Rapid7 Senior Director of Threat Analytics Christiaan Beek joins the Nexus Podcast to discuss the technical evolution and economic models that maintain ransomware's viability among threat actors. Ransomware became a for-profit threat more than a decade ago and has progressed into the No. 1 threat facing many critical infrastructure organizations. 

In this episode, Beek covers extortion characteristics, the stealthiness of some attacks, and how the future may include hardware-based ransomware that maintains indefinite persistence. 

Follow and subscribe to the Nexus Podcast. 

Zero Trust is a security model based on default-deny policies and fine-grained access control governed by identity, authentication, and contextual signals. For RSAC 2025, John Kindervag, Chief Evangelist of Illumio and the creator of Zero Trust, talks about introducing a "protect surface" into legacy OT systems —isolating critical data, applications, assets, or services into secure zones for targeted Zero Trust implementation.

Dino welcomes Kevin Kumpf, Chief OT/ICS Security Strategist at Cyolo to this episode. They discuss the growing challenges and evolving strategies around cybersecurity in industrial environments.

Kevin shares a seasoned perspective on bridging the gap between IT and OT, busting myths about Zero Trust certifications, and the dangers of underutilized security tools - or "shelfware."

From real-world examples involving breweries, milk production, and energy plants, the conversation uncovers how lack of visibility, broken remote access practices, and aging systems create critical vulnerabilities.

Most importantly, Kevin offers actionable advice for CISOs, CTOs, and plant managers on building resilient cybersecurity frameworks without disrupting operations.

Don't miss this episode full of practical advice from industry experts.

Chapters:

• 00:00:00 - Kicking Off: Why OT Cybersecurity Can't Wait
• 00:01:18 - Meet Kevin Kumpf: From Bank Vaults to Industrial Battlegrounds
• 00:02:56 - Hard Truths About Securing Operational Technology
• 00:06:42 - Shelfware Syndrome: Why Tools Fail Without Strategy
• 00:12:09 - Plant Managers, Vendors, and the Battle for Cyber Resilience
• 00:23:56 - Remote Access Exposed: The Hidden Risks Inside Your Plant
• 00:30:58 - Closing Thoughts: Building Stronger, Smarter Industrial Defenses

Links And Resources:

• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this episode,  host Aaron Crow dives deep into the buzzing world of AI in cybersecurity, joined by special guest Amy Tom, Community Manager at D3 Security. With everyone chatting about AI these days, Aaron and Amy cut through the noise to explore how artificial intelligence is shaking up Security Operations Centers (SOCs)—from automating manual processes to transforming traditional analyst roles. 

Amy shares her unconventional journey into cybersecurity, demystifies what it means to be a "nerd translator," and unpacks how AI-driven platforms like D3’s Morpheus are changing the game for SOC teams.

Whether you’re a student considering a path in cybersecurity, a seasoned pro, or just curious about the future of AI in this field, you’ll hear practical advice, real-world examples, and insight into both the promise and challenges of adopting AI in high-stakes security environments. 

Plus, they touch on hot topics like AI fatigue, the evolving role of junior analysts, and the importance of business and communication skills in tech. Tune in for a candid, informative conversation to get you up to speed on one of cybersecurity’s most exciting frontiers!

Key Moments: 

04:27 "Nerd Translator: Bridging Tech Gaps"

08:29 "Questioning Data Metrics and Value"

10:57 AI Streamlining Security Automation

15:14 "AI and Low-Code Automation Evolution"

17:27 API Management Complexity

22:12 Migrating from Legacy SOAR Platforms

26:55 Streamlining Phishing Response with SOAR

36:05 AI-Driven Incident Remediation

39:49 AI Summaries vs. Human Summaries

41:19 Effective Communication for All Audiences

46:24 AI Transforming SOC Analyst Roles

48:33 Versatile Skills Boost Career Success

51:58 "Explore and Experiment Creatively"

About the guest : 

Amy Tom’s journey into cybersecurity is anything but conventional. With no background in IT or security, she started out answering phones, unsure of how to respond to technical questions and heavily relying on engineers for answers. Through curiosity and persistence, Amy asked questions, learned on the job, and gradually built a deep understanding of the cybersecurity landscape. Today, she works on the business side, supporting engineers and helping solve real problems by bridging the gap between business needs and technical solutions. Her path is a testament to learning by doing and growing into expertise through determination and collaboration.

