@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure (LS 30 · TOP 5% what is this?)
Episode: Is Critical Infrastructure Ready for AI Attacks? with Booz Allen's Brad Medairy
Pub date: 2026-10-20

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Can cyber defenses built around human attackers keep pace with AI? Brad Medairy, president of Booz Allen's National Cyber Practice and a McCrary Institute senior fellow, joins Frank Cilluffo to discuss what his team's testing reveals about AI's ability to conduct cyber operations and navigate industrial systems.
They examine how these capabilities lower barriers for attackers, why deploying defensive AI requires trust and human accountability, and what executives should do to assess readiness. The conversation also explores active cyber defense and the need to keep essential services running through a compromise.
Main topics
AI-driven cyber operations
Frontier model testing
U.S.–China capability gaps
Industrial systems at risk
AI attack simulations
Human oversight and accountability
Deception and active defense
Operating through compromise
Board oversight and readiness
Key quotes
"Today, with an agentic attack, with an AI-enabled cyber operator that can operate at speed and scale, I think the defender does not have the advantage. It can't move at that pace." — Brad Medairy
The way that we've seen models be able to rip apart these [OT] environments, understand the protocols, understand the control system, it's really phenomenal in terms of the capabilities that they provide… the risk to critical infrastructure is at an all-time high." — Brad Medairy
"I don't think that we're going to defeat the threat of the future that's so transformative by just automating past operating models and approaches." — Brad Medairy
"These adversary capabilities are progressing much faster than cyber defenses. And so you're gonna have to continually assess your environment, continually assess your controls, continually evolve your program." — Brad Medairy
"We're inventing new operating models, we're inventing new technologies for cybersecurity. And I think now is our time to really define the future. It's going to take… really working this problem together." — Brad Medairy
Resources discussed
Booz Allen's Cyber Weapons Index
McCrary Institute–Booz Allen joint paper: "AI-enabled threats demand mission-speed resilience – here's how to build it"
McCrary Institute–Booz Allen joint paper: "Outpacing AI-enabled cyber threats: A playbook for government CISOs"
About the Guest:
Brad Medairy is president of Booz Allen's national cyber business, leading the development of defensive and offensive cyber solutions to address America's toughest cyber challenges. His work spans AI, machine learning, cloud innovation, and intelligence tradecraft.
He leads thousands of cyber operators, security researchers, and software engineers who secure supply chains, protect critical infrastructure, and defend 5G networks, space systems, and advanced weapons platforms. His team counters sophisticated adversaries for customers including the intelligence community, U.S. Cyber Command, FBI, CISA, and the Department of War.

The podcast and artwork embedded on this page are from Frank Cilluffo / McCrary Institute, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: (CS)²AI Podcast Show: Control System Cyber Security
Episode: 137: From Conference to Change: Asset Owners on What They Actually Did After Level Zero
Pub date: 2026-10-20

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

From Conference to Change: Asset Owners on What They Actually Did After Level Zero
Asset owners from UPS and Southern California Edison get specific about what changed after Level Zero: a talk that became a deployed AI harness, a team member who went on to NIMS certification after the tabletop, and ideas borrowed across sectors. Christian Harter, Blake Gilson, and Brian Foster debate who should attend (almost everyone), how to prepare (don't just show up), why the hallway track matters most, and why more asset owners should take the stage. They close on AI: powerful, but it needs an operator.
Guests: Blake Gilson (IT Planning & Strategy Manager, ExxonMobil); Brian Foster (Grid Security – Enterprise Sr Advisor, Southern California Edison) Host / moderator: Christian Harter (BISO OT & Director of OT Security and Engineering, UPS)
Chapters: 00:41 Panel introductions 02:02 What stuck from Level Zero 04:48 Bringing a team (UPS brought 16) 09:12 What actually changed afterwards 14:49 Send a group or one person? Budgets and training 19:28 Who should attend 23:12 How to prepare 24:38 The hallway track 30:11 What to preserve and grow: asset owner stories 43:19 Where AI ends and humans begin 49:40 A new class of worker
Recorded at the CS²AI Online Symposium, "Level Zero: Visions & Reflections."
Join us at Level Zero 2027, April 23–30 at Georgia Tech in Atlanta: pre-conference training, the Conflag Zero™ tabletop exercise, and three days of practitioner-led sessions built so you can put what you learn to work the Monday you get back.
Questions: info@levelzeroconference.com · Sponsorship: sponsor@levelzeroconference.com Produced by CS²AI (Control System Cyber Security Association International).

The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)
Episode: Trust Is Not a Security Control: Blast Radius and the Management Plane
Pub date: 2026-10-19

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Work with Aaron: https://protectitallpod.com/work/

The book: https://protectitallpod.com/book/

This episode: https://protectitallpod.com/ep128/

The OT Security Starter Kit: https://protectitallpod.com/starter-kit/

Zero trust asks whether something should be allowed. Zach Miller asks a different question: if it is allowed, and something blows up, how far does it go?

