@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Industrial Cybersecurity Insider
Episode: How To Lose Millions Without Getting Hacked
Pub date: 2026-11-11

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Manufacturing cybersecurity mistakes that cost millions without a hacker in sight, and the steps that prevent them, in this rewind episode.
We pulled one of our earliest conversations out of the archive, and it hits harder now than when we first recorded it. Dino and Craig share stories from the plant floor about mistakes that quietly cost manufacturers millions:
A vending machine with a duplicate IP address that took down a $35 million wheel press
Thirty Siemens PLCs that wiped their own IP addresses after an IT technician scanned the wrong network at the wrong time
Federal agents who scanned a beverage plant’s control system while hunting malware on its mail servers
A steel mill that had to choose between pulling an unpatched server off the network and shutting the plant down

None of these came from a sophisticated attacker. Competent people doing normal jobs caused them, with no idea how the plant floor would react.
Dino explains what actually closes the gap: an accurate asset inventory, a network built to contain mistakes, continuous monitoring, control over remote access, and an incident response plan rehearsed before the bad day arrives. His advice for where to start is to run one tabletop exercise and name one owner for plant floor security at every site.
Chapters:
(00:00:00) Cold open: a soda machine takes down a $35 million wheel press
(00:01:12) The incidents that never make the news
(00:02:26) Thirty Siemens PLCs reset their IP addresses to zero
(00:05:38) When federal agents scan your control network
(00:07:02) WannaCry, SMBv1, and the steel plant standoff
(00:11:16) A pen tester can't tell a PLC from a printer
(00:18:12) The air gap myth and the contractor laptop
(00:21:09) Five ICS controls IT and OT can work on together
(00:25:41) Windows 7 on the plant floor and the CISO's purview
(00:31:22) Start here: a tabletop exercise and one OT owner per plant

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: OT Security Made Simple
Episode: Layer 0 Security: What If the PLC and HMI Are Lying? | OT Security Made Simple
Pub date: 2026-11-10

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Klaus Mochalski and Joe Weiss (Applied Control Solutions) explore Layer 0 security in ICS. Learn why network monitoring misses unauthenticated sensor data and how real-time physics monitoring restores true visibility.

Links:
https://www.controlglobal.com/blogs/unfettered/blog/55416557/the-plc-says-the-valve-is-open-the-hmi-agrees-but-what-if-neither-is-telling-the-truth
https://ieeexplore.ieee.org/document/9928204

The podcast and artwork embedded on this page are from Klaus Mochalski, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Trust Me, It's Air-Gapped
Episode: Grocery Fridge Hacks and the Shadow IT Gap
Pub date: 2026-11-09

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

A cyberattack that took down grocery store refrigerators across Europe reveals that risks behind shadow IT, third-party vendor management and remote access.
GrayMatter's Scott Christensen and Jeff Dunham look at why connected devices bought outside IT’s view are a growing risk. They cover what a vendor security review should ask before procurement and discuss GrayMatter’s SOC 2 journey.
Topics covered:
Lessons from the European grocery store refrigerator cyberattack
Shadow IT and shadow AI in IT and OT environments
Third-party vendor risk and security questionnaires
SOC 2 compliance and proving that security controls work
Network segmentation for IoT and OT devices
Containment, visibility and recovery as core security practices
Why IT/OT security works best as a team sport

Visit graymattersystems.com.

The podcast and artwork embedded on this page are from GrayMatter, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: PrOTect It All (LS 28 · TOP 10% what is this?)
Episode: Walk the Floor: Why Your Asset Count Is Wrong
Pub date: 2026-11-09

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Work with Aaron: https://protectitallpod.com/work/

The book: https://protectitallpod.com/book/

This episode: https://protectitallpod.com/ep131/

The OT Security Starter Kit: https://protectitallpod.com/starter-kit/

Kevin Kumpf started out strapping steel under gantry cranes, found the crane control systems had never been updated, and has worked in OT security ever since, including leading OT security at a large US utility. He and Aaron spend this episode on the things that do not show up in a tool: safety culture, knowing what good looks like, and walking the floor.

Why an IT data center would never post a "days since last incident" sign, and why OT treats safety as the job. Two engineers at one plant who count 50 and 200 control cabinets. Ten engines on one ship, one running different. Why plants protect the most expensive asset instead of the most critical one, and the five-cent part nobody budgets for.

Then data and AI: a boiler tube failure spreadsheet that decided outage plans without ever being on a critical asset list, why AI without context is just numbers, and why a human who can check the work still matters. Aaron's zip tie that left a core switch failed for months, the only backup server sitting next to a space heater, and how to sell OT security to the business: uptime, reliability and competitive advantage, done securely.

Key takeaways

Count it yourself. If two people at the same plant give you 50 and 200, you do not have an inventory, and a tool will not settle it.

Know what good looks like. A baseline of temperatures, flows, RPMs and who talks to whom is what makes the odd one out visible.

Criticality is not price. Ask what stops production, including the small part and the small site on the same network.

Walk the floor and ask what the red light means. If nobody knows, find out or remove the light.

AI needs context and a human who can check its answer.

Lead with uptime and reliability. Security comes along with it.

Chapters

0:00 Intro

0:22 Welcome and introduction

1:58 From strapping steel to crane controls

3:16 Hard hats and safety culture in OT

6:08 Days since last incident: IT vs OT

6:58 A sticker for every year without an incident

8:29 No shortcuts to safety

9:54 Teaching IT people the safety mindset

13:11 No-judgment zone: who knows their baseline?

15:39 50 cabinets or 200: asset counts that disagree

17:17 Who controls the plant, and knowing your baseline

21:17 You have to know what good looks like

22:41 Ten engines, one running different

23:49 The most expensive asset is not the most critical

25:03 The boiler tube failure spreadsheet

28:04 Excel, history and data in context

30:57 If the AI says 42

33:42 Data versus information

36:17 The cloud and trust but verify

40:47 Firewalls, passive monitoring, people and process

42:41 Enterprise IT tools in a plant, done the OT way

44:58 One zip tie and a failed core switch

48:03 The backup server next to the space heater

50:48 Protecting the device from the human

51:15 What Kevin is building

53:51 Changing the oil: lessons learned the hard way

56:50 Where to find Kevin

57:38 Selling uptime, not security

About the guest

Kevin Kumpf has more than 20 years of IT and OT security and governance and compliance experience in energy, communications, the defense industrial base, transportation, manufacturing, healthcare, financial services and other sectors. As Director of OT Security (Iberdrola N.A.) he oversaw the security and regulatory compliance programs for operating companies including NYSEG, RG&E and CMP. Today he is Chief OT Strategist at Kasm Technologies.

Kasm Technologies: https://kasm.com/

Kevin on LinkedIn: https://www.linkedin.com/in/kevin-kumpf-b5021412

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

The book: https://protectitallpod.com/book/

This episode: https://protectitallpod.com/ep131/

The OT Security Starter Kit: https://protectitallpod.com/starter-kit/

Support the show: https://protectitallpod.com/go/support/podcast

YouTube: https://www.youtube.com/@PrOTectITAll

Email: [email protected]

X: https://twitter.com/protectitall

Facebook: https://facebook.com/protectitallpodcast

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Apple: https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify: https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Casos de Ciberseguridad Industrial
Episode: 2/4 Análisis del riesgo de la IA en la digitalización industrial
Pub date: 2026-11-09

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

En este episodio se profundiza en si el modelo tradicional de evaluación de ciberseguridad (amenazas, vulnerabilidades e impacto) resulta suficiente para evaluar sistemas de inteligencia artificial o si requiere incorporar otras dimensiones.

The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.