How to connect Amy : 

LinkedIn: https://www.linkedin.com/in/amymtom/

D3 security podcast:  https://d3security.com/lets-soc-about-it-podcast/=

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

As our reliance on electric power continues to grow, so does the need to protect the grid from cyber threats. In this episode, guest host Frank Harrill, VP of Security at SEL, talks with cybersecurity expert Andre Ristaino about how industry standards, specifically IEC 62443, are shaping the future of industrial cybersecurity, including their impact on the electric power grid.

Todd Wiedman, CISO von Landis+Gyr, spricht über staatliche Bedrohungsakteure, die Gefährdung der Lieferkette und darüber, was die Verlagerung der Gesetzgebungsbefugnis in den USA von der Bundes- auf die Landesebene für die Cybersicherheit intelligenter Stromnetze bedeutet.

Welcome to the fourth episode of our Energy Talks miniseries titled, Why Should You Talk About Incident Response? Join OMICRON cybersecurity consultant Simon Rommer as he explores the different process steps involved in cybersecurity incident response alongside other experts from the power industry.

In this episode, Simon speaks with Stephan Mikiss, who is Head of Managed Security Services at SEC Consult and a SANS-certified forensics analyst based in Vienna, Austria. Simon and Stephan discuss the steps of containment, eradication and recovery in the incident response process and highlight the need for collaboration between IT and OT teams to effectively manage cybersecurity incidents.

Simon and Stephan also explore the iterative nature of incident response, the unique challenges posed by OT environments, and the necessity of understanding both the business model and the attacker's motives to make informed decisions during a crisis.

If you haven’t already listened to Part 1, Part 2 and Part 3 of this miniseries, be sure to check them out:

#85: Why Should You Talk About Incident Response? | Part 1 - OMICRON

#95: Why Should You Talk About Incident Response? | Part 2 - OMICRON

#97: Why Should You Talk About Incident Response? | Part 3 - OMICRON

Learn more about OMICRON’s approach to advanced cybersecurity in OT environments.

We welcome your questions and feedback. Simply send us an email to [email protected].

Dino and Craig address the recent acknowledgment by China of their role in U.S. infrastructure hacks. They explore the urgent cybersecurity challenges facing industrial environments.

With rising geopolitical tensions, tariffs, the push to bring more manufacturing back to the U.S. and increasing attacks on critical infrastructure, the stakes have never been higher.

From end-of-life PLCs still running core operations, to the disconnect between IT and OT leadership, this conversation identifies the systemic gaps leaving industrial operations exposed.

They outline the pressing need for visibility, actionable incident response plans, and a cultural shift toward collaboration across the stack, from plant floor to the boardroom.

Whether you’re a CISO or an operations lead, this episode offers real-world insights, battle-tested perspectives, and one clear takeaway: in cybersecurity, doing nothing is no longer an option.

Chapters:

• 00:00:00 - Kicking Off: Why IT-OT Unity Isn’t Optional Anymore
• 00:01:17 - Cyber Threats, China, and the Global Wake-Up Call
• 00:02:16 - CISA’s New Role: From Background Player to OT Ally
• 00:05:32 - Still Separate, Still Vulnerable: Why IT & OT Must Sync Up
• 00:09:48 - Blind Spots Kill: Why Visibility Is the Real MVP
• 00:10:43 - Remote Access Realities and the Myth of the Air Gap
• 00:20:29 - Crisis Mode: Are You Ready for the Worst?
• 00:23:50 - Dino & Craig’s Parting Shot: Do Something - Now

Links And Resources:

• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!