The first episode of series 8 introduces a new co-host for this season, Kirsten Bay, Co-Founder and CEO of Cysurance. Kirsten and Tony discuss “Trust in Technology—AI and Driverless Cars”, starting off with the key question – ‘Would you take a ride in a driverless vehicle?’. Waymo driverless vehicles are a part of everyday life in some cities in the US and while early adopters may leap at the chance to ride, not everyone in society may share the same opinion. With technology integrating into every part of our personal and professional lives just how comfortable and trusting should we be with the new AI powered devices and services? Hear the viewpoint of your Speakeasy hosts.

This podcast is for informational purposes only and is not intended to replace professional legal, financial or insurance advice. We are not responsible for any losses, damages, or liabilities that may arise from the use of this podcast. The content and views expressed are those of the host and guests.

Join us as we delve into the fascinating world of operational technology (OT) cybersecurity with Bryson Bort, founder of SCYTHE, Grimm, and co-founder of ICS Village.

 Discover how his experiences shaped innovative approaches to OT risk management, why visibility and architecture are foundational to security, and the importance of building trust between IT and OT teams. 

From real-world case studies to actionable strategies, this episode explores the evolving landscape of industrial cybersecurity and the steps organizations must take to stay ahead.

Chapters:

• 00:00:00 - Welcome and introduction to today’s focus on industrial cybersecurity
• 00:01:10 - Bryson Bort shares his journey from military service to OT security innovation
• 00:02:02 - The evolution of cybersecurity: milestones and lessons for OT environments
• 00:03:21 - Exploring industrial control systems and the roots of car hacking
• 00:06:52 - Tackling real-world challenges in industrial cybersecurity
• 00:08:00 - Why visibility and architecture are foundational for OT security
• 00:09:30 - Dispelling misconceptions about air-gapped systems in OT environments
• 00:11:10 - Practical insights on segmentation and defensible architectures
• 00:13:00 - How attackers exploit vulnerabilities and why monitoring is essential
• 00:14:30 - Building trust between IT and OT teams for successful convergence
• 00:16:00 - Leveraging purple teaming to enhance collaboration and resilience
• 00:17:07 - Strategies for building trust and creating effective OT security solutions
• 00:26:54 - The future of cybersecurity and Bryson’s parting insights

Links And Resources:

• Bryson Bort on LinkedIn
• SCYTHE
• ICS Village
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

OT Security Made Simple welcomes Marguerite Behringer, Director of Regulatory Policy & Industry Relations at Landis+Gyr USA. She talks about the difficulty of US-wide cybersecurity regulation, the grind of redundant requirements and why smart meter cybersecurity needs more frameworks than laws.

Derek Harp welcomes Kyle McMillian, Product Security Officer at Siemens, to discuss the evolving landscape of software bill of materials (SBOMs) and their role in modern cybersecurity. Recorded live at Hack the Capitol 7.0, this conversation unpacks the challenges and opportunities posed by SBOMs in an industry grappling with legacy systems and modern threats.

Kyle dives into the origins of SBOMs, their role in addressing vulnerabilities like Log4J, and their potential to transform procurement, risk management, and incident response. He emphasizes the importance of balancing transparency with practicality, noting that SBOMs are a starting point for broader cybersecurity conversations. With his unique perspective from a leading equipment manufacturer, Kyle shares insights into how SBOMs can help bridge the gap between IT and OT systems.

This episode is essential for anyone looking to understand the future of cybersecurity and the critical role of SBOMs in securing industrial control systems. Learn how these tools can foster trust, streamline risk management, and improve collaboration across the industry.

In this episode of the Pipeliners Podcast, Clint Bodungen of ThreatGEN joins to discuss the intersection of gamification and generative AI in training. The conversation explores how these innovative tools can simulate cybersecurity training scenarios and enhance incident response exercises. Clint and Russel also discuss their collaboration on a PHMSA-sponsored R&D project, where they aim to adapt these technologies for the pipeline industry, offering an exciting glimpse into the potential of AI-driven, multiplayer training environments for pipeline operators.

Visit PipelinePodcastNetwork.com for a full episode transcript, as well as detailed show notes with relevant links and insider term definitions. 

In this episode, host Aaron Crow engages in a riveting conversation with Anusha Iyer, the CEO and founder of Corsha, a Washington, D.C.-based cybersecurity company. With over 25 years of experience in the cybersecurity space and a newfound interest in operational technology (OT), Anusha shares insights into her company's innovative approach to identity and access management for machines.

