@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Casos de Ciberseguridad Industrial
Episode: 4/4 Desenlace de la estrategia global de ciberseguridad industrial
Pub date: 2026-10-26

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

En este episodio final se proyecta el horizonte del sector con la mirada puesta en 2030, visualizando cómo se transformará el rol y la relevancia del responsable de ciberseguridad industrial dentro del organigrama corporativo.

The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Cyber Brews - The Operational Technologies Podcast
Episode: The Buncefield Questions: Rethinking OT Cybersecurity
Pub date: 2026-10-22

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Series 3 - Episode 7
A step back in time to 11 December 2005. 06:01 in the morning. A series of explosions at the Buncefield oil storage depot near Hemel Hempstead shook the surrounding area. The blast could be heard up to 125 miles away and registered 2.4 on the Richter scale.
In this episode of Cyber Brews, we explore the three questions posed by the UK Competent Authority following the Buncefield incident and consider how they can help organisations rethink their approach to cybersecurity:
🔹 Do we understand what can go wrong?
🔹 Do we know what systems are in place to prevent this happening?
🔹 Do we have information to assure ourselves that they are working effectively?
These questions may sound straightforward, but they raise some important challenges for organisations responsible for critical infrastructure.
We discuss how they apply to OT cyber risk assessments, security controls, organisational accountability and the evidence needed to demonstrate that cybersecurity measures are actually working.
Because having firewalls, procedures and security policies in place is one thing. Understanding what could go wrong, knowing whether the right protections exist, and having evidence that they remain effective is another.
Whether you're an OT engineer, cybersecurity professional, site owner or process safety specialist, join us as we explore how lessons from Buncefield can help us ask better questions about industrial cybersecurity.
☕ Grab a brew and join the conversation. Are we asking the right questions about OT cyber risk?

The podcast and artwork embedded on this page are from Dave A. and Chris F., which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: ICS Cyber Talks Podcast
Episode: Idan Zohar Co-Founder & CEO @Sinc Security on updates solution in isolated environments
Pub date: 2026-10-22

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

מי שיקרא את הדוחות על ההתקפות היי.איי האוטונומיות לא יכול שלא לשים לב לעובדה שההצלחות נבעו משימוש בחולשות ידועות ולאו דווקא זירו דיי.

כבר עשור שדוחות הסייבר של החברות המובילות בעולם ובראשן הדו"ח הידוע של איי.ביי.אם, מצביעות על בעיה אחת אקוטית, עדכונים! פאצ'ים, איי.אוו.סיס, סיי.ווי.אייס, אינדיקטורים והרשימה עוד ארוכה, שמדברים על מערכות מידע ארגוניות אין ספק שהמודעות והרצון קיימים ועדיין זה לוקח בממוצע עולמי שמונה חודשים, אבל מה קורה במערכות תפעוליות שמנותקות מסביבת מערכות המידע והאינטרנט (מקווה בשבילכם שזה המצב אצלכם)?

לפעמים הפתרון מונח לפנינו, כול מה שצריך זה מישהו שזה יכאב לו מספיק כדי שירים את הכפפה ויהפוך את זה למוצר.

נחשון פינקו מארח את עידן זוהר מייסד-שותף ומנכ"ל סינק סקיורטי בשיחה על הצורך המיידי בפתרון לעדכונים בסביבות סגורות, איך נולדה ההבנה ולמה אסור לחכות רגע אחד במתן פתרון במיוחד היום שתוקפים מגבירים את השימוש בהיי.איי. גילוי נאות: התקנתי את המערכת בתחנות כוח ונחסכו כשלושה עד ארבעה ימי עבודה בחודש בביצוע עדכונים יומיים ופינוי הזמן של הצוות למשימות אחרות.

 

Anyone who reads reports on autonomous AI-driven cyberattacks cannot help but notice that successful attacks largely exploited known vulnerabilities rather than true zero-day exploits

For more than a decade, cybersecurity reports from the world's leading companies, most notably IBM's well-known annual report, have regularly highlighted one critical issue: updates. Patch management, IOCs, CVEs, and a long list of other indicators continue to dominate discussions. Enterprise IT environments have awareness and readiness to address the problem, yet the global average time to remediate vulnerabilities remains around eight months. But what happens in operational systems that are isolated from corporate IT networks and disconnected from the internet (which, hopefully, is the case in your organization)?

Sometimes the solution is right in front of us. All it takes is someone who feels the pain deeply enough to take up the challenge and turn it into a product

Nachshon Pincu hosts Idan Zohar, Co-Founder and CEO of Sinc Security, for a discussion about the vital need for a patch management solution in isolated environments, how the idea behind the product was born, and why organizations cannot afford to wait even a single moment before dealing with this challenge, especially today as attackers increasingly leverage AI

Disclosure: I deploy the system in power generation facilities, and it has reduced the daily updates to three to four workdays per month by improving the update process and freeing the team to concentrate on other critical tasks

The podcast and artwork embedded on this page are from Nachshon Pincu, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Podomation
Episode: 013 - Panel from the Automation Summit & Expo: Cybersecurity in US Water Systems
Pub date: 2026-10-21

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

This episode of Podomation is an encore presentation of a panel presented during the ISA Automation Summit & Expo in September 2026.

This session examined practical, risk-focused methods for securing operational technology in the water sector. We explored how frameworks such as ISA/IEC 62443 and programs like the NRWA Cybersecurity Circuit Rider help utilities of all sizes prioritize meaningful risk reduction rather than merely checking compliance boxes.
Presenters:
Moderator: Marco Ayala
Steve Mustard
Chad Paxson
Graham Nasby
John DeGour

The podcast and artwork embedded on this page are from ISA - International Society of Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: The Blind Spots Hiding On Your Plant Floor Can Hurt You
Pub date: 2026-10-21

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Your plant can be running exactly as expected and still have blind spots that put production, process, and people at risk.
Dino Busalachi and Kevin Kumpf break down the gaps most leaders never see: new equipment arriving with outdated firmware, vendors making changes nobody tracks, and process data that gets collected but rarely watched. Using refrigeration systems and manufacturing floors as examples, they show why monitoring has to connect security with uptime, maintenance, and the cost of a missed warning.
They also challenge the belief that encryption or network isolation is enough, explain where AI helps and where it still needs human judgment, and make the case for getting integrators, OEMs, IT, and operations into the same conversation.
Three questions every plant leader should be able to answer: Do you know what normal looks like in your plant? Who can change it? And who will notice when something starts to drift?
Follow Industrial Cybersecurity Insider for practical conversations on protecting production, people, and uptime.
Chapters:
(00:00:00) Why OT Attacks Put Business Continuity at Risk
(00:03:00) Industrial Network Design and the Visibility Gap
(00:07:00) Vendor Access, AI Data Collection, and Third Party Risk
(00:10:00) Outdated Firmware and Accountable Remote Maintenance
(00:13:00) Why AI Patching Needs Human Oversight in OT
(00:17:00) Process Data, Industrial Espionage, and Operational Value
(00:23:00) Choosing Integrators Who Understand Your Plant
(00:28:00) Building Monitoring Into New Equipment and Projects
(00:34:00) Backup Gaps and the Case for Managed OT Services
(00:38:00) Getting IT and OT to Share Responsibility

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.