Risky Business #855 -- ShinyHunters done sowing, enters reaping phase

Podcast: The Industrial Talk Podcast Network (LS 39 · TOP 2% what is this?)Episode: Cesar Tascon with EYPub date: 2026-10-16Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIndustrial Talk/BCC is talking to Cesar Tascon, Cybersecurity Partner with EY about "OT / ICS - cyber physical and critical infrastructure security". Overview The discussion focused on adapting cybersecurity to connected operational technology while protecting safe, continuous operations. OT Risk and Approach OT security prioritizes availability and safety; outages can disrupt essential services or cause physical harm.Security must fit each organization’s assets, structure, and risk tolerance. Prioritize critical scenarios, contain incidents, and scale controls to asset criticality.Treat cybersecurity as an ongoing business process, with asset inventories, consistent practices, and rapid detection and response. People and Emerging Risks Introduce changes incrementally with operators, integrating security into existing workflows rather than imposing disruptive processes.OT security ownership depends on the organization; IT and OT responsibilities should align with its operating model.Regulations can overlap and differ in terminology. AI may strengthen attacks but also help analysts review alerts and respond faster.How should each organization assign OT security responsibilities? The transcript identifies no universal model. Outline OT Cybersecurity Context Connected devices and remote operations create significant business benefits, but expand cyber exposure.OT security differs from IT: availability and safety are central concerns, alongside confidentiality. Risk Assessment and Controls Assess assets, organizational structure, operational constraints, threats, and potential impacts before choosing controls.Prioritize critical facilities and prevent incidents from spreading across sites.Maintain asset and software information, responsibilities, backups, and restoration processes; use standards such as NIST and IEC 62443 as applicable. Operating Model and Change Assign security responsibilities according to the organization’s structure; there is no one-size-fits-all IT/OT ownership model.Involve operators and add security requirements to existing workflows to reduce resistance and preserve operations. Regulation and Shared Threats EU regulation promotes protection but may create complexity through overlapping requirements and inconsistent terminology.Coordinate across vendors, peers, sectors, and governments to address supply-chain and shared infrastructure risks. AI in Cybersecurity AI can make attacks and social engineering more convincing and scalable.Defensive uses include helping analysts process alerts and freeing time for incident response. If interested in being on the Industrial Talk show, simply contact us and let's have a quick conversation. Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2026. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy! CESAR TASCON'S CONTACT INFORMATION: Personal LinkedIn: https://www.linkedin.com/in/c%C3%A9sar-tasc%C3%B3n-1198973/ Company LinkedIn: https://www.linkedin.com/company/ernstandyoung/ Company Website: https://www.ey.com/en_gl PODCAST VIDEO: https://youtu.be/JbG5VG1UbdI THE STRATEGIC REASON "WHY YOU NEED TO PODCAST": OTHER GREAT INDUSTRIAL RESOURCES: Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/ Industrial Academy: https://industrialtalk.com/industrial-academy/ Industrial Dojo: https://industrialtalk.com/industrial_dojo/ Business Beatitude the Book Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES! TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES! Reserve My Copy and My 25% DiscountThe podcast and artwork embedded on this page are from The Industrial Talk Podcast with Scott MacKenzie, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Industrial Talk Podcast Network (LS 39 · TOP 2% what is this?)Episode: Martijn Grooten with CensysPub date: 2026-10-15Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIndustrial Talk/BCC is talking to Martijn Grooten, Principal Security Researcher at Censys about "State of the Internet Report". Overview The discussion examined findings from Censys’ State of the Internet Report and their implications for organizational cybersecurity. Report Findings The report uses Censys’ internet-wide data to describe exposed services, vulnerabilities, threats, and infrastructure; it provides evidence rather than prescriptive guidance.Many vulnerabilities are patched by vendors, but organizations often delay applying updates. HTTP services are frequently found on nonstandard ports. Exposure Risks About 80% of internet-visible hosts running industrial control system services also run a non-ICS service, such as HTTP, SSH, or FTP, expanding potential attack surfaces.Public-facing AI infrastructure grew 63% during the nine-month period covered. Among observed n8n hosts, 76% had at least one vulnerability with a severity score above 9; patches existed, but updates were not applied promptly.Threat actors select hosting providers based partly on permissiveness and resistance to takedowns. Shadow IT and shadow AI can arise when employees use unofficial tools to get work done. Outline Report Purpose Censys shares data from its internet-wide observations