Industrial Cybersecurity Insider

In this episode of the Industrial Cybersecurity Insider, Craig Duckworth sits down with Matthew Carr, co-founder of Atumcell and OT penetration testing expert with fifteen years of experience securing operational technology systems.

Matthew shares his journey from vulnerability research to specializing in cyber-physical security, recounting the pivotal moment when his exploit code stopped a production line at a major car manufacturer.

The conversation addresses the critical gaps in OT security, including why most organizations are unaware of what's actually on their networks, the dangers of default passwords on IoT devices, and how attackers often use espionage rather than ransomware to remain undetected.

Matthew reveals how his team safely conducts pentests in production environments, develops proprietary detection rule sets, and helps organizations understand their infrastructure through network mapping.

The discussion encompasses a range of topics, from the risks associated with smart TVs in conference rooms to the motivations behind nation-states targeting critical infrastructure, culminating in practical advice on developing a cybersecurity roadmap for cyber-physical systems.

Chapters:

• (00:00:00) - Welcome and Introduction to Matthew Carr's OT Security Journey
• (00:02:30) - The Moment Exploit Code Stopped a Production Line at a Major Car Manufacturer
• (00:06:15) - Why Most Organizations Don't Know What's Actually on Their OT Networks
• (00:09:45) - The Three Pillars of Adamzsel: Pentesting, Monitoring, and Tabletop Exercises
• (00:14:20) - How Attackers Know Your Infrastructure Better Than You Do
• (00:18:50) - Smart TVs in Conference Rooms: The Hidden Security Risk with Root Access
• (00:22:30) - Espionage vs Ransomware: The Cyber Attacks No One Is Talking About
• (00:26:45) - Why Default Passwords on IoT Devices Are an Attacker's Favorite Entry Point
• (00:30:20) - Building a Cybersecurity Roadmap for Cyber-Physical Systems
• (00:33:15) - Closing Thoughts and Free OT Security White Paper from Adamzsel

Links And Resources:

• Atumcell Website
• Matthew Carr on LinkedIn
• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

What happens when IT cybersecurity practices collide with OT operational realities? In this episode, Jim and Dino expose the costly mistakes organizations make when applying IT security playbooks to manufacturing environments.

Discover why zero trust architectures can halt production, how shadow IT thrives on every plant floor, and why remote access policies designed for corporate networks fail in industrial settings.

Learn the critical importance of OT-tailored asset inventories, the need for IT/OT collaboration, and why digital safety must be treated with the same urgency as physical safety.

If you're struggling to bridge the gap between IT security mandates and OT operational needs—or if you've ever watched a well-intentioned security policy bring production to a halt—this episode is your roadmap to getting it right.

Chapters:

• (00:00:00) - Introduction and Episode Overview
• (00:01:19) - IT vs OT Security Mindsets
• (00:02:03) - Zero Trust Challenges in OT Environments
• (00:05:12) - Remote Access and Change Management Conflicts
• (00:09:00) - Who Should Learn from Whom: IT or OT?
• (00:10:23) - Asset Inventory: What OT Engineers Don't Know
• (00:15:00) - Process Integrity and Operational Value
• (00:21:57) - Shadow IT: The Backdoors Nobody Talks About
• (00:26:00) - Designing Security Into New Equipment
• (00:28:00) - Digital Safety vs Physical Safety

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn
• Jim Cook on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this episode, Craig and Dino tackle IT/OT convergence, operational technology security, and manufacturing cybersecurity challenges head-on.

They challenge the notion of OT being a "shadow IT group" and explore the fundamental differences between IT and OT operations in industrial environments.

The discussion emphasizes that OT focuses on safety and physical outcomes, while IT prioritizes data security.

They stress the importance of collaboration between IT and OT teams, highlighting how system integrators, OEMs, and plant operators must work together to improve cybersecurity posture.

The conversation covers practical issues like Overall Equipment Effectiveness (OEE), incident response, and the need for proper funding and governance.

