@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Risky Business (LS 56 · TOP 0.5% what is this?)
Episode: Risky Business #850 -- Widespread AI-enabled attacks target Siemens PLCs
Pub date: 2026-08-26

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

On this week’s show Patrick Gray and James Wilson are joined by guest co-host Ollie Whitehouse, the CTO of the UK’s NCSC, to talk through the week’s news, including:

Iranian hackers take down a small-scale power generator in the UK

Siemens PLCs in critical US sectors are also being targeted… We’re stumped on who could be behind that one, too.

Microsoft fixed a CVSS 10 deserialisation bug in Entra before someone else found it and owned the planet

Prompt injection isn’t going away

LLMs are deceiving us meat sacks and it’s a worry

Much, much more…

This week’s show is brought to you by Okta. VP of Threat Intel Brett Winterford joins the show in this week’s sponsor interview to talk James through how the company is turning its plethora of accumulated data into free alerting for its customers. They also chat about Okta’s new threat intelligence product line.

This episode is also available on YouTube



Show notes



Iran-linked hackers blamed for cyber-attack that shut down UK power plant | theguardian.com


Hackers using AI to target Siemens PLCs in critical US sectors | securityweek.com


Defending Against an Active Threat to Siemens S7 Series PLCs | IC3.gov Industry Alerts


US charges Iranians for sprawling hacking campaign on government agencies, universities | therecord.media


T-Mobile ‘chopped a cable’ to expel Chinese hackers from its network | techcrunch.com


The long tail of Clop’s PTC hack is just beginning to emerge | cyberscoop.com


CISA: Medusa ransomware hit over 500 critical infrastructure orgs | BleepingComputer


Ransomware disproportionately targets medium-sized firms, straining customer relationships | Cybersecurity Dive


Microsoft warns of max severity Entra ID flaw exploited in attacks | BleepingComputer


Critical RCE flaw in Windows IKE Extension now actively exploited | BleepingComputer


Rust supply chain attack linked to North Korean hackers | securityweek.com


Grok exfiltrates user data when malicious instructions are encrypted | arstechnica.com


New phishing toolkit uses passkeys to maintain access after password resets | securityweek.com


Password spraying attacks surge 155x as hackers exploit MFA gaps | BleepingComputer


Hackers compromise 14,500 Dahua web cameras in 35-day campaign | BleepingComputer


Hackers infect Android car head units with proxy botnet malware | BleepingComputer


ToxicPanda Android malware uses VPN permissions to block Google Play | BleepingComputer


New Manic Android malware can exfiltrate data through nearby devices | BleepingComputer


Citrix urges admins to patch new NetScaler flaws as soon as possible | BleepingComputer


AliExpress caught fingerprinting visitors after sending inaudible sounds to browsers | arstechnica.com


EXCLUSIVE: How a Texas student blew the whistle on a rogue AI hacking attempt | reuters.com


Detections and customer notifications | Okta Threat Intelligence




The podcast and artwork embedded on this page are from Risky Business Media, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Podomation
Episode: 012 - Cybersecurity for Water and Wastewater Systems: Lessons Learned
Pub date: 2026-08-25

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

The recent cyberattacks against water systems have raised concerns throughout the US water sector. What should system operators consider as they move to assess their risk, shore up vulnerabilities and ensure that water systems are adequately protected? This episode addresses the role of standards such as ISA/IEC 62443, the impact of regulation and perhaps the most significant factor of all: operator training and preparation. 

Interested in more on this topic? 
Attend an upcoming ISA training on 26 September: Cybersecurity Awareness Training for Water/Wastewater Industry Professionals - visit ase.isa.org to register
Attend the ISA Automation Summit & Expo, where this topic will be the subject of a panel discussion on 28 September - visit ase.isa.org to register
Read "Cybersecurity in US Water Systems: Lessons from the Recent Incidents," by Steve Mustard  

Panelists:
Morgan Foor, Moderator
Steve Mustard, au2mation
Leo Staples, Staples Farm and ISA Past President
Arun Rajagopal, cybersecurity consultant
Charles Stephens, National Rural Water Association (NRWA)

The podcast and artwork embedded on this page are from ISA - International Society of Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: Why Detection Alone Can't Stop the Next OT Attack
Pub date: 2026-08-26

