@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Security Breach
Episode: 247 Days Later
Pub date: 2026-10-23

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Send us Fan Mail
Recently, the conversation in industrial cybersecurity has shifted from detection to response. The onset of faster-moving and easier to scale attacks driven by AI makes detection significantly more difficult, and faced with limited resources, it’s easy to understand why many are embracing the mantra of “it’s not if, but when you’re attacked” and allocating more time and money to their response capabilities. 
However, this episode's guest offers some insight on the flaws of downplaying the detection element of cybersecurity. Chris Nyhuis is the Co-Founder and CEO of Vigilant. Listen as he offers perspective on: 
• Establishing priorities and applying them to tactics like segmentation when addressing the expanding threat landscape. 
• What data flow can tell you about soft spots on your network. • Why detection is so critical in not only developing strategies for your response, but in understanding the right ways to respond. 
• How the right detection tools can help minimize the impacts of breaches that often result from dwelling, or living-off-the-land attacks. 
• And, or course, the best ways to leverage AI in developing and implementing cybersecurity strategies. 
To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.
As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts.
Click Here to Become a Sponsor.
To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast.

If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

The podcast and artwork embedded on this page are from Eric Sorensen, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Security Breach
Episode: Network Security - Don't Fix the Engine While The Plane is Flying
Pub date: 2026-10-08

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Send us Fan Mail
If there’s one area where the old adage of “you have to see it to believe it” might not resonate as strongly, it’s OT cybersecurity. I say this because one of the biggest challenges for our sector continues to be visibility. 
Although it’s clearly one of those blocking and tackling-type elements, identifying and securing all our assets, endpoints, connections and devices is tough. And not only do we know this – so do the bad guys, and they’re continuing to find new and creative ways to leverage these defensive soft spots in stealing data, extorting funds and shutting down operations. 
That’s why I was excited to bring in this episode's guest. Mitch Densley is a Principle Solutions Architect for Opengear. Watch/listen as we discuss:
Avoiding the temptation to "fix the engine while the airplane is flying" when it comes to network patching.
Why reliability and resiliency need to be treated like a "first class citizen" instead of being relegated to lower priorities.
Using AI to negate some of industrial cybersecurity's lacking resources.
The tools and strategies widely available to help manufacturers get a better vantage point of the expanding threat landscape - on their network and with OT assets.
Identifying and managing network vulnerabilities stemming from legacy infrastructure.
To catch up on past episodes, you can go to Manufacturing.net,IEN.com or  MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.
 
As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts.
Click Here to Become a Sponsor.
To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast.

If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

The podcast and artwork embedded on this page are from Eric Sorensen, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Security Breach
Episode: Water Treatment Hacks Reflect Larger OT Threats
Pub date: 2026-09-23

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Send us Fan Mail
Although the need to defend the networks, data and endpoints of critical infrastructure dates back to the first time a PLC was connected to an HMI, the realization of how damaging such a compromise could be was probably Stuxnet.
And while we’ve progressed enough to typically spot an unknown or malicious player armed with a suspicious USB, the threat landscape has expanded, and the bad actors have evolved.
Combining those factors with a lack of funds, training, expertise and resources has opened the doors to ransomware groups and state-sponsored hackers to infiltrate, shutdown or compromise infrastructure operations across the globe, and more recently, across the United States.
These growing threats were recently on display when over 100 water treatment facilities across 12 states experienced temporary shutdowns due to breeches believed to have been carried out by Iranian hacking groups. Here to discuss the rise in these attacks, and what they mean in the broader scope of industrial cybersecurity is Jen Sovada, General Manager for Public Sector initiatives at Claroty.
Listen as we discuss:
The blocking and tackling of OT security that has become vital in defending critical assets on any plant floor.
How Watershed 250 is working to help utilities protect their OT infrastructure.
How the ongoing IT/OT divide is hurting new cybersecurity initiatives.
The proper implementation of strategies like microsegmentation, artificial intelligence tools.
How, despite all the challenges facing industrial cybersecurity, she can still sleep at night.
To catch up on past episodes, you can go to Manufacturing.net, IEN.com  or  MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. And if you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.
As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts.
Click Here to Become a Sponsor.
To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast.

If you have a cybersecurity story or topic that you’d like to have us explore on Security Breach, you can reach me at jeff@ien.com.

The podcast and artwork embedded on this page are from Eric Sorensen, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Trust Me, It's Air-Gapped
Episode: Small Utility, Big Target: Rethinking Cyber Resilience in Water Treatment
Pub date: 2026-09-21

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

A coordinated nation-state campaign has hit more than 100 water utilities since it was first spotted near Minneapolis two months ago, prompting warnings from CISA and the FBI andtargeting one thing in particular: publicly addressable PLCs and industrial automation systems.
In this episode, GrayMatter's Cyber Practice Director Scott Christensen sits down with water and SCADA veteran Aaron Cromer, along with Zach Vera and Dan Topley from AMDT, makers of Octoplant, to unpack what's actually happening in the field.
They dig into why "we're too small to be a target" no longer holds up (it was the suburban utilities near major cities that got hit first), why claiming you're air-gapped rarely means you actually are, and why utilities should focus more on recovery. Aaron, Zach and Dan walk through what real asset awareness looks like, how change management separates a good recovery from a scramble.
Visit graymattersystems.com.

The podcast and artwork embedded on this page are from GrayMatter, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: OT After Hours
Episode: The EU CRA and OEMs
Pub date: 2026-09-16

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

How can industrial device OEMs comply with the new EU CRA and its requirements for digital devices sent to the European market?
In this episode of OT After Hours, Ken Kully (Delivery Readiness at Rockwell Automation) is joined by Lance Lamont (Special Projects & Protocols Team Lead at Rockwell Automation), Tyler Bergman (Principal Security Consultant at Rockwell Automation), Zach Woltjer (Technical Account Manager), and by special guests Maria Else (Global Product Manager for Industrial Cybersecurity) and Stefan Turi (EMEA Cybersecurity Lead for OEMs) to discuss the EU Cyber Resilience Act (CRA), its implications for industrial device original equipment manufacturers (OEMs), and how the SecureOT™ solution suite can help drive both compliance and security in response.
Key Takeaways
EU Cyber Resilience Act Scope: The CRA applies broadly to products with digital elements placed on the EU market, including industrial machines. These responsibilities extend across manufacturers, OEMs, system integrators, importers, distributors, and end users.
OEM Compliance And Product Lifecycle: CRA obligations include having a secure-by-design processes, vulnerability handling, documentation, risk analysis, and support throughout the product lifecycle. OEMs must establish repeatable processes rather than simply purchase security technology.
Asset Inventory And Vulnerability Traceability: Under the CRA, maintaining a durable record of shipped equipment, its configuration, ownership, location, and software or firmware versions so OEMs can identify affected customers and respond to newly disclosed vulnerabilities across their installed base.
Vulnerability Remediation And Patching: Vulnerability findings should be prioritized and remediated without disrupting industrial production, including update limitations for embedded devices, vendor dependencies, maintenance windows, and the need for tested procedures.
Digital Twins And Security Validation: Digital twins can be used to model manufacturing lines and test patches before deployment. Rockwell's Emulate3D and associated consulting capabilities provide a solution for validating dependencies and developing secure operational procedures.
Cybersecurity Governance And Safety: CRA compliance requires sustained organizational ownership and collaboration, while cybersecurity must be treated as part of machine safety because exploitation can affect operators, equipment, production, and the surrounding environment.
Subscribe
Follow and subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts.
Get in Touch
🔗 LinkedIn | YouTube | X | Contact Us

The podcast and artwork embedded on this page are from Rockwell Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.