to inform cybersecurity professionals and organizations.The report describes exposure and trends rather than providing detailed remediation instructions. Vulnerabilities and Protocols Vulnerabilities are routinely discovered and patched, but organizations may be slow to install updates.Services such as HTTP can run on nonstandard ports, so monitoring only default ports may miss exposed services. Industrial Systems About 80% of observed hosts running an industrial control system service also ran a non-ICS service, including HTTP, SSH, or FTP.These additional services can broaden the attack surface of industrial environments. Threat Infrastructure Threat actors choose hosting providers based on cost, functionality, and permissiveness, rather than choosing infrastructure by country alone.The report observes phishing pages and command-and-control servers, not malware activity on individual computers. AI and Shadow IT Public internet-facing AI infrastructure grew 63% during the report’s covered period.Many observed n8n hosts had severe known vulnerabilities; the interview emphasized delayed patching.Unofficial tools and AI use can create security risks when organizational systems do not meet employees’ work needs. If interested in being on the Industrial Talk show, simply contact us and let's have a quick conversation. Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2026. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy! MARTIJN GROOTEN'S CONTACT INFORMATION: Personal LinkedIn: https://www.linkedin.com/in/martijngrooten/ Company LinkedIn: https://www.linkedin.com/company/censysio/ Company Website: https://censys.com/ State of the Internet Blog: https://censys.com/blog/state-of-the-internet-report-2026/ State of the Internet Report: https://censys.com/2026-state-of-the-internet-report/ PODCAST VIDEO: https://youtu.be/t_k-lsrLBGU THE STRATEGIC REASON "WHY YOU NEED TO PODCAST": OTHER GREAT INDUSTRIAL RESOURCES: Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/ Industrial Academy: https://industrialtalk.com/industrial-academy/ Industrial Dojo: https://industrialtalk.com/industrial_dojo/ Business Beatitude the Book Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES! TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES! Reserve My Copy and My 25% DiscountThe podcast and artwork embedded on this page are from The Industrial Talk Podcast with Scott MacKenzie, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Smart Buildings Academy Podcast | Teaching You Building Automation, Systems Integration, and Information Technology (LS 44 · TOP 1% what is this?)Episode: SBA 566: Integrating Audio Visual Systems into BASPub date: 2026-10-15Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationYour building automation system may be missing valuable information that already exists elsewhere in the building. What happens when your BAS and audio visual (AV) systems operate independently, even though both are designed to support the same spaces? Conference rooms experience unnecessary heating and cooling, occupancy data goes unused, and facility teams are left troubleshooting comfort complaints that could have been avoided. In Episode 566 of the Smart Buildings Academy Podcast, we explore the opportunities and challenges of integrating AV systems with building automation systems. For BAS professionals, understanding how these systems interact can open new possibilities for improving occupant comfort, energy efficiency, and building performance. But successful integration involves more than connecting devices and exchanging data. Topics Covered How AV systems can provide valuable occupancy and scheduling information to your BAS Integration options and communication methods between AV and building automation systems Network architecture, cybersecurity, and coordination challenges across AV and BAS environments Common integration failures that can impact system reliability and occupant experience Why commissioning, documentation, and clearly defined responsibilities matter for long-term integration success Are you overlooking valuable building data because your AV and BAS systems aren't communicating? Listen in to discover what these integration opportunities could mean for your next project.The podcast and artwork embedded on this page are from Smart Buildings Academy, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: BrakeSec Education Podcast (LS 42 · TOP 1.5% what is this?)Episode: Password issues for Danish org, mimosas at midnight, and SocVel quizPub date: 2026-10-15Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationThis episode discusses the breach of Denmark's CPR register with a weak password, CrowdStrike's identification of the ARTEX AI pen test tool, a double-cross in the Gentleman ransomware gang, and the Silent Ransom Group's $200 million earnings from stolen data. Chapters 00:00 Denmark's CPR register breached through an admin password of 123456 10:52 SocVel quiz Q1: China-linked attack on South Africa's air traffic control 15:34 Q2: How a New Jersey engineer who ransomed his employer was caught 22:40 Q3: CrowdStrike finds the ARTEX AI pentest tool used in attacks 25:35 Q4: The Gentleman ransomware: an affiliate double-crosses his gang 29:43 Q5: Silent Ransom Group's $200 million from data theft alone 34:47 Q6: Empire Market co-creator sentenced to 40 