Exploited: The Cyber Truth

Is patching enough to secure critical systems? In this episode of Exploited: The Cyber Truth, host Paul Ducklin sits down with Joe Saunders, Founder and CEO of RunSafe Security, to challenge the idea that vulnerabilities can be solved after software ships.

Joe explains why embedded systems and critical infrastructure demand a different approach—one that builds protections in from the start. He unpacks:

• Why patching after deployment creates dangerous gaps for attackers
• How build-time memory safety and code-hardening disrupt exploitation
• The software supply chain risks of relying on incomplete SBOMs
• Real-world examples of how build-time defenses reduce costly downtime and post-production scrambles

If you’re leading a program of record, developing embedded systems, or managing software security, this conversation reveals why “Secure by Design” is the only way forward.

What do drivers really think about the cyber and safety risks in connected and autonomous vehicles? In this episode of Exploited: The Cyber Truth, host Paul Ducklin speaks with Joe Saunders, CEO and Founder of RunSafe Security, about the findings from RunSafe’s 2025 Connected Car Cyber Safety & Security Survey. With responses from 2,000 drivers across the U.S., U.K., and Germany, the survey uncovers how consumers weigh safety, privacy, and trust in the cars of today and tomorrow.

Joe shares insights into:

• Why 65% of drivers believe remote hacking is possible
• Why 79% prioritize physical safety over personal data privacy
• How 87% say strong cybersecurity would influence their buying decision
• The role of over-the-air updates and what consumers fear most about them
• How trust in cybersecurity could shape brand loyalty alongside performance and fuel economy

Tune in to learn why cybersecurity is quickly becoming the next must-have feature for connected vehicles.

How do you respond when a vulnerability opens the door to your most sensitive data? In this urgent episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by RunSafe Security CEO Joe Saunders and special guest Ron Reiter, CTO and co-founder of Sentra, to dissect the SharePoint vulnerabilities (CVE-2025-53770 and CVE-2025-53771) that have already impacted hundreds of organizations, including U.S. government agencies.

Ron explains why this remote code execution flaw is more dangerous than most, how attackers exploit unauthenticated access to steal contracts, customer records, and intellectual property, and why patching alone won’t keep systems safe. Joe underscores the downstream risks for operational technology (OT), where attackers can pivot from IT breaches to disrupt industrial environments.

You’ll learn:

• Why SharePoint servers are a high-value target for attackers
• The real risk when IT breaches spill into OT environments
• Why compliance isn’t enough without true customer data protection
• Three  steps for security leaders to gain an organization-wide view of cyber security

This episode is a wake-up call for integrated, resilient cybersecurity that safeguards both corporate data and critical operations.

How do you protect the beating heart of modern manufacturing—smart factories—from equally smart attackers?

In this episode of Exploited: The Cyber Truth, host Paul Ducklin speaks with Joe Saunders, CEO and Founder of RunSafe Security, about the complex risks inside today’s highly connected industrial environments.

Joe shares insights into:

• Why the Purdue security model falls short in the cloud and IoT era
• How attackers gain value from even “read-only” factory access
• The role of standards like IEC 62443 in raising security posture
• Why software quality and Secure by Design practices matter as much as compliance
• Extending the life of legacy systems with memory safety protections

From factory floor sensors to enterprise IT systems, this conversation unpacks what manufacturers, suppliers, and operators can do to stay one step ahead of motivated adversaries.

DEF CON 33 put the maritime industry in the hacker’s crosshairs for the first time and the results were eye-opening. In this episode of Exploited: The Cyber Truth, host Paul Ducklin sits down with Joe Saunders, CEO of RunSafe Security, and RunSafe’s Shiv Saxena to unpack what happened inside the Maritime Hacking Village and what it means for the future of industrial control systems (ICS) and operational technology (OT) security.

From breaking into an autonomous narco sub and a real-world port crane to candid discussions about legacy system vulnerabilities, the conversation dives into the most surprising takeaways from Las Vegas—and why they matter for national security.

You’ll hear:

• What DEF CON revealed about ICS and OT risks
• How maritime pros are rethinking security priorities
• Why legacy code and memory safety remain urgent challenges
• The role public hacking events play in strengthening critical infrastructure defenses

Whether you were there in person or following from afar, this insider debrief delivers lessons every security leader can act on now.

Can defense programs achieve both innovation and compliance—without compromising security?

In this episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by Joe Saunders, CEO of RunSafe Security, for a deep dive into the balancing act of rapid software development and strict regulatory demands in the defense sector.