Both advocate for CISOs and CIOs to actively engage with OT teams and system integrators, visit manufacturing facilities, and understand the unique challenges of industrial control systems to achieve true convergence and protect manufacturing plants and critical infrastructure.

Chapters:

• 00:00:00 - Opening Shot: Who’s Really in Charge—CIOs or the Plant Floor?
• 00:00:57 - Collision Course: IT and OT Can’t Keep Dodging Each Other
• 00:01:52 - Two Worlds, One Mission: Why OT Isn’t Just “IT in a Hard Hat”
• 00:04:07 - When Convergence Fails: What’s Missing in the Middle
• 00:05:54 - Breaking Silos: Why Cybersecurity Demands True Collaboration
• 00:08:22 - Real Talk: What Cyber Protection Looks Like on the Plant Floor
• 00:10:46 - OT’s Tipping Point: Will the Next Move Come from IT, or the Shop Floor?
• 00:17:32 - Your Move: What Leaders Must Do Next (Before It’s Too Late)

Links And Resources:

• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this episode of the Industrial Cybersecurity Insider, host Dino sits down with Dan Cartmill, Sr. Global Product Marketing Director for TXOne Networks, to discuss the often misunderstood world of OT vulnerability management.

Dan brings a unique perspective, having started as a practitioner 17 years ago, before transitioning to the vendor side. The conversation explores why simply creating a list of vulnerabilities isn't enough – and what organizations should actually be doing to reduce risk in their OT environments.

Chapters:

• 00:00:00 - Introduction and Dan's Background
• 00:02:00 - Biggest Misconceptions About OT Vulnerability Management
• 00:04:00 - Blind Spots in OT Vulnerability Scanning
• 00:07:00 - Finding Vulnerabilities: OT vs IT Differences
• 00:10:00 - Proactive Approaches to Unknown Vulnerabilities
• 00:12:00 - How TX One Addresses Vulnerabilities Non-Disruptively
• 00:15:00 - Virtual Patching and Operations-First Philosophy
• 00:18:00 - IT/OT Convergence and Team Collaboration
• 00:21:00 - Building Relationships with Third-Party Partners
• 00:23:00 - Tabletop Exercises and Incident Response Planning
• 00:26:00 - Key Takeaway: Never Forget Your Original Objectives
• 00:28:00 - Dealing with Event Overload and Zero-Day Vulnerabilities

Links And Resources:

• Dan Cartmill on LinkedIn
• TXOne Networks
• Dino Busalachi on LinkedIn
• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this episode, Craig and Dino address why manufacturers still suffer incidents after spending millions on OT security tools. They discuss how to convert those investments into measurable risk reduction.

You'll learn why buying tools isn't a strategy. Get insights into how to validate asset visibility on the floor (not just the network map), practical ways to reduce alert fatigue and assign ownership, how to close the OT incident response gap by connecting SOC to operators, the realities of flat Layer 2 networks and undocumented zones, how to handle technical debt at scale (EOL firmware, unpatched HMIs, safe upgrade paths), and why "everyone is responsible" often means no one is.

Expect candid discussion on alert fatigue, flat networks, and the human constraints driving today's gaps, plus a concrete checklist for building a coalition that actually works to protect production environments.

Chapters

00:00:00 – Why incidents still happen after major OT cyber spend

00:02:30 – Tools vs. outcomes: underusing capabilities and alert fatigue

00:05:50 – Who owns plant‑floor cyber? Why CISOs, CIOs, OEMs, and SIs talk past each other

00:08:10 – Define the use case before tuning sensors and policies

00:10:00 – OT IR is missing: operators are the first responders

00:11:20 – Network reality check: flat L2, VLAN gaps, and unmanaged switches

00:13:30 – Change management and patching in OT: risk, downtime, and technical debt

00:15:20 – Skills and staffing: the silver tsunami and "jack of all trades" constraints

00:18:00 – What outside partners can and cannot do in plants

00:21:00 – Visibility blind spots: validating coverage with floor‑level walkthroughs

00:24:00 – It won’t stick without a coalition: getting plant managers, engineering, OEMs, and SOC aligned

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this episode, Scott Cargill, Partner of BW Design Group, joins Craig and Dino. Together they dissect the critical vulnerability gap in data center operational technology infrastructure.

