@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)
Episode: Trust Is Not a Security Control: Blast Radius and the Management Plane
Pub date: 2026-10-19

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Work with Aaron: https://protectitallpod.com/work/

The book: https://protectitallpod.com/book/

This episode: https://protectitallpod.com/ep128/

The OT Security Starter Kit: https://protectitallpod.com/starter-kit/

Zero trust asks whether something should be allowed. Zach Miller asks a different question: if it is allowed, and something blows up, how far does it go?

Zach is a cybersecurity engineer in Colorado Springs who came up through K-12 network support on a shoestring budget, defense contracting and managed services. On the side he runs Skip to Secure, where he publishes research on trust concentration and management-plane abuse, including his Blast Radius framework.

He and Aaron trace one pattern through five years of incidents. Kaseya and SaltStack in 2020 and 2021, then Stryker in 2026: each time the management platform itself became the way in, and the authority it already held decided how far the damage went. Segmentation is the fix everyone already knows. It is still a hard sell.

What you will take away

Why trust is something you delegate, not a security control, and how to put a limit on it

What Zach's blast radius framework measures: reach, scope crossing, standing privilege, human concentration, automation visibility and recoverability

Why the same PLC with the same vulnerabilities is not the same risk on a turbine as it is on an ice machine

Why attacks now look like a normal workday from a cloud address, not a foreign IP in the logs

Why one any-any rule undoes 477 good ones, and why a firewall starts from deny

Why you verify every piece of work an AI agent hands back, however good the prompt was

In this episode

5:03 Sleeping under the conference table

8:30 The open proxy everyone borrowed

10:24 From K-12 to defense contracting

12:59 How careers really get built

16:36 Where is the puck going?

23:22 A heat map for the smoker

25:41 Verify everything the agent does

32:31 Attacks that look like a normal workday

34:33 The work laptop on the home network

39:15 Security is never done

41:39 Where the word firewall comes from

43:33 The same failure, five years apart

44:21 What blast radius measures

46:28 The turbine and the ice machine

49:43 When the right account does the wrong thing

51:53 A firewall with one any-any rule

54:08 Where to find Zach's research

About the guest

Zach Miller is a cybersecurity engineer based in Colorado Springs. He started as a network and switching specialist supporting K-12 education, then moved through defense contracting, consulting and managed services into cybersecurity engineering. Through Skip to Secure, his independent research and training effort, he publishes white papers on trust concentration and management-plane abuse, including the Blast Radius framework and the LOLMgmt paper on living-off-the-land management attacks.

Blast Radius white paper and scoring workbook: https://github.com/ridgestoneco/blast-radius

LOLMgmt white paper: https://zenodo.org/records/21255394

Zach on LinkedIn: https://www.linkedin.com/in/zacharymiller0111/

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

The book: https://protectitallpod.com/book/

This episode: https://protectitallpod.com/ep128/

The OT Security Starter Kit: https://protectitallpod.com/starter-kit/

YouTube: https://www.youtube.com/@PrOTectITAll

Email: info@protectitallpod.com

X: https://twitter.com/protectitall

Facebook: https://facebook.com/protectitallpodcast

To be a guest or suggest a guest or episode, email info@protectitallpod.com.

Please leave us a review on Apple or Spotify:

Apple: https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify: https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Trust Me, It's Air-Gapped
Episode: AI and OT Cybersecurity: Managing Risk Inside and Outside the Plant
Pub date: 2026-10-09

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

AI is a force multiplier for your workforce and for attackers. In this episode of Trust Me, It’s Air-Gapped, GrayMatter OT Cybersecurity Practice Lead Scott Christensen unpacks what industrial leaders are saying about AI and cyber risk.
Scott explains how AI-powered reconnaissance lets bad actors launch attacks in minutes instead of weeks. He also covers the risks growing inside the house: well-meaning employees adopting AI tools without a plan, vendors adding undisclosed AI to their products and plant-floor data flowing to the cloud without zero trust architecture.
Also discussed:
Why every manufacturer needs a cross-functional AI working group
Treating AI like a new employee with least-privilege access
Keeping a human in the loop for agentic AI decisions
Capturing tribal knowledge before your veteran operators retire
Questions to ask vendors about their AI roadmap
Why AI won’t replace your SOC anytime soon

Visit graymattersystems.com.

