@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Casos de Ciberseguridad Industrial
Episode: 1/4 Contexto del riesgo de la IA en la digitalización industrial
Pub date: 2026-11-02

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

En este episodio se aborda el cambio en el perfil de riesgo cuando las organizaciones industriales incorporan IA sobre procesos ya digitalizados, pasando de automatizar tareas a introducir sistemas que recomiendan, priorizan o apoyan decisiones.

The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: OT After Hours
Episode: Black October
Pub date: 2026-10-30

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

It has been quite the month for cybersecurity vulnerabilities, but is there more to it than the doom and gloom?
In this episode of OT After Hours, Ken Kully (Delivery Readiness at Rockwell Automation) is joined by Tyler Bergman (Manager, SecureOT Managed Services at Rockwell Automation) to discuss "Black October" and other scary cybersecurity stories.
Key Takeaways
Automation Fair And SecureOT Platform: Rockwell's Automation Fair in happening in Boston from November 16–19, 2026; it's a broad showcase of Rockwell Automation technologies, partners, robotics, educational efforts, and the SecureOT Platform.
Physical Security In Industrial Facilities: Can you envision walking into a gas plant unnoticed and finding a decommissioned control room containing powered-on workstations? Physical security is still an important OT control!
PHP Vulnerability And Availability Risk: Of course, we had to discuss the recent PHP vulnerability. Thus far, observed exploitation doesn't seem to quite match the fear and hype around "Black October," but it's good to be vigilant.
Embedded Software And SBOM Management: PHP vulnerabilities may affect applications indirectly through embedded web servers or bundled components, making software-bill-of-materials visibility, vendor coordination, and dependency management necessary for accurate exposure assessment.
AI-Accelerated Cybersecurity Arms Race: If "Black October" showed anything, it is that AI is an accelerator for both attackers and defenders, leading to faster vulnerability discovery and exploit development. OT cybersecurity teams will need to become more proactive about legacy assets and maintenance.
Subscribe
Follow and subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts.
Get in Touch
🔗 LinkedIn | YouTube | X | Contact Us

The podcast and artwork embedded on this page are from Rockwell Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Nexus: A Claroty Podcast (LS 32 · TOP 5% what is this?)
Episode: Jake Braun on DEF CON Franklin, Water Cybersecurity
Pub date: 2026-10-28

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Jake Braun, cofounder of DEF CON Franklin and former White House acting Principal Deputy National Cyber Director, joins the Nexus Podcast to discuss cybersecurity for water and wastewater utilities. 
DEF CON Franklin is a volunteer-driven program that connects security researchers and hackers associated with the DEF CON conference with U.S.-based water wastewater utilities and K-12 schools. This summer at DEF CON, DEF CON Franklin and the National Rural Water Association announced the Water Watch Center, which provides support to water utilities in the event of a breach. 
Jake explains how both initiatives are progressing, the cybersecurity challenges smaller water utilities face, and what the government can do to help from a policy and regulatory standpoint. 
Subscribe and listen to the Nexus Podcast here. 

The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: Managed Services for OT: When to Outsource Your Cyber Defense
Pub date: 2026-10-28

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Your plant has monitoring tools. But is anyone watching what they find?
Dino Busalachi sits down with Justin Carlson, Chief Strategy Officer at Kasm, to talk about one of the biggest challenges in manufacturing cybersecurity: a shrinking pool of people who understand both the plant floor and security. They explore when managed services make sense, what decisions should always stay with your own team, and why buying more tools is not enough.
The conversation also covers consolidating remote access into a single controlled entry point, keeping vendors and integrators aligned, protecting legacy systems without disrupting production, and funding OT cybersecurity through capital projects so security becomes part of the work instead of an unplanned expense.
For CISOs, CIOs, plant managers, and engineering leaders, the takeaway is practical: know what is in your environment, keep that inventory current, and use your next plant project to become more secure.
Industrial Cybersecurity Insider brings practical conversations on securing manufacturing and critical infrastructure.
Chapters:
(00:00:00) Industrial Cybersecurity Insider: Securing Industrial Operations
(00:01:00) Kasm’s Origins and Ephemeral Computing Environments
(00:04:00) Secure Remote Access and the OT Workforce Gap
(00:07:00) Consolidating Plant Access and Protecting Legacy Systems
(00:11:00) Funding OT Cybersecurity Through Capital Projects
(00:17:00) Managed Services and the Business Case for Outside Expertise
(00:20:00) Browser Based Access and Third Party Oversight
(00:24:00) AI, Cyber Threats, and Manufacturing Downtime
(00:31:00) Asset Inventory, Capital Planning, and Taking Action

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Justin Carlson on LinkedIn
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: (CS)²AI Podcast Show: Control System Cyber Security
Episode: 138: From Army Engineer to Critical Infrastructure Security with Marcus Sachs
Pub date: 2026-10-27

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

From Army Engineer to Critical Infrastructure Security with Marcus Sachs
Marcus Sachs, SVP and Chief Engineer at the Center for Internet Security, joins Derek Harp for a long-overdue conversation about how a civil engineer in the Army ended up securing critical infrastructure. Marcus traces his path from an unusual start across Alabama, Pakistan and Germany, through ROTC and the Army Engineers, to the events of the mid-1990s that gave rise to the formal term "critical infrastructure." He explains what Y2K taught the military about inventory and interdependencies, how far OT security has come since SCADA was the term of art, and the advice he would give people entering the field today. They close with the Enigma machines he brings to Level Zero and why technology alone never covers all the bases.
Guest: Marcus Sachs, SVP and Chief Engineer, Center for Internet Security Host: Derek Harp, Founder and Chairman, (CS)²AI
Chapters: 00:42 Welcome and introducing Marcus Sachs 02:24 An unusual starting point: Alabama, Pakistan and Germany 05:53 ROTC, the Cold War and early hacking in Germany 09:30 Choosing engineering and the Army Engineers 14:59 Fort Belvoir: staying behind to fix things 20:00 Physics, culture and new technology in OT 22:48 From civil engineering to cyberspace 27:31 Oklahoma City, PDD 63 and critical infrastructure 31:00 The 1998 intrusion, Y2K and the great inventory 35:48 How far OT security has come 40:51 Crossing paths: a Navy flagship and Haiti 42:34 Advice for people entering the field 51:20 Enigma machines and mechanical encryption 54:39 People, process and technology: the work never ends 56:36 Closing thoughts and thanks
Produced by (CS)²AI (Control System Cyber Security Association International).

The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.