@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)
Episode: Conficker Still Exists? The Hidden OT Malware Threat Putting Critical Infrastructure at Risk
Pub date: 2026-07-20

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Some of the biggest cybersecurity threats to critical infrastructure aren't new - they've simply never gone away.

In this episode of Protect It All, host Aaron Crow welcomes back Lesley Carhart for a fascinating conversation about why decades-old malware like Conficker continues to infect operational technology (OT) environments around the world.

Drawing on nearly two decades of industrial incident response experience, they share real-world stories from the front lines of critical infrastructure, explaining why legacy systems, operational constraints, and workforce shortages continue to make remediation incredibly challenging. The discussion goes far beyond "just patch it," exploring the difficult risk decisions organizations face when uptime, safety, and cybersecurity all compete for priority.

Aaron and Lesley also examine one of the industry's most pressing issues: the growing shortage of OT cybersecurity talent and the need to rebuild foundational technical skills for the next generation of defenders. 

Key Learnings: 

Why malware like Conficker still exists in modern OT environments

The unique challenges of removing malware from industrial control systems

Why patching isn't always possible in operational technology

How legacy infrastructure creates long-term cybersecurity risk

The growing OT cybersecurity skills gap - and how the industry can address it

Practical lessons from real-world industrial incident response

Key Moments: 

05:47 Challenges with Old Industrial Systems

06:58 Struggles with malware cleanup

11:02 Challenges in Cyber Security Careers

16:19 Dealing with malware spread

17:53 Managing infection risk long-term

23:04 Challenges with nuclear hardware upgrades

27:05 Training the Next Tech Generation

29:33 Importance of Computer Basics

34:04 Discovering hidden technical issues

37:01 Troubleshooting in industrial environments

39:10 Malware and botnets era

42:20 Developing low-touch security solutions

Whether you're responsible for manufacturing, utilities, energy, transportation, or any critical infrastructure environment, this episode provides practical insight into one of OT cybersecurity's longest-running challenges.

Tune in to discover why yesterday's malware is still creating today's biggest industrial cybersecurity problems - and what organizations can do about it.

About the guest : 

Lesley Carhart is a Principal Industrial Incident Responder at Dragos and a recognized expert in OT and industrial cybersecurity. With nearly two decades of experience in incident response, digital forensics, and threat hunting, they help organizations defend critical infrastructure from cyber threats targeting industrial control systems. Lesley is also a respected speaker, instructor, and advocate for cybersecurity education, regularly sharing their expertise with industry professionals and the next generation of defenders.

How to connect Lesley: 

LinkedIn: https://www.linkedin.com/in/lcarhart/

Youtube: https://www.youtube.com/user/hacks4pancakes

Bluesky : https://bsky.app/profile/hacks4pancakes.com

Instagram: https://www.instagram.com/hacks4pancakes/

Website: https://tisiphone.net/

Learn more about PrOTect IT All:

Email: info@protectitall.co 

Website: https://protectitallpod.com/ep115

X: https://twitter.com/protectitall 

YouTube: https://www.youtube.com/@PrOTectITAll 

FaceBook:  https://facebook.com/protectitallpodcast

To be a guest or suggest a guest/episode, please email us at info@protectitall.co

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: Trust But Verify: Why Every Air-Gap Claim Deserves Scrutiny
Pub date: 2026-07-14

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

This week we're bringing back one of our most requested episodes, because the problem it covers hasn't gone away.
Dino and Jim break down one of the most dangerous assumptions in industrial security: that OT environments are air-gapped and therefore safe.
Through real examples from actual plant floors, they show exactly how that assumption falls apart, from cellular modems inside machine centers to third-party technicians on guest Wi-Fi to VPN concentrators IT doesn't know exist, and explain why the gap between IT and OT teams is just as much an organizational problem as a technical one.
They also get into why point-in-time assessments aren't enough, where zero trust runs into its limits in industrial settings, and what continuous visibility on the plant floor actually looks like. If you're responsible for securing manufacturing or critical infrastructure, this one is as relevant today as when it was first recorded.
Chapters:
(00:00:00) - The Air Gap Myth: Introduction
(00:03:00) - How OT Devices End Up Connected Without IT Knowing
(00:07:00) - Why Plant Managers Bypass IT Security
(00:12:00) - The Compliance and Insurance Stakes
(00:15:00) - Why Zero Trust Struggles in OT Environments
(00:17:00) - Bringing in Outside Experts to Find the Truth
(00:20:00) - Supply Chain and Hidden Connectivity
(00:24:00) - What Visibility Tools Reveal on the Plant Floor
(00:26:00) - Wrap-Up: Trust But Verify, Then Monitor Continuously

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)
Episode: OT Cybersecurity: Why Trust Beats Technology | Jacob McCune | Ep 114
Pub date: 2026-07-13

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

The biggest challenge in OT cybersecurity isn't technology - it's earning trust.

In this episode of Protect It All, host Aaron Crow sits down with Jacob McCune, a cybersecurity architect with more than 20 years of hands-on experience across both IT and OT environments.

