@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)
Episode: OT Cybersecurity That Works: Defense in Depth, AI Risks & Protecting Critical Infrastructure
Pub date: 2026-06-29

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

When it comes to OT cybersecurity, the fundamentals still matter - even in the age of AI.

In this episode of Protect It All, host Aaron Crow sits down with Caleb Davis for a practical discussion on securing industrial environments where uptime, safety, and resilience are non-negotiable.

From legacy control systems and tight budgets to AI-powered threats and open-source security tools, Aaron and Caleb explore the real challenges organizations face every day - and the strategies that deliver meaningful protection without requiring massive investments.

A major focus of the conversation is defense in depth: building multiple layers of protection, fostering trust between IT and OT teams, and strengthening foundational cybersecurity practices before chasing the latest technology.

You'll learn:

Why defense in depth remains the cornerstone of OT cybersecurity

How to improve security in legacy industrial environments

Practical ways to strengthen OT security - even with limited budgets

Why asset inventory, segmentation, and basic cyber hygiene still matter most

How AI is changing both offensive and defensive cybersecurity

The importance of trust and collaboration between IT, engineering, and operations

Whether you're responsible for manufacturing, utilities, water treatment, energy, or any critical infrastructure environment, this episode delivers practical strategies you can apply immediately.

Tune in to learn how layered defenses, strong relationships, and proven fundamentals create resilient OT security programs - only on Protect It All.

Key Moments: 

05:41 PLCs and network security challenges

07:24 Challenges in Updating OT Systems

11:33 Impact of Downtime on Security

16:03 Using affordable cybersecurity tools

19:14 Building Trust in Business Deals

23:01 Security challenges in medical devices

25:49 Trust and IT implementation risks

28:35 Using AI for safer software updates

31:05 Cybersecurity best practices for plants

33:40 Balancing Security Costs and Business Needs

37:50 Nurturing OT like raising kids

41:20 AI and cybersecurity concerns

About the guest : Caleb Davis is a founding member of SolaSec, a cybersecurity consulting firm specializing in advanced penetration testing for embedded and connected systems. Based in Dallas/Fort Worth, he holds a degree in Electrical Engineering from the University of Texas at Tyler and is a patent-holding expert with vast experience in hardware and firmware security. Caleb leads deep technical assessments across a range of high-impact industries, including medical devices, automotive, industrial control systems, ATMs and financial terminals, aerospace components, and consumer electronics. His work focuses on secure design, trusted boot processes, cryptographic implementations, and threat modeling, helping organizations integrate security throughout the development lifecycle and align with industry and regulatory standards.

How to connect Celeb :

SolaSec: https://solasec.io 

LinkedIn: https://www.linkedin.com/in/caleb-davis-400439100/ 

OTPCAP (OT PCAP analysis tool): https://github.com/SolaSec/otpcap

Learn more about PrOTect IT All:

Email: info@protectitall.co 

Website: https://protectitallpod.com/ep111

X: https://twitter.com/protectitall 

YouTube: https://www.youtube.com/@PrOTectITAll 

FaceBook:  https://facebook.com/protectitallpodcast

To be a guest or suggest a guest/episode, please email us at info@protectitall.co

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Open Source Security (LS 39 · TOP 2% what is this?)
Episode: AIBOM, CBOM, and HBOM with Allan Friedman
Pub date: 2026-06-29

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Josh chats with Allan Friedman about all things Bill of Materials. Allan did a ton of work to help turn SBOM into what it is today. He has many thoughts and ideas around the new types of BOMs, a concept he's calling the OmniBOM. Allan is always fun to chat with and he brings a ton of knowledge and advice.
The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-06-allan-omnibom


The podcast and artwork embedded on this page are from Josh Bressers, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Exploited: The Cyber Truth
Episode: From Compliance to Resilience: Securing Digital Mission Systems at Military Scale
Pub date: 2026-06-25

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

In this episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by RunSafe Security CEO Joe Saunders and Lt. Gen. (Ret.) Bill Bender, former Chief Information Officer of the U.S. Air Force, to discuss what it takes to build true cyber resilience across some of the world's most complex digital environments.

Drawing on his experience overseeing a $17 billion IT portfolio and helping establish the first Chief Information Security Officer (CISO) and Chief Data Officer (CDO) offices within the Department of Defense, Bender explains why organizations must move beyond checklist-driven security and adopt a mission-focused approach to risk management.

Together, they explore:

Why compliance alone cannot secure mission-critical systems
Building cybersecurity leadership, accountability, and culture at scale
Managing technical debt and long-lived systems that cannot easily be replaced
The role of Zero Trust in protecting complex defense environments
How software supply chains and SBOMs support mission assurance
Why public-private collaboration is essential for modernization and innovation
The growing impact of AI on cyber defense and critical infrastructure security

From defense acquisition to critical infrastructure protection, this episode examines how organizations can strengthen resilience.

The podcast and artwork embedded on this page are from RunSafe Security, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: It's Control System Integrity not just OT Cybersecurity
Pub date: 2026-06-24

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Many manufacturers don't realize that an investment in OT Cybersecurity also enhances Control System Integrity.
In this rewind episode, Craig and Dino dig into why so many OT intrusion detection platforms get installed but never become truly operational.
They address what gets lost when IT owns the tool while OT owns the equipment, and why the word “cybersecurity” itself can stall progress the moment it lands on the plant floor.
They land on a question every CISO, plant leader, and engineering director should be asking right now: who at your sites actually knows how to use the tools you have already paid for, and how do you bring the OT ecosystem into the room before the next outage forces you to?
Chapters:
(00:00:00) Cold Open: The Diagnostic Tool Sitting Unused in Your Plant
(00:01:00) Shadow OT Versus Shadow IT and Why the Distinction Matters
(00:02:30) Why IT Gets Left Out of Industrial Lifecycle Decisions
(00:04:00) Reframing Cybersecurity as Control System Integrity
(00:05:00) The 8:10 AM Production Shutdown Mystery
(00:07:00) Three Rogue Servers Hiding in Plain Sight
(00:08:00) A Brewery, a Misconfigured Module, and a Network No One Could Diagnose
(00:10:00) Buying an MRI Machine and Refusing to Turn It On
(00:12:00) Bringing the OT Ecosystem to the Table
(00:15:00) Why IT Needs New Friends in Manufacturing

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: OT Security Made Simple
Episode: Rethinking Ransomware and Human Error in Industrial Security | OT Security Made Simple
Pub date: 2026-06-23

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Klaus Mochalski and OT security veteran Daniel Ehrenreich discuss the true nature and measurement of industrial cyber incidents. Discover why paying for OT ransomware is a critical mistake that won't guarantee safe operations, why applying classic IT SOC concepts to operational technology is fundamentally flawed, and why the biggest threat to your infrastructure isn't necessarily a hacker, but untrained personnel.
You can find more information on OT Security Made Simple at rhebo.com or send us your ideas, questions, or guest suggestions at podcast@rhebo.com.

The podcast and artwork embedded on this page are from Klaus Mochalski, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.