years 37:59 Q7: Iranian hackers pose as Dubai airport IT 42:19 Q8: Influencers targeted with fake brand deals 43:40 Q9: Midnight Mimosa, Android malware preinstalled on fake flagship phones 48:14 Q10: FBI on MicroScan and PhishHub, Flax Typhoon's tools 51:37 Quiz score, and Malware & Monsters, an OWASP incident-response game Watch the full video on YouTube: https://www.youtube.com/watch?v=SRTtp5QX9dg. Over an hour more content!The podcast and artwork embedded on this page are from Bryan Brake, Amanda Berlin, and Brian Boettcher, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Industrial Talk Podcast Network (LS 39 · TOP 2% what is this?)Episode: Ulrich Seldeslachts with LSEC, The Digital Security CatalystPub date: 2026-10-14Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIndustrial Talk/BCC is talking to Ulrich Seldeslachts, CEO at LSEC about "What CISOs are losing sleep over in 2026". Overview The discussion examined cybersecurity risks facing organizations and how leaders can protect operations without slowing business activity. Key Challenges Legacy operational technology, IT/OT alignment, and supplier vulnerabilities make it difficult to keep manufacturing and other critical operations secure.The European NIS2 regulation requires covered organizations to demonstrate cybersecurity measures and address supply-chain risk. Scarce cybersecurity talent and expensive, complex tools add to the burden.Ulrichdescribed difficulty securing management support and resources when executives do not prioritize cybersecurity. Approaches and Open Questions AI can help analyze security data and review product documentation, but its output needs guardrails and human review.The Cyber Resilience Act will require products with digital elements sold in Europe to meet cybersecurity and documentation requirements; noncompliant products may be removed from the market. New products must comply from January 2028.How can organizations secure extensive supplier networks and legacy systems while maintaining business continuity and pace of innovation? Outline CISO and Operational Risk Legacy operational technology and IT/OT alignment create ongoing security challenges.Supplier cybersecurity is a business-continuity risk, reinforced by NIS2 requirements.Cybersecurity staffing gaps and poorly fitted or underused tools constrain organizations. AI and Regulation AI supports analysis of large volumes of security data and review of compliance documentation; guardrails and human review remain important.The Cyber Resilience Act applies to products with digital elements entering the European market, with requirements for new products from January 2028. Organizational Readiness Executives must understand cybersecurity risks and provide appropriate resources.Ulrich described practical engagement with hospital teams and boards to build awareness and improve cybersecurity maturity. If interested in being on the Industrial Talk show, simply contact us and let's have a quick conversation. Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2026. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy! ULRICH SELDESLACHTS' CONTACT INFORMATION: Personal LinkedIn: https://www.linkedin.com/in/ulrichseldeslachts/ Company LinkedIn: https://www.linkedin.com/company/lsec---leaders-in-security/ Company Website: https://www.digitalsecuritycatalyst.com/ PODCAST VIDEO: https://youtu.be/eitsjlTMKhk THE STRATEGIC REASON "WHY YOU NEED TO PODCAST": OTHER GREAT INDUSTRIAL RESOURCES: NEOM: https://www.neom.com/en-us Hexagon: https://hexagon.com/ Arduino: https://www.arduino.cc/ Fictiv: https://www.fictiv.com/ Hitachi Vantara: https://www.hitachivantara.com/en-us/home.html Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/ Industrial Academy: https://industrialtalk.com/industrial-academy/ Industrial Dojo: https://industrialtalk.com/industrial_dojo/ We the 15: https://www.wethe15.org/ YOUR INDUSTRIAL DIGITAL TOOLBOX: LifterLMS: Get One Month Free for $1 – https://lifterlms.com/ Active Campaign: Active Campaign Link Social Jukebox: https://www.socialjukebox.com/ Business Beatitude the Book Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES! TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES! Reserve My Copy and My 25% DiscountThe podcast and artwork embedded on this page are from The Industrial Talk Podcast with Scott MacKenzie, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Hack the Plant (LS 35 · TOP 3% what is this?)Episode: Securing What Feeds UsPub date: 2026-10-14Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIn this episode, Bryson Bort talks with Kristin King, technologist, environmental manager, and host of the Bites and Bytes podcast, on why food and agriculture remain a dangerously overlooked piece of critical infrastructure. Kristin explains how human emotional responses drive social engineering, how rapidly expanding OT and connected tech in farms, factories, and fisheries create new attack surfaces, and what the JBS ransomware attack reveals about cascading risks from animal welfare to empty grocery shelves. She also offers a preview into her forthcoming book Securing What Feeds Us, outlining a path from today’s cyber-physical vulnerabilities toward better policy, shared language, and a new generation of “food cybersecurity” practitioners.