While most data centers implement robust IT security protocols, their building management systems controlling cooling, power distribution, and environmental controls remain significantly under-protected.

Cargill provides technical analysis of how the rapid expansion of data center capacity for AI workloads has outpaced OT security implementation, creating exploitable attack vectors where minutes of system compromise could cascade into millions in equipment damage and service disruption.

Through evidence-based examination and industry insights, this episode offers CISOs and OT security professionals a practical framework for addressing the IT-OT security convergence challenge in mission-critical facilities.

They offer actionable strategies for vulnerability assessment, segmentation, and defense-in-depth implementation.

- 00:00:00 - Meet Scott Cargill of BW Design Group

- 00:02:30 - Data centers expanding for AI

- 00:04:40 - Critical BMS vulnerabilities being ignored

- 00:07:40 - Alarming OT security reality

- 00:09:40 - Why OT security remains deprioritized

- 00:12:10 - IT-OT security convergence challenges persist

- 00:16:35 - Manufacturing parallels to data centers

- 00:20:10 - Security solutions evolution underway

- 00:21:45 - Managed services necessity for OT

- 00:24:42 - Thought leadership driving industry standards

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Scott Cargill on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Industrial environments are complex. Aging systems, distributed plants, and a crowded vendor landscape make “buy another tool” a tempting but often costly reflex.

In this episode, Dino Busalachi talks with Danielle “DJ” Jablanski, about moving from paper programs to measurable progress in OT security. They address why competence and capacity must come before capabilities, how to right-size your technology stack through tool rationalization, and why interdependence mapping is foundational for real resilience.

• 00:00:00 – Why OT maturity often stalls
• 00:06:00 – Where to focus first: assets, segmentation, and access
• 00:08:20 – Governance gaps: frameworks on paper vs. controls in practice
• 00:10:10 – Interdependence mapping beyond "crown jewels"
• 00:12:30 – Operators as first responders and safe-state realities
• 00:16:15 – Vendor and OEM ecosystems: who owns the response plan?
• 00:20:10 – Threat intel's limits: effects‑based security over means‑based noise
• 00:22:00 – Incident readiness in plants: plans, practice, and ownership
• 00:26:00 – Supply chain fragility and concentration risk in manufacturing
• 00:29:30 – Tool rationalization: measuring ROI, coverage, and usability

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• DJ's Blog on Interdependence Mapping: https://claroty.com/blog
• Danielle Jablanski on LinkedIn
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Hosts Craig and Dino discuss Mitsubishi's billion-dollar acquisition of Nozomi Networks and its implications for operational technology cybersecurity. They address how this major deal affects the industrial security market.

The conversation covers IT/OT convergence challenges, managed services, vendor partnerships, and AI in cybersecurity decision-making.

Craig and Dino share practical insights for security leaders and engineering professionals working in industrial environments.

Topics covered:

• Why Mitsubishi made this $1B investment

• How this affects choosing security vendors

• The growing role of managed services in OT security

• What organizations should do to prepare for changes

For cybersecurity professionals, industrial engineers, and executives working with operational technology and cyber defense.

Chapters:

• 00:00:00 - Welcome to Industrial Cybersecurity Insider Podcast
• 00:01:26 - A Trend of Cybersecurity Platform Acquisitions
• 00:02:03 - The "Cyber-Informed Engineering" Play
• 00:02:52 - Market Impact: Setting a Billion-Dollar Bar for Competitors
• 00:05:06 - A Lack of Expertise and Resources
• 00:05:48 - The Challenge of Building an In-House Team vs. Using Managed Services
• 00:07:40 - Embedding Security Directly into Hardware Controllers
• 00:09:33 - How Competitors Like Rockwell Might React
• 00:10:00 - IPO or Acquisition?
• 00:14:42 - The On-Prem vs. Cloud Debate in Manufacturing Environments
• 00:16:50 - 87% of Organizations Are Lagging in Cybersecurity Maturity
• 00:17:20 - The IT/OT Resource and Knowledge Gap
• 00:18:54 - The Need for CIOs to Partner with OT Systems Integrators
• 00:21:25 - The "OnStar" Model for Industrial Security
• 00:22:15 - The Reality of Vendor Lock-In and Warranty Issues
• 00:24:14 - OT Needs to Own Its Cybersecurity Strategy
• 00:25:12 - The Risk of Underutilized Security Tools