The discussion covers key topics such as the convergence of IT and OT, the essential need to understand machine-to-machine communication, and the revolutionary potential of machine identity and multi-factor authentication (MFA) in securing industrial environments. Aaron and Anusha explore practical strategies for bridging IT and OT gaps and highlight real-world examples of implementing zero-trust principles.

This episode is a treasure trove of knowledge for cybersecurity professionals, OT engineers, and tech enthusiasts alike. It emphasizes how modern security measures can transform and protect critical infrastructure. Tune in to gain valuable insights into the future of OT cybersecurity and the importance of embracing comprehensive security measures.

Key Moments: 

06:16 Machine Identity in OT Environments

08:40 Machine MFA for Secure Access

10:23 Understanding Secure Endpoint Communication

14:07 Cybersecurity vs. Safety Concerns

17:37 Achieving Zero Trust in Network Security

20:50 Overcoming Cloud Security Fears

26:10 Tech Implementation and Management Challenges

31:54 Complex Architecture: Costly and Complex

36:05 Understanding System Data Flow Benefits

40:36 Technology Deployment Before Cybersecurity Era

47:50 Simplifying Machine Implementation Benefits

51:19 Manual System Updates Challenges

51:58 Balancing IT and OT Efficiency

About the guest : 

Anusha Iyer is the Founder and CEO of Corsha - a leader in identity and access management for operational systems and critical infrastructure. With over 20 years in cybersecurity, Anusha is passionate about demystifying cyber and security, making it accessible, easy to adopt, and self-assuring.

Reach out to Anusha at [email protected] if you want to talk OT and Cyber and how to use machine identity in your industrial networks to unlock secure automation.

Find out more about Corsha and request a demo here: https://corsha.com/request-a-demo

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

נחשון פינקו מדבר על "פיגיטל", העתיד של מיזוג פיזי עם דיגיטל. אילו גורמים מובילים תעשיות וספקים בכיוון זה

היכן ומתי היא תפגוש מומחי סייבר ותפעול

רמה טכנית - 100 (קלה)

Nachshon Pincu talks about The future of blending physical with digital.

What factors lead industries and vendors in this direction? Where and when will it meet cyber and operational experts?

Technical Level - 100

The second recording from the first IoT meetup occurred on January 5th, 2025.

This section reviews an IP camera's security, attack, and protection from the protocol level to the firmware.

Technical Level - 300

In this episode, host Aaron is joined by cybersecurity expert Adam Robbie, the head of OT threat research at Palo Alto Networks. The discussion begins with Aaron sharing his extensive experience deploying Palo Alto firewalls in operational technology (OT) environments, highlighting the key troubleshooting and application-aware capabilities these firewalls offer.

Adam delves into his role at Palo Alto Networks, focusing on the critical task of identifying and mitigating threats in the OT landscape. He discusses the unique challenges of securing OT environments, including the convergence of various technologies and the necessity for proactive defense strategies.

The conversation covers important topics such as the importance of team collaboration across IT and OT, the complexities of deploying firewalls in OT situations, and the ever-evolving threats facing the industry. 

Tune in for a comprehensive exploration of the intersection of cybersecurity and OT, and gain valuable insights from experts on the front lines of protecting critical infrastructure.

Key Moments: 

00:00 Evolving Threat Analysis Focus

08:38 IT vs OT Firewall Responses

12:17 PLC Configuration and Remote Access Challenges

18:43 "Career Progress Through Strategic Moves"

23:05 Evolving OT Firewall Technologies

31:08 Malware Analysis and Threat Detection

35:34 Strategic Cybersecurity Using Game Theory

40:39 Hidden Vulnerabilities in OT Environments

44:44 Geographical Data Challenges in Analysis

49:24 OT Cybersecurity Segmentation Challenges

54:41 OT Systems: Challenges in Updates

01:00:02 Augmented Reality for Remote Problem-Solving

About the guest : 

Adam is the Head of OT Threat Research at Palo Alto Networks since 2022, with over 15 years of OT and IT experience. He's a publisher with SANS, IEEE, and other conferences, focusing on securing critical infrastructure, finding vulnerabilities, and developing best practices. He holds a Bachelor's and Master's in Electrical Engineering and advanced certifications like GICSP and GRID. Adam also teaches cybersecurity bootcamps at top universities and advises on curriculum development. Previously, as a Senior Cyber Security Consultant at Deloitte, he specialized in ICS/IoT penetration testing, threat hunting, and vulnerability research.

Contact Adam at: https://www.linkedin.com/in/adamrobbie/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4