@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: ICS Cyber Talks Podcast
Episode: Ophir Oren, Head of Cyber & AI Sec Innovation @Bayer on protecting against a Future only a step away
Pub date: 2026-08-26

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

המשמעות של חדשנות בעידן החדש היא פחות או יותר "מחר", היכולת שלנו כאנשי סייבר להסתמך על כלי הגנה קיימים הולכת ומצטמצמת ודורשת להערך מחדש

במשך שנים אני טוען שסייבר זו לא טכנולוגיה אלא מכלול תבונות שהטכנולוגיה בקצה נועדה לשרת אותן, כיום בעידן האינטלגנציה המלאכותית והיכולות המשתנות חדשות לבקרים, ברור שאין יותר מקום להסתמך רק על טכנולוגיות הגנה היות והן משתרכות מאחור בלשון המעטה ןמעבר להגנה לפי קונטקסט.

נחשון פינקו מארח את אופיר אורן ראש צוות חדשנות בסייבר ואינטליגנציה מלאכותית בחברת באייר בשיחה על תפיסת החדשנות והגורם האנושי מול התפתחויות טכנולוגיות על סטרואידים.

בין שאר הנושא:

סוכני אינטליגנציה מלאכותית

ה"אשליות" של האינטליגנציה מלאכותית

זהויות לא אנושיות  

קונטום והעידן הפוסט קוונטי

מעבר מערכות תפעוליות לענן

ועוד

 

The Meaning of Innovation in the New Era Is, More or Less, “Tomorrow.”

As cybersecurity professionals, our ability to rely on existing security tools is steadily diminishing, requiring us to fundamentally rethink our approach.

For years, I have argued that cybersecurity is not a technology problem. It is a collection of human insights, intelligence, and ways of thinking, with technology merely serving those capabilities at the edge. Today, in the age of artificial intelligence and rapidly evolving capabilities that change almost daily, it's clear there is no longer room to rely solely on defensive technologies. To put it mildly, they are falling behind, even when moving beyond traditional context-based protection.

Nachshon Pincu hosts Ophir Oren, Head of Cybersecurity Innovation and AI at Bayer, for a conversation about innovation, the human factor, and technological developments on steroids.

Among the topics we discussed:

AI Agents

The “hallucinations” of artificial intelligence

Non-human identities

Quantum computing and the post-quantum era

The migration of operational technology (OT) systems to the cloud

And much more

 

Cybersecurity is no longer about keeping pace with technology. It is about anticipating what comes next.

The podcast and artwork embedded on this page are from Nachshon Pincu, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Risky Business (LS 56 · TOP 0.5% what is this?)
Episode: Risky Business #850 -- Widespread AI-enabled attacks target Siemens PLCs
Pub date: 2026-08-26

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

On this week’s show Patrick Gray and James Wilson are joined by guest co-host Ollie Whitehouse, the CTO of the UK’s NCSC, to talk through the week’s news, including:

Iranian hackers take down a small-scale power generator in the UK

Siemens PLCs in critical US sectors are also being targeted… We’re stumped on who could be behind that one, too.

Microsoft fixed a CVSS 10 deserialisation bug in Entra before someone else found it and owned the planet

Prompt injection isn’t going away

LLMs are deceiving us meat sacks and it’s a worry

Much, much more…

This week’s show is brought to you by Okta. VP of Threat Intel Brett Winterford joins the show in this week’s sponsor interview to talk James through how the company is turning its plethora of accumulated data into free alerting for its customers. They also chat about Okta’s new threat intelligence product line.

This episode is also available on YouTube



Show notes



Iran-linked hackers blamed for cyber-attack that shut down UK power plant | theguardian.com


Hackers using AI to target Siemens PLCs in critical US sectors | securityweek.com


Defending Against an Active Threat to Siemens S7 Series PLCs | IC3.gov Industry Alerts


US charges Iranians for sprawling hacking campaign on government agencies, universities | therecord.media


T-Mobile ‘chopped a cable’ to expel Chinese hackers from its network | techcrunch.com


The long tail of Clop’s PTC hack is just beginning to emerge | cyberscoop.com


CISA: Medusa ransomware hit over 500 critical infrastructure orgs | BleepingComputer


Ransomware disproportionately targets medium-sized firms, straining customer relationships | Cybersecurity Dive


Microsoft warns of max severity Entra ID flaw exploited in attacks | BleepingComputer


Critical RCE flaw in Windows IKE Extension now actively exploited | BleepingComputer


Rust supply chain attack linked to North Korean hackers | securityweek.com


Grok exfiltrates user data when malicious instructions are encrypted | arstechnica.com


New phishing toolkit uses passkeys to maintain access after password resets | securityweek.com


Password spraying attacks surge 155x as hackers exploit MFA gaps | BleepingComputer


Hackers compromise 14,500 Dahua web cameras in 35-day campaign | BleepingComputer


Hackers infect Android car head units with proxy botnet malware | BleepingComputer


ToxicPanda Android malware uses VPN permissions to block Google Play | BleepingComputer