“We are creating the potential for a foodborne illness to happen from a cyber attack that may not be noted,” Kristin said.Join us for this and more on this episode of Hack the Plan[e]t.The views and opinions expressed in this podcast represent those of the speaker(s) and do not necessarily represent the views and opinions of their employers.Hack the Plant is brought to you by ICS Village and the Institute for Security and Technology. The podcast and artwork embedded on this page are from Bryson Bort, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Risky Business (LS 56 · TOP 0.5% what is this?)Episode: Risky Business #855 -- ShinyHunters done sowing, enters reaping phasePub date: 2026-10-14Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationOn this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including: Sacré bleu! Hackers turn up the heat at French supermarket freezers ShinyHunters enters “find out” stage Netscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wild More models “behave badly” (by… doing exactly what we’re telling them to do) Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quiet Much, much more… This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work. This episode is also available on YouTube Show notes Cyberattack disrupts refrigeration at hundreds of French supermarkets | therecord.media Dangerous flaws in refrigeration equipment were disclosed months before retail attacks | Cybersecurity Dive Retail giant Ahold Delhaize takes systems offline after cyberattack | BleepingComputer Hacked FBI data has sensitive information about employees' intelligence roles | reuters.com Hackers stole millions of US military personnel records during months-long data breach | TechCrunch Security ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks | BleepingComputer Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation | krebsonsecurity.com Key ShinyHunters hacker detained in Jordan, is cooperating, sources say | reut.rs FBI Arrests Founder of Ransomware Negotiation Firm | krebsonsecurity.com Ransomware recovery CEO charged over secret ransom payments | BleepingComputer Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts | Cybersecurity Dive Citrix confirms two NetScaler RCE zero-days exploited in attacks | BleepingComputer Kiteworks urges customers to stop using platform after warning from federal intelligence agencies | therecord.media Attackers have been exploiting critical Zimbra flaw to steal emails | arstechnica.com FBI, Secret Service add to warnings of FortiBleed credential stealing campaign | therecord.media Check Point warns of hackers exploiting Security Gateway VPN RCE flaw | BleepingComputer Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks | securityweek.com Hackers exploit critical Atlassian flaw after public PoC release | BleepingComputer CISA: Ransomware gangs now exploiting critical TeamCity flaw | BleepingComputer Anthropic Agents Tried to Fill Out Visa Forms on State Dept. Website | nytimes.com An Anthropic AI model sent a false homicide tip to Philadelphia police | TechCrunch OpenAI bots meddled with US government agencies, including SEC and Census | bbc.com OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government | wired.com Anthropic Says Its A.I. Agents Attempted to Access a Range of Government Sites | nytimes.com OpenAI agent breached Australian government health website, Albanese says | therecord.media Doubts grow over claims OpenAI agent hacked Australian Medicare portal | therecord.media OpenAI agents tried to hack Wikipedia tools and flooded it with traffic | arstechnica.com OpenAI Ignored Employees' Warnings About Safely Testing A.I. Models | nytimes.com AI models may be capable of self-replicating without access to a datacenter | South Korean officials believe AI agents were used to hack several banks | therecord.media JadePuffer agentic AI attacks target Azure, destroy cloud resources | BleepingComputer GLM-5.3 and the Spread of Advanced Cyber Capabilities | anthropic.com New bill would create federal investigative body for AI-driven hacks | cyberscoop.com Court rules Trump can blacklist Anthropic for refusing to enable Claude features | Ars Technica Apple changes full-disk access permissions to curb abuse from AI agents | arstechnica.com Google Gemini could soon get full access to your Mac’s files, apps and the web | BleepingComputer Bitget hacked via zero-day in third-party security products | BleepingComputer Ledger confirms spy chip implant behind wallet crypto thefts | BleepingComputer Who Is Planting Backdoors in Ledger Crypto Wallets? | zetter-zeroday.com Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware | zscaler.com New Spectre v2 attack variant leaks Linux root password hash in minutes | BleepingComputer Data breach at Denmark’s national population register exposes 8.8 million people | therecord.media Shares in British clothing company ASOS dive after hackers apparently send push notification | therecord.media Google halts open-source bug bounty program amid AI spam surge | BleepingComputer International coalition seizes tools used by cyber firm behind Flax Typhoon | therecord.media Hackers hijack Google domains after breaching ccTLD registries | BleepingComputer GoBalance Flaw Lets Attackers Hijack.onion Addresses by Recovering Tor-Format Keys | The Hacker News Ukraine strikes third Yandex data center, disrupting digital services across