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this episode, Craig and Dino address one of the most pressing challenges in industrial cybersecurity: the gap between responsibility and authority for CISOs and their ability to protect manufacturing and critical infrastructure plant floors.

While executives are tasked with ensuring resilience and reporting to the board, they often hit resistance at the plant floor where production uptime and safety KPIs take priority.

The conversation explores IT/OT convergence, asset visibility blind spots, OEM restrictions, and the risks of relying on remote-only deployments.

With insights from decades of hands-on experience in industrial environments, Craig and Dino outline practical steps for building bridges between IT and OT, aligning financial risk with security strategy, and equipping CISOs with the authority they need to succeed.

• 00:00:00 - Welcome to the Industrial Cybersecurity Insider Podcast
• 00:01:11 - The CISO's Core Conflict of Responsibility Without Authority
• 00:02:45 - Why Security Efforts Get "Kneecapped at the Front Door"
• 00:04:04 - Understanding the OT Environment and Its Unique Technology
• 00:05:36 - Building Bridges Between IT and OT as the Solution
• 00:07:44 - Overcoming OT's "Skittish" Resistance to IT
• 00:09:43 - The Scaling Problem of Too Few Engineers for Too Many Plants
• 00:10:57 - Why a Remote-First Approach Fails in Manufacturing
• 00:14:44 - The "Epiphany" of Uncovering Operational Benefits for OT Teams
• 00:17:24 - Navigating OEM Warranties and Equipment Restrictions
• 00:19:14 - The "Trust but Verify" Mandate for a CISO
• 00:20:56 - The Danger of Hidden Networks and the "Air Gap" Myth
• 00:23:16 - Speaking the Language of Business in Dollars and Cents
• 00:24:43 - Aligning Security with the Plant's Capital Master Plan
• 00:27:24 - How Company Ownership Affects Security Investment
• 00:28:16 - How to Give the CISO Real Authority

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this essential rewind episode, Dino Busalachi and Craig Duckworth address a fundamental challenge facing practitioners in the field: effectively securing operational technology (OT) environments through local expertise and proper data collection.

The Power of Local Partnership

Dino emphasizes a crucial principle that often gets overlooked in cybersecurity implementations: "The only way you can act local is you've got to work with those folks that are in those plants every day, all day."

This insight highlights why external cybersecurity consultants must forge strong partnerships with on-site operational teams who possess intimate knowledge of their industrial environments.

These local experts understand the nuanced details that can make or break a security implementation. This includes everything from vendor schedules and machine operations to maintenance windows and downtime planning.

They know when critical systems are most vulnerable and which processes absolutely cannot be interrupted.

Chapters:

• 00:00:00 - Why Local Collaboration is Critical for Cybersecurity Success
• 00:01:07 - Meet Dino and Craig: Experts in IT/OT Integration
• 00:01:49 - Unpacking the Challenges of IT/OT Convergence
• 00:02:28 - Why IT and OT Teams Often Struggle to Align
• 00:04:48 - Building Collaborative Frameworks for Stronger Cybersecurity
• 00:07:33 - The Role of CIOs and CISOs in Driving Change
• 00:08:44 - Navigating the Complexities of Diverse Plant Environments
• 00:10:23 - Partnering with Vendors to Enhance Security Outcomes
• 00:11:16 - Key Questions to Evaluate System Integrators Effectively
• 00:16:35 - Using Tabletop Exercises to Align IT and OT Teams
• 00:22:20 - Closing Thoughts: Bridging the Divide for Unified Cybersecurity

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!