Joe shares first-hand insights into:

• The risks of layered supplier networks and open-source dependencies
• How automated Secure by Design solutions support both resilience and speed
• The vital role of transparency and full Software Bills of Materials (SBOMs)
• Why deterministic behavior is key in real-time, safety-critical systems
• How DevSecOps and CI/CD pipelines can streamline compliance and security

Whether you're leading a program of record, managing cyber risk, or modernizing embedded systems, this conversation equips you with actionable strategies to futureproof your software while meeting mission timelines.

As vehicles edge closer to full autonomy, cybersecurity becomes a make-or-break component of innovation. In this episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by RunSafe Security CEO Joe Saunders and special guest Gabriel Gonzalez, Director of Hardware Security at IOActive, for an insider’s look at embedded security in the automotive industry.

Gabriel shares eye-opening research into telematics vulnerabilities that could allow attackers to remotely control vehicles—underscoring the critical need for proactive defense. Joe explains why hardening systems at build time and securing complex supply chains are essential steps toward resilience.

Together, Joe and Gabriel explore:

• The consequences of insecure MQTT configurations in fleet vehicles
• The evolving role of memory safety in embedded system defense
• The importance of security-by-design in the automotive SDLC
• The value of third-party researcher collaboration in vulnerability discovery

Whether you build ECUs, design infotainment systems, or oversee cyber risk across a fleet, this episode reveals how collaboration between researchers, OEMs, and security experts is driving a safer future for connected vehicles.

In this episode of Exploited: The Cyber Truth, RunSafe Security CEO Joe Saunders joins host Paul Ducklin to confront a troubling reality: Iranian and pro-Iranian threat actors are targeting critical infrastructure in the United States. From small-town water utilities to nationwide energy providers, the systems we rely on every day are increasingly vulnerable.

Joe explains how groups like CyberAv3ngers—linked to the IRGC—are exploiting weak security in industrial control systems (ICS) and operational technology (OT). Their tactics aren’t always sophisticated, but they are effective: default passwords, outdated software, and internet-exposed devices are all they need to lock operators out and take control.

This urgent conversation explores:

• What we know about recent cyber campaigns targeting PLCs and HMIs
• How poorly secured infrastructure becomes a launchpad for nation-state actors
• What disruptions mean for national security and public health
• What municipalities, vendors, and regulators can do today to improve defenses

Whether you’re a system operator, vendor, or policymaker, this episode will leave you with a clearer picture of the risks—and what’s at stake.

In this episode of Exploited: The Cyber Truth, we go below deck to expose the vulnerabilities lurking in the digital systems steering today’s maritime operations.

RunSafe Security CEO Joe Saunders and special guest Duncan Woodbury—CEO of Liberas and Executive Director of the Maritime Hacking Village at DEF CON—join host Paul Ducklin for a candid conversation about securing the floating infrastructure that powers global trade and national defense.

As ships evolve into cloud-connected data centers and autonomous vessels redefine modern naval operations, the cyber stakes couldn’t be higher. From GPS spoofing and AIS jamming to real-world crane system takeovers and confiscated narco-subs, Duncan shares what hackers—and defenders—will encounter at this year’s Maritime Hacking Village at DEF CON 33.

Together, Joe and Duncan explore:

• Why maritime infrastructure is the “last dinosaur” of digital transformation
• The risks of legacy software in mission-critical systems
• How offensive security is driving rapid discovery and remediation
• Why hiding vulnerabilities only benefits your adversaries

Whether you're building autonomous surface vessels, managing port logistics, or leading security strategy for a defense program, this episode offers an inside look at how to navigate maritime cybersecurity before attackers set the course.

In this episode of Exploited: The Cyber Truth, RunSafe Security CEO Joe Saunders joins Leslie Grandy, Lead Executive in Residence at the University of Washington, for an insightful conversation about how creative resilience is reshaping cybersecurity in the age of AI.

From philosophical strategies like “Premeditation of Evils” to inversion thinking and paradoxical reasoning, Leslie shares how blending creativity with technical precision can help organizations better anticipate and prepare for evolving cyber threats. Joe and Leslie also explore the double-edged nature of generative AI—how it can serve both attackers and defenders—and why companies must embrace human-centered frameworks alongside technical tools.

Together, they examine the risks of expert bias, the pitfalls of over-automating with AI, and how to design cybersecurity strategies that prioritize adaptability, foresight, and Secure by Design principles.

Topics covered:

• The role of creative thinking in modern cybersecurity
• Inversion thinking as a planning tool for resilience
• How attackers—and defenders—are using generative AI
• Why AI can’t replace human judgment in risk strategy
• The critical need for Secure by Design software development

Whether you’re building products, leading a team, or defining security policies, this episode offers a fresh, actionable perspective on how to stay ahead of both known and unknown threats.