Rapid7 Senior Director of Threat Analytics Christiaan Beek joins the Nexus Podcast to discuss the technical evolution and economic models that maintain ransomware's viability among threat actors. Ransomware became a for-profit threat more than a decade ago and has progressed into the No. 1 threat facing many critical infrastructure organizations. 

In this episode, Beek covers extortion characteristics, the stealthiness of some attacks, and how the future may include hardware-based ransomware that maintains indefinite persistence. 

Follow and subscribe to the Nexus Podcast. 

Zero Trust is a security model based on default-deny policies and fine-grained access control governed by identity, authentication, and contextual signals. For RSAC 2025, John Kindervag, Chief Evangelist of Illumio and the creator of Zero Trust, talks about introducing a "protect surface" into legacy OT systems —isolating critical data, applications, assets, or services into secure zones for targeted Zero Trust implementation.

Dino welcomes Kevin Kumpf, Chief OT/ICS Security Strategist at Cyolo to this episode. They discuss the growing challenges and evolving strategies around cybersecurity in industrial environments.

Kevin shares a seasoned perspective on bridging the gap between IT and OT, busting myths about Zero Trust certifications, and the dangers of underutilized security tools - or "shelfware."

From real-world examples involving breweries, milk production, and energy plants, the conversation uncovers how lack of visibility, broken remote access practices, and aging systems create critical vulnerabilities.

Most importantly, Kevin offers actionable advice for CISOs, CTOs, and plant managers on building resilient cybersecurity frameworks without disrupting operations.

Don't miss this episode full of practical advice from industry experts.

Chapters:

• 00:00:00 - Kicking Off: Why OT Cybersecurity Can't Wait
• 00:01:18 - Meet Kevin Kumpf: From Bank Vaults to Industrial Battlegrounds
• 00:02:56 - Hard Truths About Securing Operational Technology
• 00:06:42 - Shelfware Syndrome: Why Tools Fail Without Strategy
• 00:12:09 - Plant Managers, Vendors, and the Battle for Cyber Resilience
• 00:23:56 - Remote Access Exposed: The Hidden Risks Inside Your Plant
• 00:30:58 - Closing Thoughts: Building Stronger, Smarter Industrial Defenses

Links And Resources:

• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this episode,  host Aaron Crow dives deep into the buzzing world of AI in cybersecurity, joined by special guest Amy Tom, Community Manager at D3 Security. With everyone chatting about AI these days, Aaron and Amy cut through the noise to explore how artificial intelligence is shaking up Security Operations Centers (SOCs)—from automating manual processes to transforming traditional analyst roles. 

Amy shares her unconventional journey into cybersecurity, demystifies what it means to be a "nerd translator," and unpacks how AI-driven platforms like D3’s Morpheus are changing the game for SOC teams.

Whether you’re a student considering a path in cybersecurity, a seasoned pro, or just curious about the future of AI in this field, you’ll hear practical advice, real-world examples, and insight into both the promise and challenges of adopting AI in high-stakes security environments. 

Plus, they touch on hot topics like AI fatigue, the evolving role of junior analysts, and the importance of business and communication skills in tech. Tune in for a candid, informative conversation to get you up to speed on one of cybersecurity’s most exciting frontiers!

Key Moments: 

04:27 "Nerd Translator: Bridging Tech Gaps"

08:29 "Questioning Data Metrics and Value"

10:57 AI Streamlining Security Automation

15:14 "AI and Low-Code Automation Evolution"

17:27 API Management Complexity

22:12 Migrating from Legacy SOAR Platforms

26:55 Streamlining Phishing Response with SOAR

36:05 AI-Driven Incident Remediation

39:49 AI Summaries vs. Human Summaries

41:19 Effective Communication for All Audiences

46:24 AI Transforming SOC Analyst Roles

48:33 Versatile Skills Boost Career Success

51:58 "Explore and Experiment Creatively"

About the guest : 

Amy Tom’s journey into cybersecurity is anything but conventional. With no background in IT or security, she started out answering phones, unsure of how to respond to technical questions and heavily relying on engineers for answers. Through curiosity and persistence, Amy asked questions, learned on the job, and gradually built a deep understanding of the cybersecurity landscape. Today, she works on the business side, supporting engineers and helping solve real problems by bridging the gap between business needs and technical solutions. Her path is a testament to learning by doing and growing into expertise through determination and collaboration.

How to connect Amy : 

LinkedIn: https://www.linkedin.com/in/amymtom/

D3 security podcast:  https://d3security.com/lets-soc-about-it-podcast/=

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

As our reliance on electric power continues to grow, so does the need to protect the grid from cyber threats. In this episode, guest host Frank Harrill, VP of Security at SEL, talks with cybersecurity expert Andre Ristaino about how industry standards, specifically IEC 62443, are shaping the future of industrial cybersecurity, including their impact on the electric power grid.

Todd Wiedman, CISO at Landis+Gyr, discusses state-sponsored threat actors, supply chain vulnerability, and what the shift in legislative authority in the US from federal to state level means for the cybersecurity of smart grids.

You can find more information on OT Security Made Simple at rhebo.com or send us your ideas and questions at [email protected].

Welcome to the fourth episode of our Energy Talks miniseries titled, Why Should You Talk About Incident Response? Join OMICRON cybersecurity consultant Simon Rommer as he explores the different process steps involved in cybersecurity incident response alongside other experts from the power industry.

In this episode, Simon speaks with Stephan Mikiss, who is Head of Managed Security Services at SEC Consult and a SANS-certified forensics analyst based in Vienna, Austria. Simon and Stephan discuss the steps of containment, eradication and recovery in the incident response process and highlight the need for collaboration between IT and OT teams to effectively manage cybersecurity incidents.

