@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Three Buddy Problem (LS 40 · TOP 2% what is this?)
Episode: GPT-6 Cyber Sets Price of a Linux Exploit; Europe Silent on Fridge Hacks
Pub date: 2026-11-08

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem - Episode 119: We discuss the supermarket fridge hacks rolling across Europe, why no government wants to say the word Russia out loud, active measures and cyber-warfare, and the European silence on attribution.

Plus, OpenAI's GPT-6 Cyber and the cost of 948 Linux exploits, the Daybreak Blue training flap, a tough-love pep talk for researchers mourning the loss of the old game and the Binance postmortem the FBI pinned on North Korea's TraderTraitor.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:

0:00 Introductory banter

3:00 TLP Black and AI agents watching your edge devices

10:21 Supermarket fridge hacks spread across Europe

16:27 How the refrigeration attacks work

18:49 Is this Russia?

21:12 Boundary testing and the Article 5 problem

34:20 Sabotage short of war

40:06 The IOCs nobody is sharing

44:41 Costin's hunting playbook

51:24 Not just a European story

57:25 What do intelligence agencies know?

1:06:22 GPT-6 Cyber and Daybreak Red

1:26:40 948 Linux root exploits for $1.2 million

1:36:48 Daybreak Blue training and the mathematicians

2:09:01 Binance postmortem and TraderTraitor
Links:
Transcript

TBP Ep54: Train brake hack, GRU sanctions

Tom Hegel: Defrost and Disrupt - Europe’s Refrigeration Attacks

French blood service hit by Europe-wide fridge hacks

Govs Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems

Germany, Romania and UK report supermarket cyberattacks

OpenAI Ships GPT‑6 Cyber

A thousand fewer paths to root | OpenAI

OpenAI plans to train models on Daybreak Blue cybersecurity session data

Free Chinese AI Models Are Getting Scary Good at Hacking

Tal Be'ery: Dense in Depth: Rethinking Security When Vulns Are Everywhere

FBI blames N. Korea’s TraderTraitor for Binance theft

Binance $6.5B Crypto Theft Post-Mortem

FBI: North Korea Responsible for $6 Billion+ Binance Attack

SkiSides 2027

CYBERWARCON Agenda

RE//verse Conference

TLPBLACK

The podcast and artwork embedded on this page are from Security Conversations, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Podomation
Episode: 015 - ISA Automation Summit & Expo: CRA and Regulation, AI, SCADA, and more!
Pub date: 2026-11-04

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

In this episode, we're continuing our journey inside the ISA Automation Summit and Expo in Orlando. Our conversations kept returning to three questions. How do we protect critical infrastructure, especially water? How do we keep up with new regulations like Europe's Cyber Resilience Act? And how do we bring AI into the plant safely? ISA talked to experts on each of these topics... and their answers are more hopeful, and more practical, than the headlines suggest.

The podcast and artwork embedded on this page are from ISA - International Society of Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: Why Your Disaster Recovery Strategy Is At Risk (And How to Fix It)
Pub date: 2026-11-04

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

A successful backup is reassuring, but can your team actually restore a critical system when production is on the line?
Dino sits down with Hannah Bergin and Jack Mansfield of Macrium Software to explore what recovery looks like in manufacturing environments, from fragile legacy Windows machines to isolated networks and plant systems with different owners.
They discuss why backup and recovery should be considered during system design, how IT and OT teams can share responsibility without losing sight of safety and production, and why documentation, training and recovery drills matter as much as the technology itself.
Whether the disruption comes from a cyber incident or a failed drive, the conversation offers practical questions to help plant leaders and security teams prepare before something goes wrong.
Chapters:
(00:00:00) The risk of untested backups
(00:03:00) Backup and recovery for industrial systems
(00:06:00) On premises backup for isolated OT networks
(00:09:00) Backup retention and recovery objectives
(00:12:00) Building a disaster recovery program
(00:15:00) Balancing plant control and enterprise oversight
(00:19:00) Recovery by design for OEMs and integrators
(00:23:00) Funding OT security through capital projects
(00:27:00) Testing recovery before a disruption

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Hannah Bergin on LinkedIn
Jack Mansfield on LinkedIn
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Error Code (LS 28 · TOP 10% what is this?)
Episode: EP 94: When AI Hands Anyone the Keys to the Grid
Pub date: 2026-11-03

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Last summer 30+ Minnesota water utilities got hacked. No zero-days. No malware. Just default passwords on internet-exposed PLCs exposed. Eric Stride, Chief Security Officer at Huntress, discusses how AI now lets anyone attack US critical infrastructure.

The podcast and artwork embedded on this page are from Robert Vamosi, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: (CS)²AI Podcast Show: Control System Cyber Security
Episode: The FDA's Biggest Stick: Medical Device Cybersecurity with Billy Rios
Pub date: 2026-11-03

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Billy Rios, vulnerability researcher and (CS)²AI Fellow, joins Derek Harp for the audience Q&A after presenting his team's research on a connected wheelchair that was later recalled. Billy explains why the FDA's power to keep a device off the US market is the biggest stick in any industry, what a recall means when the problem is software, and why a manufacturer can't simply switch off a core feature to fix a flaw. They get into legacy "big iron" devices (Billy has bought a CT scanner and a C-arm), why the FDA's guidance works even though it isn't prescriptive, and how manufacturers' behavior has changed in about ten years. Billy also gives advice to researchers: bug bounties, making a living as an independent, how the CFAA and DMCA good-faith exception affect legal risk, and a plain-English explanation of side-channel attacks.
Watch the wheelchair clip: https://youtu.be/6-iBC5ugiSo
More from (CS)²AI on YouTube: https://www.youtube.com/@cs2ai
Guest: Billy Rios, (CS)²AI Fellow, Cybersecurity Researcher, Author, and Co-Founder of QED Solutions
Host: Derek Harp, Founder and Chairman, (CS)²AI
Recorded live during a (CS)²AI Online webinar on October 21, 2026.
Chapters:
00:42 Welcome from Trisha Harp and the wheelchair research
02:01 Who decides whether a manufacturer reports to the FDA?
04:44 Are manufacturers getting better? Why the FDA matters
08:43 The FDA's biggest stick: keeping a device off the market
09:16 What a recall means when the problem is software
11:15 Guidance that isn't prescriptive
14:16 Controlled vs. uncontrolled vulnerabilities, and the wheelchair dilemma
17:30 How the FDA process changed manufacturers
20:11 Legacy "big iron": CT scanners, C-arms and VBScript
24:08 Standards, secure by design and the "soup" analogy
26:10 Connected devices multiplying inside and outside the hospital
28:24 Advice for researchers: the 300 backdoor passwords and the PATCH Act
30:58 Bug bounties and making a living as a researcher
34:55 Legal risk: the CFAA and the DMCA good-faith exception
37:11 Side-channel attacks explained
38:56 Why only the FDA can do this 41:13 Parting words
Legal topics in this episode are Billy's views, not legal advice.
Produced by (CS)²AI (Control System Cyber Security Association International).

The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.