In this episode, Dino and Craig dive into the complexities of cybersecurity in the operational technology (OT) space, focusing on the challenges posed by vendor lock, version lock, and outdated systems. 

They explore the disconnect between IT and OT teams, emphasizing the need for collaboration to secure industrial environments effectively. 

The discussion highlights practical strategies like virtual patching and microsegmentation to mitigate risks, stressing the importance of working with the right partners to protect legacy systems while maintaining production efficiency.

Chapters:

• 00:00:00 - Introduction to Equipment Life Cycle
• 00:00:56 - Key Challenges in Operational Technology (OT)
• 00:01:24 - The OEM Blockade: A Barrier to Progress
• 00:02:09 - Unpatched Vulnerabilities in Newly Installed Equipment
• 00:04:22 - Bridging the Gap: IT and OT Collaboration Issues
• 00:05:40 - Practical Solutions: Compensating Controls
• 00:06:48 - The Realities of IT and OT Convergence
• 00:09:00 - Shared Infrastructure Risks
• 00:12:00 - The Gap in Due Diligence on the Plant Floor
• 00:14:00 - The Need for Better OT Cybersecurity Practices
• 00:16:00 - Finger-Pointing in OT Environments
• 00:19:21 - Why Process Integrity Matters in OT
• 00:24:02 - Final Thoughts: Moving Forward in OT Security

Links And Resources:

• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

Alon Dankner of the Technion Institute for Technology in TelAviv Israel joins the Claroty Nexus Podcast to discuss a presentation he gave at the recent Black Hat cybersecurity conference in Las Vegas. Dankner and colleague Nadav Adir's presentation looked at the attack surface of programmable logic controllers (PLCs), in particular Siemens’ S7 protocol. Dankner and Adir developed six attacks against the encryption implementation in the protocol that expose private crypto keys and allow an attacker full control over the industrial control system.
For more, visit nexusconnect.io/podcasts 

In this episode of Protect It All, titled "Tackling Tech Troubles: Inside the DFW Airport Cyber Incident and Wider Industry Challenges with Evan Morgan," host Aaron Crow explore the complexities of widespread tech issues, focusing on a recent cybersecurity incident at DFW Airport that affected over 1,000 machines. Guest Evan Morgan, founder of Cyber Defense Army, discusses the challenges of resolving such large-scale incidents and the importance of standardization and AI in cybersecurity.

Evan shares his journey from an Air Force aircraft mechanic to a cybersecurity expert, highlighting the benefits and challenges of running a small consultancy versus a large firm. The episode also covers recent cybersecurity incidents involving CrowdStrike and Microsoft 365, emphasizing the need for preventive measures and trust in business and technology. 

Practical tips for everyday cybersecurity and insights into industry-wide challenges make this episode a valuable resource for listeners across all sectors.

Key Moments: 

00:10 Entrepreneurship brings freedom and awesome transformations.

03:54 Recent tech outages are gaining mainstream media attention.

07:52 Adapting existing tech for enhanced security measures.

10:48 Over-the-air car updates are complex and uncertain.

14:01 DFW airport machines, recovery time, and problem.

18:39 How do we improve efficiency and learning?

21:26 Customers validate goods, test, streamline, feedback.

25:10 Cyber enables business growth and protection.

28:52 Cyberattack halted gas sales, risking pipeline operations.

32:55 Challenges in the multi-faceted role, regulatory changes.

35:35 Commonalities in cybersecurity, despite differences in industry.

39:33 Robotics and AI revolutionize future human roles.

40:42 AI would bring trust, speed, and efficiency.

44:38 Defense technology, both funny and scary.

47:59 Distance tech carries risk, needs personal vigilance.

About the guest : 

Evan Morgan is the Founder of Cyber Defense Army, a cybersecurity consultancy and services firm that incorporates geopolitical risk in their cybersecurity practices.  He is a service-disabled Veteran of the United States Air Force and served in the post-9/11 campaigns, as well as remote tours to the Republic of Korea.  He holds a Master's degree in Information Systems (Computer Security Management specialization) and a Master of Business Administration (Information Systems Management specialization), both with honors from Strayer University. Post his military service, he has led cybersecurity functions for Fortune 100 organizations, was a global leader for a worldwide consultancy, and has been honored with multiple cybersecurity awards for his efforts in protecting the organization he was a part of previously.

Connect with Evan via LinkedIn:  https://www.linkedin.com/in/evanmorgan/

Cyber Defense Army's website:  https://www.cyberdefensearmy.com/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

At DEF CON 32, in the ICS village, researchers disclosed vulnerabilities in home and commercial solar panel systems that could potentially disrupt the grid. Dan Berte, Director of IoT security for Bitdefender, discusses his more than a decade in IoT, how the vendor maturity often isn’t there for our smart TVs or even for our solar panels, so reporting vulnerabilities sometimes goes nowhere. That doesn’t stop defenders like Dan, who, along with his team, work hard to change and to educate the industry.

מפעלים משתנים ומכניסים דיגיטציה למערכות הייצור על מנת להישאר רלוונטיים מול עלויות העבודה הזולה במזרח ולהגדיל את שורת הרווח באותם אמצעי ייצור. מה המשמעויות ואיך זה משפיע רוחבית כולל ובמיוחד בתחום הסייבר.