Jacob shares his unconventional journey from the help desk to securing critical infrastructure, highlighting the lessons that only real-world experience can teach. Together, Aaron and Jacob explore why communication, collaboration, and trust are often the deciding factors between successful cybersecurity programs and failed initiatives.

The conversation also dives into the future of OT security, examining how AI, cloud technologies, and evolving architectures are changing industrial environments and why organizations need to rethink traditional approaches while keeping operational realities front and center.

Key Learning: 

Why trust is the foundation of successful OT cybersecurity programs

How practical experience shapes better cybersecurity decisions

The importance of communication between IT, OT, and leadership teams

Why compliance alone doesn't guarantee security

How AI and cloud technologies are reshaping OT environments

What the future may look like beyond traditional industrial architectures

Key Moments: 

05:18 Building a Power Plant Team

09:06 Balancing cybersecurity with business needs

11:01 Avoiding project delays during downtime

16:04 Importance of Broad Experience

17:59 A mentor's lesson on teamwork

23:41 Challenges with job postings and requirements

26:27 Managing risk and resource challenges

29:59 Helping Your Compliance Team

33:12 Dad's long career and expertise

36:44 Discussing cybersecurity risk management

39:44 Cloud resources and AI discussions

41:08 Exploring future solutions and technologies

Whether you're building an OT security program, managing critical infrastructure, or looking to grow your cybersecurity career, this episode delivers practical lessons from years of real-world experience.

Tune in to discover why people, trust, and communication remain the most valuable assets in modern cybersecurity only on Protect It All.

About the guest: 

Jacob McCune is a cybersecurity architect with more than 20 years of experience across IT and OT environments, helping organizations secure critical infrastructure through practical, real-world security strategies. From starting his career on the help desk to designing enterprise security architectures, Jacob has built a reputation for bridging the gap between IT and OT through collaboration, communication, and trust. He is passionate about helping organizations move beyond compliance to build resilient cybersecurity programs that protect both people and operations.

Links to connect Jacob : 

LinkedIn: https://www.linkedin.com/in/jake-mccune-33a08984/ 

CornCon Cybersecurity Conference : https://corncon.net/

Learn more about PrOTect IT All:

Email: info@protectitall.co 

Website: https://protectitallpod.com/ep114

X: https://twitter.com/protectitall 

YouTube: https://www.youtube.com/@PrOTectITAll 

FaceBook:  https://facebook.com/protectitallpodcast

To be a guest or suggest a guest/episode, please email us at info@protectitall.co

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: PII Podcast
Episode: Safety, Security and Mobility: The Future of Industrial Operations
Pub date: 2026-07-07

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Calibration is becoming increasingly connected, with mobile technology playing a growing role in helping organisations improve efficiency, compliance and operational performance. However, deploying mobile solutions in industrial environments presents challenges that go far beyond those faced in traditional business settings.
In this episode, we explore how industrial mobility is reshaping calibration and maintenance activities across manufacturing and the process industries. From hazardous and explosion-proof areas to highly regulated pharmaceutical facilities, organisations must balance the need for real-time access to calibration and asset data with stringent safety, security and compliance requirements.
Joining us is Sami Koskinen, Director of Digital Transformation at Beamex, who discusses why successful mobile deployments require close collaboration between IT and operational teams, the impact of IT/OT convergence and the role of cybersecurity in supporting reliable, connected operations. We also examine the practical considerations for implementing mobile technology, the common pitfalls organisations should avoid and how a strategic approach can improve safety, reliability and productivity.

The podcast and artwork embedded on this page are from Process Industry Informer, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Exploited: The Cyber Truth
Episode: When the Grid Gets Hit: Inside OT Incident Response in Energy & Renewables
Pub date: 2026-07-10

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

In this episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by RunSafe Security CEO Joe Saunders and special guest Derrick Bethea, NERC Compliance Manager and OT Cybersecurity Leader at Cypress Creek Energy, for an inside look at how utilities and renewable energy operators prepare for, respond to, and recover from cyber incidents.

Drawing on years of experience securing operational technology (OT) environments, Derrick explains why incident response plans must be tested—not just documented—and how organizations navigate the complex intersection of cybersecurity, regulatory compliance, and operational resilience. Joe explores how AI is changing both cyber defense and attacker capabilities, why legacy infrastructure presents unique security challenges, and how security-by-design and security-by-demand must work together to strengthen the energy sector.

Together, Joe and Derrick discuss:

Why OT incident response differs from traditional IT security
The realities of NERC CIP compliance and regulatory reporting
How AI is accelerating vulnerability discovery across critical infrastructure
Why security must be part of procurement and engineering decisions
The importance of testing incident response plans before an emergency occurs
How utilities can balance innovation with operational resilience

Whether you secure power generation, renewable energy assets, industrial control systems, or other critical infrastructure, this episode offers practical lessons for strengthening cyber resilience before the next incident occurs.

The podcast and artwork embedded on this page are from RunSafe Security, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.