Zach is a cybersecurity engineer in Colorado Springs who came up through K-12 network support on a shoestring budget, defense contracting and managed services. On the side he runs Skip to Secure, where he publishes research on trust concentration and management-plane abuse, including his Blast Radius framework.

He and Aaron trace one pattern through five years of incidents. Kaseya and SaltStack in 2020 and 2021, then Stryker in 2026: each time the management platform itself became the way in, and the authority it already held decided how far the damage went. Segmentation is the fix everyone already knows. It is still a hard sell.

What you will take away

Why trust is something you delegate, not a security control, and how to put a limit on it

What Zach's blast radius framework measures: reach, scope crossing, standing privilege, human concentration, automation visibility and recoverability

Why the same PLC with the same vulnerabilities is not the same risk on a turbine as it is on an ice machine

Why attacks now look like a normal workday from a cloud address, not a foreign IP in the logs

Why one any-any rule undoes 477 good ones, and why a firewall starts from deny

Why you verify every piece of work an AI agent hands back, however good the prompt was

In this episode

5:03 Sleeping under the conference table

8:30 The open proxy everyone borrowed

10:24 From K-12 to defense contracting

12:59 How careers really get built

16:36 Where is the puck going?

23:22 A heat map for the smoker

25:41 Verify everything the agent does

32:31 Attacks that look like a normal workday

34:33 The work laptop on the home network

39:15 Security is never done

41:39 Where the word firewall comes from

43:33 The same failure, five years apart

44:21 What blast radius measures

46:28 The turbine and the ice machine

49:43 When the right account does the wrong thing

51:53 A firewall with one any-any rule

54:08 Where to find Zach's research

About the guest

Zach Miller is a cybersecurity engineer based in Colorado Springs. He started as a network and switching specialist supporting K-12 education, then moved through defense contracting, consulting and managed services into cybersecurity engineering. Through Skip to Secure, his independent research and training effort, he publishes white papers on trust concentration and management-plane abuse, including the Blast Radius framework and the LOLMgmt paper on living-off-the-land management attacks.

Blast Radius white paper and scoring workbook: https://github.com/ridgestoneco/blast-radius

LOLMgmt white paper: https://zenodo.org/records/21255394

Zach on LinkedIn: https://www.linkedin.com/in/zacharymiller0111/

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

The book: https://protectitallpod.com/book/

This episode: https://protectitallpod.com/ep128/

The OT Security Starter Kit: https://protectitallpod.com/starter-kit/

YouTube: https://www.youtube.com/@PrOTectITAll

Email: info@protectitallpod.com

X: https://twitter.com/protectitall

Facebook: https://facebook.com/protectitallpodcast

To be a guest or suggest a guest or episode, email info@protectitallpod.com.

Please leave us a review on Apple or Spotify:

Apple: https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify: https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Trust Me, It's Air-Gapped
Episode: AI and OT Cybersecurity: Managing Risk Inside and Outside the Plant
Pub date: 2026-10-09

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

AI is a force multiplier for your workforce and for attackers. In this episode of Trust Me, It’s Air-Gapped, GrayMatter OT Cybersecurity Practice Lead Scott Christensen unpacks what industrial leaders are saying about AI and cyber risk.
Scott explains how AI-powered reconnaissance lets bad actors launch attacks in minutes instead of weeks. He also covers the risks growing inside the house: well-meaning employees adopting AI tools without a plan, vendors adding undisclosed AI to their products and plant-floor data flowing to the cloud without zero trust architecture.
Also discussed:
Why every manufacturer needs a cross-functional AI working group
Treating AI like a new employee with least-privilege access
Keeping a human in the loop for agentic AI decisions
Capturing tribal knowledge before your veteran operators retire
Questions to ask vendors about their AI roadmap
Why AI won’t replace your SOC anytime soon

Visit graymattersystems.com.

The podcast and artwork embedded on this page are from GrayMatter, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Talk OT to Me
Episode: When does OT remote access become infrastructure?
Pub date: 2026-10-07

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Remote access started as a way to save time and avoid unnecessary travel. But as industrial operations become more connected, distributed and dependent on remote expertise, its role is changing.
In this episode of Talk OT to Me, Jesper and Jeff explore when OT remote access stops being just another tool and becomes part of the infrastructure an operation depends on.
They discuss what happens when access goes down, how dependency and downtime change the equation, when redundancy starts to matter, and why the conversation should begin with operational needs — not just cybersecurity.
Because the real question isn’t simply whether remote access is secure. It’s: what happens to your operation when it’s no longer there?

The podcast and artwork embedded on this page are from Secomea, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.