Simon and Stephan also explore the iterative nature of incident response, the unique challenges posed by OT environments, and the necessity of understanding both the business model and the attacker's motives to make informed decisions during a crisis.

If you haven’t already listened to Part 1, Part 2 and Part 3 of this miniseries, be sure to check them out:

#85: Why Should You Talk About Incident Response? | Part 1 - OMICRON

#95: Why Should You Talk About Incident Response? | Part 2 - OMICRON

#97: Why Should You Talk About Incident Response? | Part 3 - OMICRON

Learn more about OMICRON’s approach to advanced cybersecurity in OT environments.

We welcome your questions and feedback. Simply send us an email to [email protected].

Dino and Craig address the recent acknowledgment by China of their role in U.S. infrastructure hacks. They explore the urgent cybersecurity challenges facing industrial environments.

With rising geopolitical tensions, tariffs, the push to bring more manufacturing back to the U.S. and increasing attacks on critical infrastructure, the stakes have never been higher.

From end-of-life PLCs still running core operations, to the disconnect between IT and OT leadership, this conversation identifies the systemic gaps leaving industrial operations exposed.

They outline the pressing need for visibility, actionable incident response plans, and a cultural shift toward collaboration across the stack, from plant floor to the boardroom.

Whether you’re a CISO or an operations lead, this episode offers real-world insights, battle-tested perspectives, and one clear takeaway: in cybersecurity, doing nothing is no longer an option.

Chapters:

• 00:00:00 - Kicking Off: Why IT-OT Unity Isn’t Optional Anymore
• 00:01:17 - Cyber Threats, China, and the Global Wake-Up Call
• 00:02:16 - CISA’s New Role: From Background Player to OT Ally
• 00:05:32 - Still Separate, Still Vulnerable: Why IT & OT Must Sync Up
• 00:09:48 - Blind Spots Kill: Why Visibility Is the Real MVP
• 00:10:43 - Remote Access Realities and the Myth of the Air Gap
• 00:20:29 - Crisis Mode: Are You Ready for the Worst?
• 00:23:50 - Dino & Craig’s Parting Shot: Do Something - Now

Links And Resources:

• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this compelling episode of the Bites and Bytes Podcast, host Kristin Demoranville sits down with Tracy Brunet, cattle rancher, Canadian Ag media powerhouse, and host of The Impact Farming Show. Broadcasting from her family farm in Southeastern Manitoba, Tracy opens up about the realities of modern agriculture, including land pressures, succession planning, tech adoption, and how family farms are quietly being squeezed out.

Together, Kristin and Tracy examine how smart farming and digital innovation are reshaping the industry, for better or worse. They also unpack the rising threat of agroterrorism and cyber-physical attacks, as well as what happens when farm automation goes wrong. This isn’t your typical farm chat; it's real talk about the challenges and resilience of today’s producers.

Whether you're in ag, food, or tech, this conversation is packed with insights on business, legacy, and safeguarding our food system. Tracy’s passion for farming is contagious, and her straight-shooting perspective on the future of agriculture will leave you thinking long after the episode ends.

_______________________________________________

LinkedIn: https://www.linkedin.com/in/tracy-brunet-53a204b/

🎙️  The Impact Farming Show:

The Impact Farming Show is a podcast produced by Farm Marketer, created specifically for Canadian farmers who want to thrive in the business of farming. Hosted by Tracy Brunet, a cattle rancher and the CEO of Farm Marketer, the show features conversations with leading farm advisors and industry experts. Each episode offers practical advice on topics like succession planning, financial management, mental health, and the latest in ag innovation. Designed for busy farmers on the move, the show aims to provide insights that help them build successful, resilient farms and pass them on to the next generation.

_______________________________________________

_______________________________________________

🔗 Resources and Further Reading

Farm Succession Planning

Precision Agriculture

Cybersecurity in Agriculture

Agroterrorism and Food Security

JBS Ransomware Attack (2021)

BSE (Bovine Spongiform Encephalopathy)

Solar Flare & GPS Disruption in Precision Ag

Cutting Horses

_______________________________________________

If you enjoyed our episode on agroterrorism and cyber threats to farms, featuring the Animal Agriculture Alliance, here’s another opportunity to explore critical conversations about our food system.  And if you haven’t listened yet, check it out here:

🎙 Episode Link: Agroterrorism & Cyber Threats – How Farms Are Under Attack

The 2025 Stakeholders Summit, happening April 30 – May 2 in Arlington, VA, will bring together industry leaders from farms, food processing, retail, and more to discuss sustainability and the future of animal agriculture.  This year’s theme, “Food for Thought: Dishing on Sustainability,” focuses on collaboration and innovation to shape the future of food production.

Reserve your seat at the table—register by April 25!

🔗 Learn more and register: 2025 Stakeholders Summit

_______________________________________________

🎤 Bites and Bytes Podcast Info:

Website: Explore all our episodes, articles, and more on our official Website.  Visit Now

Merch Shop: Show your support with some awesome Bites and Bytes gear! 🧢👕 Shop Now

Blog: Stay updated with the latest insights and stories from the world of cybersecurity in the food industry.  Read Our Blog

Audience Survey: We value your feedback!  Help us make the podcast even better.  Take the Survey

Schedule a Call with Kristin: Share Your Thoughts. Schedule a meeting with Kristin!  Schedule Now

Socials:  TikTok; Instagram; LinkedIn

_______________________________________________

🛡️ About AnzenSage & AnzenOT

AnzenSage is a women-owned cybersecurity advisory firm specializing in security resilience for the food, agriculture, zoo, and aquarium industries.  AnzenSage offers practical, strategic guidance to help organizations anticipate risks and build resilience. Their services include:

Learn more about their offerings at anzensage.com.​

AnzenOT

Key features include:

Explore the platform at anzenot.com