New Manic Android malware can exfiltrate data through nearby devices | BleepingComputer


Citrix urges admins to patch new NetScaler flaws as soon as possible | BleepingComputer


AliExpress caught fingerprinting visitors after sending inaudible sounds to browsers | arstechnica.com


EXCLUSIVE: How a Texas student blew the whistle on a rogue AI hacking attempt | reuters.com


Detections and customer notifications | Okta Threat Intelligence




The podcast and artwork embedded on this page are from Risky Business Media, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Podomation
Episode: 012 - Cybersecurity for Water and Wastewater Systems: Lessons Learned
Pub date: 2026-08-25

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

The recent cyberattacks against water systems have raised concerns throughout the US water sector. What should system operators consider as they move to assess their risk, shore up vulnerabilities and ensure that water systems are adequately protected? This episode addresses the role of standards such as ISA/IEC 62443, the impact of regulation and perhaps the most significant factor of all: operator training and preparation. 

Interested in more on this topic? 
Attend an upcoming ISA training on 26 September: Cybersecurity Awareness Training for Water/Wastewater Industry Professionals - visit ase.isa.org to register
Attend the ISA Automation Summit & Expo, where this topic will be the subject of a panel discussion on 28 September - visit ase.isa.org to register
Read "Cybersecurity in US Water Systems: Lessons from the Recent Incidents," by Steve Mustard  

Panelists:
Morgan Foor, Moderator
Steve Mustard, au2mation
Leo Staples, Staples Farm and ISA Past President
Arun Rajagopal, cybersecurity consultant
Charles Stephens, National Rural Water Association (NRWA)

The podcast and artwork embedded on this page are from ISA - International Society of Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: Why Detection Alone Can't Stop the Next OT Attack
Pub date: 2026-08-26

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Detection got fast, but remediation didn't. And that gap is exactly where attackers live.
Manufacturers have spent the last decade building visibility into their plants: sensors, dashboards, alerts flying into every SOC. But knowing about a threat and fixing it are two different problems, and most industrial teams are still solving the second one at human speed. A ticket gets opened. A maintenance window gets scheduled. Three departments get looped in. Meanwhile, the attacker isn't waiting for anyone's approval.
In this episode, Craig Duckworth talks with Tal Kollender, founder and CEO of Remedio, about what's actually keeping industrial environments exposed: misconfigurations left untouched for months, unnecessary services quietly giving attackers a path to move laterally, and aging systems nobody wants to be the one to touch. Tal makes the case that patching alone will never close this gap and explains why safe automated remediation is becoming essential as AI accelerates attacks faster than most security teams can keep up.
They also dig into the reality of OT: uptime and safety come first, IT security tools often can't reach the controls layer, and the wrong change can cause real damage on the plant floor. It's a candid look at what it takes to align security and operations, and why building that trust is the real first step toward proactive protection instead of reactive cleanup.
If you're responsible for securing a plant floor, a fleet of facilities, or the budget behind either one, this conversation gives you a clear, practical way to think about closing the gap between seeing a threat and actually stopping one.
Chapters:
(00:00:00) Why machine speed detection needs machine speed remediation
(00:01:00) Tal’s path from teenage hacker to cybersecurity founder
(00:06:00) Misconfigurations and lateral movement in industrial environments
(00:11:00) Why patching and configuration changes are difficult in OT
(00:15:00) Moving from reactive detection to proactive hardening
(00:17:00) Aligning people, process, and technology
(00:22:00) AI adoption, unmanaged risk, and doing more with less
(00:25:00) Bridging the IT and OT divide without disrupting operations
(00:29:00) The first practical step toward proactive industrial security

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Tal Kollender on LinkedIn
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Energy Talks
Episode: #133: Bridging the IT and OT Gap: Inside the OWASP OT Top 10 Project
Pub date: 2026-08-20

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

How a new open-source framework maps critical cybersecurity risks to global industrial standards.
In this episode, OMICRON OT cybersecurity expert Simon Rommer speaks with Andreas Happe, who is a security researcher and PhD student at the Vienna University of Technology, and Siegfried Hollerer, who is a security architect and analyst as well as a NIS auditor at the Austrian Ministry of the Interior and lecturer at the St. Pölten University of Applied Sciences in Austria.

Simon and his guests discuss their work and experience with the OWASP Operation Technology (OT) Top 10 Project, which is an open-source awareness initiative and practical framework created to identify and rank the most critical cybersecurity risks and vulnerabilities affecting OT environments.

They also describe how critical cybersecurity risks are mapped directly to major international frameworks, like IEC 62443 and NIST, providing infrastructure operators with immediate, actionable countermeasures and a shared vocabulary for improved industrial resilience.

Get more information about OT Cybersecurity for the Power Grid.

We would really like to know what you think about Energy Talks and which topics you would like to hear more about. To do this, simply send us an email to [email protected] and be sure to give us a star review on Spotify or Apple Podcast. Thanks for your feedback!
Please join us to listen to the next episode of Energy Talks 🎙️

The podcast and artwork embedded on this page are from OMICRON electronics GmbH, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.