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Detection got fast, but remediation didn't. And that gap is exactly where attackers live.
Manufacturers have spent the last decade building visibility into their plants: sensors, dashboards, alerts flying into every SOC. But knowing about a threat and fixing it are two different problems, and most industrial teams are still solving the second one at human speed. A ticket gets opened. A maintenance window gets scheduled. Three departments get looped in. Meanwhile, the attacker isn't waiting for anyone's approval.
In this episode, Craig Duckworth talks with Tal Kollender, founder and CEO of Remedio, about what's actually keeping industrial environments exposed: misconfigurations left untouched for months, unnecessary services quietly giving attackers a path to move laterally, and aging systems nobody wants to be the one to touch. Tal makes the case that patching alone will never close this gap and explains why safe automated remediation is becoming essential as AI accelerates attacks faster than most security teams can keep up.
They also dig into the reality of OT: uptime and safety come first, IT security tools often can't reach the controls layer, and the wrong change can cause real damage on the plant floor. It's a candid look at what it takes to align security and operations, and why building that trust is the real first step toward proactive protection instead of reactive cleanup.
If you're responsible for securing a plant floor, a fleet of facilities, or the budget behind either one, this conversation gives you a clear, practical way to think about closing the gap between seeing a threat and actually stopping one.
Chapters:
(00:00:00) Why machine speed detection needs machine speed remediation
(00:01:00) Tal’s path from teenage hacker to cybersecurity founder
(00:06:00) Misconfigurations and lateral movement in industrial environments
(00:11:00) Why patching and configuration changes are difficult in OT
(00:15:00) Moving from reactive detection to proactive hardening
(00:17:00) Aligning people, process, and technology
(00:22:00) AI adoption, unmanaged risk, and doing more with less
(00:25:00) Bridging the IT and OT divide without disrupting operations
(00:29:00) The first practical step toward proactive industrial security

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Tal Kollender on LinkedIn
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Energy Talks
Episode: #133: Bridging the IT and OT Gap: Inside the OWASP OT Top 10 Project
Pub date: 2026-08-20

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

How a new open-source framework maps critical cybersecurity risks to global industrial standards.
In this episode, OMICRON OT cybersecurity expert Simon Rommer speaks with Andreas Happe, who is a security researcher and PhD student at the Vienna University of Technology, and Siegfried Hollerer, who is a security architect and analyst as well as a NIS auditor at the Austrian Ministry of the Interior and lecturer at the St. Pölten University of Applied Sciences in Austria.

Simon and his guests discuss their work and experience with the OWASP Operation Technology (OT) Top 10 Project, which is an open-source awareness initiative and practical framework created to identify and rank the most critical cybersecurity risks and vulnerabilities affecting OT environments.

They also describe how critical cybersecurity risks are mapped directly to major international frameworks, like IEC 62443 and NIST, providing infrastructure operators with immediate, actionable countermeasures and a shared vocabulary for improved industrial resilience.

Get more information about OT Cybersecurity for the Power Grid.

We would really like to know what you think about Energy Talks and which topics you would like to hear more about. To do this, simply send us an email to [email protected] and be sure to give us a star review on Spotify or Apple Podcast. Thanks for your feedback!
Please join us to listen to the next episode of Energy Talks 🎙️

The podcast and artwork embedded on this page are from OMICRON electronics GmbH, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: CYBR.SEC.CAST (LS 25 · TOP 10% what is this?)
Episode: Pulling Pranks with Roman Arutyunov
Pub date: 2026-08-19

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

In this episode of CYBR.SEC.CAST, Michael and Sam sit down with Roman Arutyunov, Co-Founder and Chief Product Officer at Xage, to explore how cybersecurity must evolve in the age of agentic AI. Roman shares his journey from early cybersecurity work to protecting critical infrastructure and explains why Zero Trust is more important than ever as AI agents gain greater access to systems, data, and critical resources. Roman also covers practical ways organizations can implement Zero Trust without creating a complex patchwork of security tools - and why protecting interactions at every layer is becoming essential.
This episode is sponsored by Xage
Things Mentioned:
Xage - https://xage.com/
Mirai Virus - https://en.wikipedia.org/wiki/Mirai_(malware)
Agentic AI Is Pushing Zero Trust Into Its Next Phase - https://www.cybrsecmedia.com/agentic-ai-is-pushing-zero-trust-into-its-next-phase/
Do you have a question for the hosts? Reach out to us at [email protected] 
In this episode:
Host: Michael Farnum
Host: Sam Van Ryder
Guest: Roman Arutyunov
Director: Bill Brenner
Producer: Lauren Andrus
Music by: August Honey
Keep up with our Conferences and Events:
LinkedIn
X
Facebook
Instagram
TikTok
CYBR.SEC.CON.
OT.SEC.CON.
CYBR.HAK.CON.
Keep up with CYBR.SEC.Media:
LinkedIn
X
Facebook
Instagram
TikTok
YouTube
Learn About CYBR.SEC.Careers Non-Profit Efforts
CYBR.SEC.Careers
Subscribe to the podcast: 
Apple
Spotify
YouTube
Listen to our other shows:
CYBR.HAK.CAST
CYBR.Minded
CYBR.Signal
 Thank you to our Media Partners:
CYBR.SEC.CON.
Breaking Through in Cybersecurity Marketing
CYBR.SEC.CON. and OT.SEC.CON. 
OGGN (Oil & Gas Global Network)
UtilSec
Packet Pushers
CYBR.SEC.CON. and CYBR.HAK.CON. 
BarCode Podcast
Cyber Distortion Podcast
Kill Chain Radio
The Phillip Wylie Show
Vulnerable U

The podcast and artwork embedded on this page are from CYBR.SEC.Media, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.