@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: ICS Cyber Talks Podcast
Episode: Idan Zohar Co-Founder & CEO @Sinc Security on updates solution in isolated environments
Pub date: 2026-10-22

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

מי שיקרא את הדוחות על ההתקפות היי.איי האוטונומיות לא יכול שלא לשים לב לעובדה שההצלחות נבעו משימוש בחולשות ידועות ולאו דווקא זירו דיי.

כבר עשור שדוחות הסייבר של החברות המובילות בעולם ובראשן הדו"ח הידוע של איי.ביי.אם, מצביעות על בעיה אחת אקוטית, עדכונים! פאצ'ים, איי.אוו.סיס, סיי.ווי.אייס, אינדיקטורים והרשימה עוד ארוכה, שמדברים על מערכות מידע ארגוניות אין ספק שהמודעות והרצון קיימים ועדיין זה לוקח בממוצע עולמי שמונה חודשים, אבל מה קורה במערכות תפעוליות שמנותקות מסביבת מערכות המידע והאינטרנט (מקווה בשבילכם שזה המצב אצלכם)?

לפעמים הפתרון מונח לפנינו, כול מה שצריך זה מישהו שזה יכאב לו מספיק כדי שירים את הכפפה ויהפוך את זה למוצר.

נחשון פינקו מארח את עידן זוהר מייסד-שותף ומנכ"ל סינק סקיורטי בשיחה על הצורך המיידי בפתרון לעדכונים בסביבות סגורות, איך נולדה ההבנה ולמה אסור לחכות רגע אחד במתן פתרון במיוחד היום שתוקפים מגבירים את השימוש בהיי.איי. גילוי נאות: התקנתי את המערכת בתחנות כוח ונחסכו כשלושה עד ארבעה ימי עבודה בחודש בביצוע עדכונים יומיים ופינוי הזמן של הצוות למשימות אחרות.

 

Anyone who reads reports on autonomous AI-driven cyberattacks cannot help but notice that successful attacks largely exploited known vulnerabilities rather than true zero-day exploits

For more than a decade, cybersecurity reports from the world's leading companies, most notably IBM's well-known annual report, have regularly highlighted one critical issue: updates. Patch management, IOCs, CVEs, and a long list of other indicators continue to dominate discussions. Enterprise IT environments have awareness and readiness to address the problem, yet the global average time to remediate vulnerabilities remains around eight months. But what happens in operational systems that are isolated from corporate IT networks and disconnected from the internet (which, hopefully, is the case in your organization)?

Sometimes the solution is right in front of us. All it takes is someone who feels the pain deeply enough to take up the challenge and turn it into a product

Nachshon Pincu hosts Idan Zohar, Co-Founder and CEO of Sinc Security, for a discussion about the vital need for a patch management solution in isolated environments, how the idea behind the product was born, and why organizations cannot afford to wait even a single moment before dealing with this challenge, especially today as attackers increasingly leverage AI

Disclosure: I deploy the system in power generation facilities, and it has reduced the daily updates to three to four workdays per month by improving the update process and freeing the team to concentrate on other critical tasks

The podcast and artwork embedded on this page are from Nachshon Pincu, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Podomation
Episode: 013 - Panel from the Automation Summit & Expo: Cybersecurity in US Water Systems
Pub date: 2026-10-21

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

This episode of Podomation is an encore presentation of a panel presented during the ISA Automation Summit & Expo in September 2026.

This session examined practical, risk-focused methods for securing operational technology in the water sector. We explored how frameworks such as ISA/IEC 62443 and programs like the NRWA Cybersecurity Circuit Rider help utilities of all sizes prioritize meaningful risk reduction rather than merely checking compliance boxes.
Presenters:
Moderator: Marco Ayala
Steve Mustard
Chad Paxson
Graham Nasby
John DeGour

The podcast and artwork embedded on this page are from ISA - International Society of Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: The Blind Spots Hiding On Your Plant Floor Can Hurt You
Pub date: 2026-10-21

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Your plant can be running exactly as expected and still have blind spots that put production, process, and people at risk.
Dino Busalachi and Kevin Kumpf break down the gaps most leaders never see: new equipment arriving with outdated firmware, vendors making changes nobody tracks, and process data that gets collected but rarely watched. Using refrigeration systems and manufacturing floors as examples, they show why monitoring has to connect security with uptime, maintenance, and the cost of a missed warning.
They also challenge the belief that encryption or network isolation is enough, explain where AI helps and where it still needs human judgment, and make the case for getting integrators, OEMs, IT, and operations into the same conversation.
Three questions every plant leader should be able to answer: Do you know what normal looks like in your plant? Who can change it? And who will notice when something starts to drift?
Follow Industrial Cybersecurity Insider for practical conversations on protecting production, people, and uptime.
Chapters:
(00:00:00) Why OT Attacks Put Business Continuity at Risk
(00:03:00) Industrial Network Design and the Visibility Gap
(00:07:00) Vendor Access, AI Data Collection, and Third Party Risk
(00:10:00) Outdated Firmware and Accountable Remote Maintenance
(00:13:00) Why AI Patching Needs Human Oversight in OT
(00:17:00) Process Data, Industrial Espionage, and Operational Value
(00:23:00) Choosing Integrators Who Understand Your Plant
(00:28:00) Building Monitoring Into New Equipment and Projects
(00:34:00) Backup Gaps and the Case for Managed OT Services
(00:38:00) Getting IT and OT to Share Responsibility

