@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Smashing Security (LS 55 · TOP 0.5% what is this?)
Episode: How hackers turned Russian cars into pumpkins
Pub date: 2026-11-12

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

You're driving your new Chinese SUV when the dashboard goes dark. Ten minutes later, your phone rings. A stranger says they've got the digital key to your car, and would you like it back? Of course you would. That'll be $550.
Meanwhile, three men have been charged over a scheme that used deepfakes of company bosses to steal around $130 million. Hear more about what happened, and the simple human trick that can foil the fakes.
All this and more in episode 492 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Danny Palmer.

EPISODE LINKS:
Binance warns of iOS flaw that could leak crypto wallet secrets - Bleeping Computer.
Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain - The Record.
Hotel giant Wyndham exposed customer data after app security lapse - TechCrunch.
Взлом кроссоверов Li Auto в России. Схема, защита, последствия - Autonews.
Cyber thieves Remotely block Luxury Chinese cars for Ransom - Известия.
Кроссовер за миллионы превратился в тыкву. Хакеры блокируют Li Auto и требуют выкуп - Securitylab.
Man accused of disabling 100 cars over Internet - NBC News.
Russian dealer threatens to block multimedia in cars imported via gray schemes - Kursiv Media Kazakhstan.
Three Foreign Nationals Arrested And Charged With Scheme To Use Super Intelligence To Defraud Companies Of $129 Million - US Department of Justice.
Arsène Lupin - Wikipedia.
Lupin- Netflix.
Lupin Official Trailer - YouTube.
Two Point Museum - Steam Store.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

SPONSORS:
Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
Hack The Box - Develop, exercise and measure the capabilities of your human operators and AI agents.
Dropzone AI - See how AI SOC agents investigate every alert with this self-guided demo.

SUPPORT THE SHOW:
Tell your friends and colleagues about Smashing Security, and leave us a review on Apple Podcasts or Podchaser.
Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW THE SHOW:
Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:
Theme tune: 'Vinyl Memories' by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

The podcast and artwork embedded on this page are from Graham Cluley, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: (CS)²AI Podcast Show: Control System Cyber Security
Episode: From a Commodore 64 to Co-op Cybersecurity with Carter Manucy
Pub date: 2026-11-11

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Carter Manucy, Senior Director, Cybersecurity for NRECA, joins Derek Harp to trace a career that started with a Commodore 64 and his dad's ham radio. Carter talks about typing in games from a magazine, building computers from scrounged parts, running a bulletin board, and landing at the Florida Municipal Power Agency, where he became the go-between for an engineering network on Novell NetWare and an accounting network on Unix, replacing SneakerNet with something better. He explains how NERC CIP changed the work, why breaking down silos mattered more than any one tool, and the story of the power plant HMI computer the manufacturer said couldn't be repaired. Carter also shares how his definition of success has changed, why he moved to NRECA, how the cybersecurity maturity model and "cyber champions" help more than 900 cooperative utilities, and what he is watching next, including AI. They close with a few questions from Derek's creative ending.
Guest: Carter Manucy, Senior Director, Cybersecurity, NRECA Guest LinkedIn: https://www.linkedin.com/in/cmanucy/ Host: Derek Harp, Founder and Chairman, (CS)²AI Episode: 140
Chapters:
00:42 Welcome and introducing Carter Manucy
01:59 From Havre de Grace to Orlando
03:43 Commodore 64s, bulletin boards and Frankenstein computers
06:59 First jobs and learning what he didn't like
08:04 UCF, Fortran and bouncing around
09:34 From odd jobs to the Florida Municipal Power Agency
11:42 Silos, SneakerNet and one network
16:10 From dial-up to firewalls
18:44 NERC CIP arrives
21:07 Distrust between departments and the HMI nobody could fix
24:42 Success, impact and leaving the world a little better
27:12 Helping people, soft skills and unsung heroes
29:13 From FMPA to NRECA
31:43 Co-ops versus municipals
35:03 NRECA's 900 co-ops and the cybersecurity maturity model
38:34 Cyber champions for resource-constrained utilities
40:35 Who does cybersecurity? Job titles and career paths
43:12 What's next: AI and staying one step out
46:12 The creative ending
49:04 Closing and where to find Carter
Join us at Level Zero 2027 in Atlanta, on the Georgia Tech campus, where Carter will be speaking again.
Produced by (CS)²AI (Control System Cyber Security Association International).

