🛡️ Thibault Morin, Solution Architect en Factory Automation chez Bosch Rexroth, décrypte les enjeux de la cybersécurité industrielle et du Cyber Resilience Act.

Fort de plus de 20 ans d’expérience dans l’industrie, il nous explique pourquoi la cybersécurité ne peut plus être considérée comme un simple sujet informatique. Face à une cyberattaque, une usine doit non seulement protéger ses machines, ses automates et ses réseaux, mais aussi être capable de poursuivre ou de rétablir rapidement son activité.

Quelle différence entre cybersécurité et cyber-résilience ? Quels sont les risques pour les industriels ? Et comment anticiper les nouvelles exigences réglementaires ? Un échange clair et accessible pour mieux comprendre les transformations à venir.

Découvrez tous nos podcasts, livres blancs, webinars... sur expertise.boschrexroth.fr

Contenu proposé par Bosch Rexroth France.

Hébergé par Ausha. Visitez ausha.co/politique-de-confidentialite pour plus d'informations.

Jessica Ji, a Senior Research Analyst at Georgetown’s Center for Security and Emerging Technology and its CyberAI Project, joins the Nexus Podcast to discuss how frontier AI models such as Claude Mythos are changing cybersecurity for practitioners and policymakers alike. 

Jessica works closely with policymakers in the U.S. government. She discusses how they view AI models' offensive and defensive capabilities, the need for a long-term strategy on AI and cybersecurity, and the disparate incentives between private AI companies such as Anthropic and OpenAI and the government as these models are developed and deployed. 

Subscribe and listen to the Nexus Podcast here. 

Two global dairy producers made headlines this week after breaches that started with third party vendors.

Dino and Craig break down how it happened and why it keeps happening. They walk through the reality of remote access on the plant floor, from cellular modems to TeamViewer installs nobody remembers approving, and explain why a single sensor in a plant might show you 25 percent of your assets at best.

The conversation gets to the root of the problem: people, not technology.

OT teams still lock IT out of critical systems, CISOs carry responsibility without authority, and incident response plans rarely account for the integrators working across multiple plants at any given moment.

If you lead security for a manufacturing organization, this episode arms you with the tough questions to bring back to leadership before your company is the one filing with the SEC.

Chapters:

• (00:00:00) - The CISO gets hung out to dry, not the third-party vendor
• (00:01:02) - Two global dairy producers breached through third-party vendors
• (00:02:12) - The messy reality of remote access on the plant floor
• (00:03:47) - Why IT has no visibility into what's connected in manufacturing
• (00:05:29) - North-south versus east-west traffic monitoring
• (00:06:41) - The culture problem of OT locking IT out
• (00:08:14) - Responsibility versus authority for CISOs
• (00:10:47) - The budget excuse and the real cost of downtime
• (00:14:32) - Incident response plans that leave system integrators out
• (00:18:56) - SEC filings, brand damage, and the tough questions to ask

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The biggest cybersecurity challenge isn't technology - it's people.

In this episode of Protect It All, host Aaron Crow welcomes Swapnil Kachave for an insightful conversation about what it really takes to build high-performing cybersecurity teams in an era of AI, automation, and increasing cyber threats.

Having built and led Security Operations Center (SOC) teams across five industries, Swapnil shares why successful cybersecurity programs are driven by leadership, communication, and continuous learning - not just the latest tools.

Together, Aaron and Swapnil explore the growing impact of alert fatigue, burnout, workforce development, and the changing role of AI in modern security operations. They also discuss why "people debt" can become just as dangerous as technical debt and how organizations can create resilient teams prepared for the future.

Key Moments: 

Whether you're leading a SOC, managing cybersecurity programs, or just beginning your security career, this episode delivers practical leadership lessons that extend far beyond technology.

Key Moments: 

06:04 Dealing with alert fatigue

07:55 Navigating SOC career growth

13:54 From network admin to new opportunities

14:41 Diverse career path overview

21:02 Translating tech issues for executives

23:41 Importance of Soft Skills in Tech

25:50 Prioritizing practical knowledge over trends

31:03 Prototyping and learning new skills

35:26 Using AI to validate ideas

37:57 Human awareness vs. tech evolution

41:32 Quality assurance in AI responses

42:40 Discussing AI system reliability

46:05 Accelerating processes with AI tools

Tune in to discover why investing in people is still the most effective cybersecurity strategy - only on Protect It All.

About the guest : 

Swapnil Kachave is a cybersecurity operations leader with extensive experience building and leading Security Operations Center (SOC) teams across five industries. Passionate about developing people as much as technology, Swapnil specializes in security operations, incident response, and leadership development. They focus on helping organizations build resilient cybersecurity teams by balancing technical excellence with communication, mentorship, and continuous learning in an increasingly AI-driven world.