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure (LS 30 · TOP 5% what is this?)
Episode: Is Critical Infrastructure Ready for AI Attacks? with Booz Allen's Brad Medairy
Pub date: 2026-10-20

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Can cyber defenses built around human attackers keep pace with AI? Brad Medairy, president of Booz Allen's National Cyber Practice and a McCrary Institute senior fellow, joins Frank Cilluffo to discuss what his team's testing reveals about AI's ability to conduct cyber operations and navigate industrial systems.
They examine how these capabilities lower barriers for attackers, why deploying defensive AI requires trust and human accountability, and what executives should do to assess readiness. The conversation also explores active cyber defense and the need to keep essential services running through a compromise.
Main topics
AI-driven cyber operations
Frontier model testing
U.S.–China capability gaps
Industrial systems at risk
AI attack simulations
Human oversight and accountability
Deception and active defense
Operating through compromise
Board oversight and readiness
Key quotes
"Today, with an agentic attack, with an AI-enabled cyber operator that can operate at speed and scale, I think the defender does not have the advantage. It can't move at that pace." — Brad Medairy
The way that we've seen models be able to rip apart these [OT] environments, understand the protocols, understand the control system, it's really phenomenal in terms of the capabilities that they provide… the risk to critical infrastructure is at an all-time high." — Brad Medairy
"I don't think that we're going to defeat the threat of the future that's so transformative by just automating past operating models and approaches." — Brad Medairy
"These adversary capabilities are progressing much faster than cyber defenses. And so you're gonna have to continually assess your environment, continually assess your controls, continually evolve your program." — Brad Medairy
"We're inventing new operating models, we're inventing new technologies for cybersecurity. And I think now is our time to really define the future. It's going to take… really working this problem together." — Brad Medairy
Resources discussed
Booz Allen's Cyber Weapons Index
McCrary Institute–Booz Allen joint paper: "AI-enabled threats demand mission-speed resilience – here's how to build it"
McCrary Institute–Booz Allen joint paper: "Outpacing AI-enabled cyber threats: A playbook for government CISOs"
About the Guest:
Brad Medairy is president of Booz Allen's national cyber business, leading the development of defensive and offensive cyber solutions to address America's toughest cyber challenges. His work spans AI, machine learning, cloud innovation, and intelligence tradecraft.
He leads thousands of cyber operators, security researchers, and software engineers who secure supply chains, protect critical infrastructure, and defend 5G networks, space systems, and advanced weapons platforms. His team counters sophisticated adversaries for customers including the intelligence community, U.S. Cyber Command, FBI, CISA, and the Department of War.

The podcast and artwork embedded on this page are from Frank Cilluffo / McCrary Institute, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: (CS)²AI Podcast Show: Control System Cyber Security
Episode: 137: From Conference to Change: Asset Owners on What They Actually Did After Level Zero
Pub date: 2026-10-20

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

From Conference to Change: Asset Owners on What They Actually Did After Level Zero
Asset owners from UPS and Southern California Edison get specific about what changed after Level Zero: a talk that became a deployed AI harness, a team member who went on to NIMS certification after the tabletop, and ideas borrowed across sectors. Christian Harter, Blake Gilson, and Brian Foster debate who should attend (almost everyone), how to prepare (don't just show up), why the hallway track matters most, and why more asset owners should take the stage. They close on AI: powerful, but it needs an operator.
Guests: Blake Gilson (IT Planning & Strategy Manager, ExxonMobil); Brian Foster (Grid Security – Enterprise Sr Advisor, Southern California Edison) Host / moderator: Christian Harter (BISO OT & Director of OT Security and Engineering, UPS)
Chapters: 00:41 Panel introductions 02:02 What stuck from Level Zero 04:48 Bringing a team (UPS brought 16) 09:12 What actually changed afterwards 14:49 Send a group or one person? Budgets and training 19:28 Who should attend 23:12 How to prepare 24:38 The hallway track 30:11 What to preserve and grow: asset owner stories 43:19 Where AI ends and humans begin 49:40 A new class of worker
Recorded at the CS²AI Online Symposium, "Level Zero: Visions & Reflections."
Join us at Level Zero 2027, April 23–30 at Georgia Tech in Atlanta: pre-conference training, the Conflag Zero™ tabletop exercise, and three days of practitioner-led sessions built so you can put what you learn to work the Monday you get back.
Questions: [email protected] · Sponsorship: [email protected] Produced by CS²AI (Control System Cyber Security Association International).

The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.