The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: How To Lose Millions Without Getting Hacked
Pub date: 2026-11-11

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Manufacturing cybersecurity mistakes that cost millions without a hacker in sight, and the steps that prevent them, in this rewind episode.
We pulled one of our earliest conversations out of the archive, and it hits harder now than when we first recorded it. Dino and Craig share stories from the plant floor about mistakes that quietly cost manufacturers millions:
A vending machine with a duplicate IP address that took down a $35 million wheel press
Thirty Siemens PLCs that wiped their own IP addresses after an IT technician scanned the wrong network at the wrong time
Federal agents who scanned a beverage plant’s control system while hunting malware on its mail servers
A steel mill that had to choose between pulling an unpatched server off the network and shutting the plant down

None of these came from a sophisticated attacker. Competent people doing normal jobs caused them, with no idea how the plant floor would react.
Dino explains what actually closes the gap: an accurate asset inventory, a network built to contain mistakes, continuous monitoring, control over remote access, and an incident response plan rehearsed before the bad day arrives. His advice for where to start is to run one tabletop exercise and name one owner for plant floor security at every site.
Chapters:
(00:00:00) Cold open: a soda machine takes down a $35 million wheel press
(00:01:12) The incidents that never make the news
(00:02:26) Thirty Siemens PLCs reset their IP addresses to zero
(00:05:38) When federal agents scan your control network
(00:07:02) WannaCry, SMBv1, and the steel plant standoff
(00:11:16) A pen tester can't tell a PLC from a printer
(00:18:12) The air gap myth and the contractor laptop
(00:21:09) Five ICS controls IT and OT can work on together
(00:25:41) Windows 7 on the plant floor and the CISO's purview
(00:31:22) Start here: a tabletop exercise and one OT owner per plant

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: OT Security Made Simple
Episode: Layer 0 Security: What If the PLC and HMI Are Lying? | OT Security Made Simple
Pub date: 2026-11-10

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Klaus Mochalski and Joe Weiss (Applied Control Solutions) explore Layer 0 security in ICS. Learn why network monitoring misses unauthenticated sensor data and how real-time physics monitoring restores true visibility.

Links:
https://www.controlglobal.com/blogs/unfettered/blog/55416557/the-plc-says-the-valve-is-open-the-hmi-agrees-but-what-if-neither-is-telling-the-truth
https://ieeexplore.ieee.org/document/9928204

The podcast and artwork embedded on this page are from Klaus Mochalski, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Trust Me, It's Air-Gapped
Episode: Grocery Fridge Hacks and the Shadow IT Gap
Pub date: 2026-11-09

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

A cyberattack that took down grocery store refrigerators across Europe reveals that risks behind shadow IT, third-party vendor management and remote access.
GrayMatter's Scott Christensen and Jeff Dunham look at why connected devices bought outside IT’s view are a growing risk. They cover what a vendor security review should ask before procurement and discuss GrayMatter’s SOC 2 journey.
Topics covered:
Lessons from the European grocery store refrigerator cyberattack
Shadow IT and shadow AI in IT and OT environments
Third-party vendor risk and security questionnaires
SOC 2 compliance and proving that security controls work
Network segmentation for IoT and OT devices
Containment, visibility and recovery as core security practices
Why IT/OT security works best as a team sport

Visit graymattersystems.com.

The podcast and artwork embedded on this page are from GrayMatter, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.