How to connect Swapnil: 

LinkedIn: https://www.linkedin.com/in/swapniilkachave/

Website: https://www.optiv.com/=

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

Open Source Security welcomes Josh Corman to talk about the challenges around securing our critical infrastructure. Specifically the discussion centers around our water supplies. There are a lot of really wild things happening right now with attacks like Volt Typhoon and Salt Typhoon. Josh has an amazing ability to make these sort of discussions easy to understand without spreading FUD. Josh also has suggestions for actions that need to be taken to help deal with these problems. It's not all technical solutions, there are non technical things we can do to help reduce the risk posed by our technical systems failing.

The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-07-critical-infrastructure-josh-corman

In this episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by RunSafe Security Chief Strategy Officer Doug Britton and special guest Andrew Ginter, Vice President of Industrial Security at Waterfall Security Solutions, an author, and a leading voice in OT cybersecurity.

Andrew explains why industrial security cannot simply borrow the same tools and practices used in enterprise IT. In OT environments, the physical process is the asset, and malicious information entering the system can become the threat. Doug explores how organizations can reduce exploitability, protect existing software, and maintain deterministic behavior without relying solely on disruptive patching cycles.

Together, Doug and Andrew explore:

• Why OT security must be stronger than traditional IT security
• How cyber attacks can create real-world safety and operational consequences
• The risks created by IT/OT convergence
• How cyber-informed engineering strengthens industrial resilience
• The role of unidirectional gateways and deterministic protections
• Why patch management alone cannot keep pace with AI-driven threats

For critical infrastructure leaders, engineers, and security teams, this episode offers a practical look at designing industrial systems that remain safe, reliable, and resilient when cyber threats become physical.

Why one vendor breach can take down dozens of banks — third-party risk, AI-driven attacks, and why patching fast may beat patching safe today.  Jeffrey Wheatman, Senior Vice President, Cyber Risk Strategist at Black Kite, explains.

In this episode, Larry O'Brien speaks with Schneider Electric cybersecurity leaders Zakarya Drias and Nasir Mundh about the critical role of cybersecurity in enabling successful industrial digital transformation initiatives. The conversation explores Schneider Electric’s approach to helping industrial organizations assess cyber risk, develop cybersecurity roadmaps, implement governance and security controls, and operate resilient OT environments through managed security services. Cybersecurity must be designed into digital transformation programs from the beginning rather than treated as an afterthought, particularly as cloud computing, IT/OT convergence, artificial intelligence, and connected operations expand the industrial attack surface. The discussion also addresses the challenges of protecting legacy industrial assets while modernizing operations, the importance of lifecycle management and compensating controls, and how AI can augment cybersecurity capabilities while still requiring human oversight and risk management.

Would you like to be a guest on our growing podcast?

Do you have an intriguing or thought provoking topic you'd like to discuss on our podcast? Please contact the Host, Colin Masson: [email protected] (or the Producer Tom Cabot) [email protected]

View all the episodes here: https://thedigitaltransformationpodcast.buzzsprout.com

For industrial leaders responsible for keeping plants productive, connected, and secure, cybersecurity cannot sit only with IT.

Robert Maxwell joins Dino to address the leadership and operational gaps that leave OT environments exposed, especially when aging control systems, diverse automation platforms, and decentralized plant operations are part of the picture.

They discuss what it takes to move beyond fragmented ownership and point solutions: giving an accountable leader the authority to coordinate security across IT, OT, engineering, operations, and outside partners.

The conversation covers practical priorities for building a durable cyber program, including organization-wide awareness, stronger visibility into industrial assets, and a security strategy that can keep pace with AI adoption.

The takeaway is clear: cybersecurity is an operational investment that protects uptime, production, and long-term business resilience.

Chapters:

• (00:00:00) Cybersecurity is a management responsibility
• (00:01:00) Robert Maxwell’s journey into cybersecurity
• (00:04:35) Why organizations need a clear cybersecurity owner
• (00:08:40) Building a long-term security strategy across the business
• (00:12:00) What happens when companies ignore cybersecurity
• (00:14:10) Why vendor-led security programs fall short
• (00:17:05) The IT and OT divide in manufacturing
• (00:20:00) AI, data protection, and the growing security challenge
• (00:23:25) Visibility gaps across manufacturing plants
• (00:26:20) Why leaders should view cybersecurity as an investment

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Robert Maxwell on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Klaus Mochalski und Oliver Braun (SVP Corporate Security am Flughafen BER) diskutieren die immense Komplexität der Flughafensicherheit. Erfahren Sie, warum bei hybriden Bedrohungen klassisches Silodenken versagt und physische Sicherheit sowie Cybersicherheit als "One Security" zwingend vereint werden müssen. Zudem erklärt Braun, weshalb reine Compliance-Security nicht ausreicht und wie KRITIS-Betreiber durch abteilungsübergreifendes Training echte Resilienz aufbauen.

Mehr zum Thema OT Security Made simple findet Ihr auf rhebo.com oder schreibt uns mit Euren Ideen, Fragen oder Gastvorschlägen an [email protected].