Podcast: Exploited: The Cyber Truth
Episode: The Cyber-Physical Truth: What We Get Wrong About Attacks on Critical Infrastructure
Pub date: 2026-05-28

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

In this episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by RunSafe Security CEO Joseph M. Saunders and Danielle “DJ” Jablanski, Cybersecurity Consulting Program Lead for Operational Technology at STV and former OT Cybersecurity Strategist at CISA, to examine what defenders often get wrong about attacks on critical infrastructure.

With experience across government, threat intelligence, engineering, and industrial environments, DJ explains why sectors like water, rail, energy, and manufacturing require a different way of thinking about cybersecurity.

Together, they explore:

How cyber-physical risk differs from traditional IT risk
Why attacks can target engineering logic, process variables, and safety systems
The challenge of securing long-lived OT assets and heterogeneous environments
How visibility, asset identification, and segmentation shape OT defense
Why secure-by-design and secure-by-demand both matter
Why patching alone cannot keep up with distributed critical infrastructure

From water systems to transportation networks, this episode breaks down what security leaders, asset owners, OEMs, and operators must understand to stay ahead of cyber-physical threats.

The podcast and artwork embedded on this page are from RunSafe Security, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.