נחשון פינקו מארח את אריאל לסרי מנכ"ל רוקוול ישראל בשיחה על עבר, הווה ועתיד התעשייה ואיך רוקוול נכנסה לעולם הסייבר.

לאן הולכת התעשייה

המשמעויות של כניסת הדיגיטציה למערכות הייצור

איך משתלב הסייבר בתמונה הכוללת

Factories are changing and digitizing their production systems to remain relevant in the face of cheap labor costs in the East and increase the profit margin with the same means of production. What are the meanings, and how does it affect horizontally, especially in the cyber field?

Nachshon Pincu hosts Ariel Lasry, Israel's country Director of Rockwell Israel, in a conversation about the industry's past, present, and future and how Rockwell entered the cyber world.

Where is the industry going?

The implications of digitization entering production systems

How does cyber fit into the overall picture?

In this episode of Left to Our Own Devices, Rob Putman, Global Manager of Cybersecurity Services at ABB, shares his journey from Sony PlayStation to leading cybersecurity in industrial automation. Tune in for insights on product security and industrial control challenges.

In this episode of our “Automation Chat” podcast from The Journal From Rockwell Automation and Our PartnerNetwork magazine, Executive Editor Theresa Houck chats with Dave Kang, Advisory Solutions Architect at Dragos and Kamil Karmali, Senior Global Commercial Manager, Cybersecurity Services at Rockwell Automation. Get nuts-and-bolts, practical information about strengthening cybersecurity for industrial networks and systems, including:

• How ransomware attacks have evolved over the past year.

And as always, get your family-friendly, silly Joke of the Day.

Resources from this episode:

• Blog: 6 Steps to Reduce Industrial Cybersecurity Risks.

You can also watch their discussion on YouTube at https://youtu.be/8Pm670QAO9E.

Automation Chat is brought to you by The Journal From Rockwell Automation and Our PartnerNetwork magazine.

Find us on LinkedIn.

Find us on Facebook.

Find us on X (Twitter).

Please subscribe to "Automation Chat" and give us a 5-star rating and a review.

In Episode 21 of "Protect It All," titled "Cybersecurity in Critical Industries: Lessons from Medical Devices to Automotive," host Aaron Crow is joined by experts David Leichner and Shlomi Ashkenazy to explore the multifaceted world of cybersecurity across various critical industries. 

The conversation starts with Shlomi sharing a transformative personal experience in London, emphasizing the importance of pursuing one's passions. David follows with a moment of realization about the critical nature of cybersecurity during an eye surgery, underscoring the necessity of protecting people through robust cyber measures.

The episode delves deep into how cybersecurity practices are implemented in medical devices, automotive, and industrial manufacturing sectors. David, Shlomi, and Aaron discuss generative AI and its dual potential to enable and defend against cyber threats, drawing parallels to cyber weapons like Stuxnet. The importance of secure design, continuous monitoring, and compliance with ever-evolving regulations are highlighted, particularly in upgrading legacy systems in critical infrastructure.

With comprehensive insights into integrating IT and OT cybersecurity measures, the episode provides a compelling call to action for increased awareness and collaborative efforts to bolster defenses. Aaron also extends an invitation for engagement through conferences like Black Hat and Defcon, where practical solutions and innovative strategies are showcased.

Tune in to gain a deeper understanding of the critical intersection of cybersecurity in various industries and learn valuable lessons from the experts on safeguarding our digital and physical world.

Key Moments: 

00:10 Security threats have expanded to 15-year-olds.

08:35 Privacy breaches occur through overlooked device vulnerabilities.

12:14 Power utility leading in cybersecurity due to regulation.

17:06 Smaller companies need to prioritize cybersecurity measures.

26:42 Security strategy requires adapting to different environments.

28:30 FDA emphasizes cybersecurity importance at the H-ISAC conference.

37:43 MIT study simulates cyber attack, uses AI.

40:24 AI can eliminate manual product development processes.

46:16 Cybersecurity brings unknown threats: deterrence or powerful AI.

50:26 Black start plants generate and transmit power.

59:00 Soft skills are crucial for effective communication and trust.

01:00:09 Sent demos to heroes, got a minimal response.

01:06:47 Promoting face-to-face meetings and events globally.

01:10:19 Agreement on conclusion of project.

About the Guests : 

David Leichner

David has over 25 years of marketing and sales executive management experience garnered from leading tech companies including Cynet, Information Builders, Magic Software, Gilat Satellite Networks, BluePhoenix Solutions, and SQream. At Cybellum, a provider of integrated cybersecurity solutions for leading device manufacturers, David is responsible for creating and executing the marketing strategy and managing the global marketing team that forms the foundation for Cybellum’s market penetration.

Shlomi Ashkenazy

Shlomi is the Head of Brand and Strategy at Cybellum, overseeing product security thought leadership, positioning, and brand activities. A physicist-turned-cybersecurity brand builder, Shlomi spent the years before joining Cybellum as a consultant, working with dozens of founders in the cybersecurity, AI, DevOps, Quantum, and Health Tech industries on building their brand, product marketing, positioning, and messaging. Shlomi also produces and co-hosts "Left to Our Own Devices: The Product Security Podcast" and spearheads multiple business strategy and GTM initiatives at Cybellum.

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]