest insights and stories from the world of cybersecurity in the food industry.Socials: TikTok; Instagram; LinkedIn; BlueSky---------------🛡️ About AnzenSage & AnzenOTAnzenSage is a cybersecurity advisory firm specializing in cyber-physical risk management for the food, agriculture, zoo, and aquarium industries. AnzenSage offers practical, strategic guidance to help organizations anticipate risks and build resilience. Learn more about their offerings at anzensage.com. AnzenOThelps organizations understand and prioritize operational risk faster, without slow or static assessments. Compliance supported, including NIST, ISA/IEC 62443-2-1, NIS2 Directive, CMMC, and many other industry-specific frameworks. Subscription access is available, including a student option. Learn more at anzenot.com.The podcast and artwork embedded on this page are from AnzenSage, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →Is AI Becoming Your Plant Floor's Biggest Vulnerability?
2w ago00:27:14Tap to summarizePodcast: Industrial Cybersecurity InsiderEpisode: Is AI Becoming Your Plant Floor's Biggest Vulnerability?Pub date: 2026-06-15Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationCraig and Dino dig into the widening gap between IT and OT and why the plant floor keeps getting left behind. They break down what Dragos ' acquisition of Phosphorus signals for the future of IoT security in manufacturing, from cameras and label printers to X-ray inspection systems that ship with default passwords and almost never get patched. The conversation gets sharp on artificial intelligence: the same models helping plants work smarter are now lowering the barrier for attackers, putting Stuxnet-style capabilities into the hands of people who lack the resources and sophistication that nation states once needed. Craig and Dino expose the everyday habits that leave operations vulnerable, including system integrators plugging personal laptops straight into production networks, locked USB ports that solve only half the problem, and remote access so wide open that a single entry point can expose an entire plant. They argue that nobody truly owns OT cyber hygiene, that frameworks like IEC 62443 and the NIST 800 82 series get named in RFPs but rarely enforced, and that leaders keep tripping over dollars to pick up nickels by choosing the cheapest bid over real protection. It's a candid, experience-driven look at why industrial security moves so slowly and what plant leaders, engineers, and security teams can actually do about it.Chapters:(00:00:00) - AI Enters the OT Battlefield(00:01:30) - Why IoT Is Creeping Onto the Plant Floor(00:03:30) - Printers, Cameras, and the Default Passwords Nobody Owns(00:06:00) - Dragos, Phosphorus, and the Managed Services Question(00:08:00) - How AI Lowers the Bar for Attacking Control Systems(00:09:40) - Stuxnet Then vs. AI-Powered Attacks Now(00:12:00) - The Laptop in the Plant: Contractors, USBs, and Open Networks(00:16:00) - Frameworks on Paper vs. Reality (IEC 62443 & NIST 800-82)(00:19:00) - Tripping Over Dollars to Pick Up Nickels(00:24:00) - Short-Tenure CISOs and Why You Shouldn't Go It AloneLinks And Resources:Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityDino Busalachi on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Transcribe →