The podcast and artwork embedded on this page are from GrayMatter, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Talk OT to Me
Episode: When does OT remote access become infrastructure?
Pub date: 2026-10-07

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Remote access started as a way to save time and avoid unnecessary travel. But as industrial operations become more connected, distributed and dependent on remote expertise, its role is changing.
In this episode of Talk OT to Me, Jesper and Jeff explore when OT remote access stops being just another tool and becomes part of the infrastructure an operation depends on.
They discuss what happens when access goes down, how dependency and downtime change the equation, when redundancy starts to matter, and why the conversation should begin with operational needs — not just cybersecurity.
Because the real question isn’t simply whether remote access is secure. It’s: what happens to your operation when it’s no longer there?

The podcast and artwork embedded on this page are from Secomea, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure (LS 30 · TOP 5% what is this?)
Episode: Pushing Cyber Planning Beyond Prevention with Stephanie Crowe and Nick Andersen
Pub date: 2026-10-06

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Keeping power, water, and other essential services running requires planning for what happens when cyber defenses fail. On this episode of Cyber Focus, Frank Cilluffo speaks with Stephanie Crowe, head of the Australian Cyber Security Centre, and Nick Andersen, acting director of the Cybersecurity and Infrastructure Security Agency (CISA), about how two close allies are preparing critical infrastructure to operate through compromise.
The conversation examines how governments and industry identify their most critical systems, turn shared intelligence into joint action, and prepare for attacks that cross sectors and borders. Crowe and Andersen also discuss how AI is changing cyber defense and what that means for infrastructure investment, workforce skills, and decisions in the boardroom.
Main Topics
Operating through cyberattacks
Protecting critical assets and dependencies
China's infrastructure prepositioning
CI Fortify and joint industry planning
U.S.-Australia and Five Eyes cooperation
AI defense and aging infrastructure
AI's energy demands
Workforce skills and boardroom decisions
Key Quotes
"You have to be able to fight through compromise now, which is a really different way of thinking about the cyber threat." — Stephanie Crowe
"We've come a long way from thinking about our number one cyber risk being data breaches and theft of information into a world where service disruption is now the thing that we have to really consider and plan in our cyber risk management." — Stephanie Crowe
"And just to be completely honest, Australia really bailed us out when we were in the middle of our shutdown… Australia led from the front." — Nick Andersen
"If the Congress decided that in the next budget that CISA needed to be quintupled in size, we're still not going to have enough resources to be able to meet every single area that we'd like to be able to stray into with our attention." — Nick Andersen
"We know that we're seeing exceedingly aggressive, well-orchestrated campaigns, in particular from entities like China, that are engaged in a significant way to preposition across our critical infrastructure to hold it at risk at a time and place of their choosing." — Nick Andersen
Links and Resources
Cybersecurity and Infrastructure Security Agency (CISA)
Australian Cyber Security Centre: Guidance and Resources
About the Guests:
Stephanie Crowe is Deputy Director-General of the Australian Signals Directorate and Head of the Australian Cyber Security Centre. She has held senior roles in signals intelligence and cybersecurity, leading efforts to strengthen Australia's cyber defenses, build threat intelligence capabilities, and support industry during major cyber incidents.
Nick Andersen is Acting Director of the Cybersecurity and Infrastructure Security Agency (CISA), where he leads efforts to reduce risks to America's cyber and physical infrastructure. A U.S. Marine Corps veteran, he has held senior cybersecurity roles at the Department of Energy, the White House, and in the private sector.


The podcast and artwork embedded on this page are from Frank Cilluffo / McCrary Institute, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Casos de Ciberseguridad Industrial
Episode: 3/4 Acciones de la estrategia global de ciberseguridad industrial
Pub date: 2026-10-19

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

En este episodio se detallan las decisiones estratégicas que marcan la diferencia entre los proyectos de ciberseguridad industrial que obtienen resultados tangibles y los que fracasan. A través de este bloque, definiremos las capacidades imprescindibles que cualquier compañía industrial debe consolidar de cara a los próximos cinco años. Por último, abordaremos fórmulas prácticas de optimización […]

The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.