Russia | therecord.media Provably Better Data | Corelight The podcast and artwork embedded on this page are from Risky Business Media, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity InsiderEpisode: Why Your Security Team Isn't Ready for a Real CyberattackPub date: 2026-10-14Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationMost manufacturers have an incident response plan. Few have tested it at 2 AM on a Sunday, with a skeleton crew and the people who know the equipment best nowhere to be found.Fresh from the ICS Cybersecurity Conference in Nashville, Craig Duckworth and Dino Busalachi compare notes on what keeps industrial organizations from being ready for a real attack. The risk today goes beyond ransomware. It's attackers who blend into normal plant activity, process data that quietly exposes your intellectual property, security tools that never get used after the sale, and teams that still work in separate camps.Craig and Dino talk through why IT, plant floor teams, system integrators, and equipment builders need to operate as one technology team, why new projects are the best place to build security in, and why passing an audit is not the same as being secure. They also look at how AI is speeding up both attacks and defenses, leaving manufacturers less time to react.If you lead a plant, an engineering team, or a security program, this conversation will help you answer one question: if your plant was hit tonight, who makes the first call and who's on the other end receiving the call?Listen now and share it with the people who own your plant floor.Chapters:00:00:00 Incident response plans must work outside office hours00:01:00 Inside the OTICS Cyber Security Conference00:02:00 Threat actors living in the normal00:04:00 Why process data can expose intellectual property00:07:00 The gap between tools, skills, and operating practice00:08:00 Moving beyond the IT and OT divide00:11:00 Why technology adoption matters after the sale00:12:00 Building security into projects from the start00:15:00 Defense in depth and protecting critical assets00:17:00 Practicing incident response when it counts00:19:00 Bringing integrators and asset owners to the table00:20:00 Authority, accountability, and the CISO challenge00:23:00 CMMC, continuous monitoring, and process data00:24:00 Artificial intelligence changes the threat timeline00:27:00 Asset discovery and security baselines00:29:00 Checking a box versus improving the environment00:32:00 Staying ahead through collaboration and readinessLinks And Resources:Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityDino Busalachi on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: (CS)²AI Podcast Show: Control System Cyber SecurityEpisode: 136: Inside the Tabletop: What an Airport OT Incident Taught Us About Command, Cost, and ChaosPub date: 2026-10-13Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationInside the Tabletop: What an Airport OT Incident Taught Us About Command, Cost, and ChaosThe team behind and inside Level Zero 2026's tabletop exercise breaks down what happened when an airport OT incident played out in real time. Derrik Oates and panelists from UPS, the Department of War, and the finance table walk through the ICS4ICS incident command framework, what it's like to be a first-timer when the pressure hits, why "keep your receipts" is real advice, and how to make sure exercise lessons actually change an organization. They also explain why the 2027 exercise becomes a dedicated full day.Guests: Christian Harter (UPS); Donovan Tindill; Brad Willet (UPS); Daryl Haegley (United States Department of the Air Force) Host / moderator: Derrik Oates (UTSI)Chapters: 00:00 Panel introductions 04:50 Why run tabletop exercises at all 08:48 The finance table: 'keep your receipts' 13:02 ICS4ICS sections and logistics 14:43 Decisions under fire 18:59 One voice: incident communications 20:46 Using the ICS4ICS framework anywhere 23:04 First-timer experience 27:45 Understand the problem before you fix it 30:30 Lessons learned and changes for 2027 35:20 Making lessons stick: ownership and after-action 40:56 Why practice matters: downtime and safetyRecorded at the CS²AI Online Symposium, "Level Zero: Visions & Reflections."Join us at Level Zero 2027, April 23–30 at Georgia Tech in Atlanta: pre-conference training, the Conflag Zero™ tabletop exercise, and three days of practitioner-led sessions built so you can put what you learn to work the Monday you get back.Questions: [email protected]: [email protected] by CS²AI (Control System Cyber Security Association International).The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: OT Security Made SimpleEpisode: Layer 0 AI in der OT: Wie KI-Sensoren die Entscheidungsgrundlage verändern | OT Security Made SamplePub date: 2026-10-13Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationKlaus Mochalski und Yosi Shneck (YSICONS) sprechen über KI in OT-Sensoren. Erfahren Sie, wie „Layer 0 AI“ vertrauenswürdige Messdaten verändert und warum OT-Security künftig nicht nur Systeme, sondern die Wahrheit schützen muss.Mehr zum Thema OT Security Made simple findet Ihr auf rhebo.com oder schreibt uns mit Euren Ideen, Fragen oder Gastvorschlägen an [email protected].  The podcast and artwork embedded on this page are from Klaus Mochalski, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.