Trust Is Not a Security Control: Blast Radius and the Management Plane

Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)Episode: Trust Is Not a Security Control: Blast Radius and the Management PlanePub date: 2026-10-19Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationWork with Aaron: https://protectitallpod.com/work/ The book: https://protectitallpod.com/book/ This episode: https://protectitallpod.com/ep128/ The OT Security Starter Kit: https://protectitallpod.com/starter-kit/ Zero trust asks whether something should be allowed. Zach Miller asks a different question: if it is allowed, and something blows up, how far does it go? Zach is a cybersecurity engineer in Colorado Springs who came up through K-12 network support on a shoestring budget, defense contracting and managed services. On the side he runs Skip to Secure, where he publishes research on trust concentration and management-plane abuse, including his Blast Radius framework. He and Aaron trace one pattern through five years of incidents. Kaseya and SaltStack in 2020 and 2021, then Stryker in 2026: each time the management platform itself became the way in, and the authority it already held decided how far the damage went. Segmentation is the fix everyone already knows. It is still a hard sell. What you will take away Why trust is something you delegate, not a security control, and how to put a limit on it What Zach's blast radius framework measures: reach, scope crossing, standing privilege, human concentration, automation visibility and recoverability Why the same PLC with the same vulnerabilities is not the same risk on a turbine as it is on an ice machine Why attacks now look like a normal workday from a cloud address, not a foreign IP in the logs Why one any-any rule undoes 477 good ones, and why a firewall starts from deny Why you verify every piece of work an AI agent hands back, however good the prompt was In this episode 5:03 Sleeping under the conference table 8:30 The open proxy everyone borrowed 10:24 From K-12 to defense contracting 12:59 How careers really get built 16:36 Where is the puck going? 23:22 A heat map for the smoker 25:41 Verify everything the agent does 32:31 Attacks that look like a normal workday 34:33 The work laptop on the home network 39:15 Security is never done 41:39 Where the word firewall comes from 43:33 The same failure, five years apart 44:21 What blast radius measures 46:28 The turbine and the ice machine 49:43 When the right account does the wrong thing 51:53 A firewall with one any-any rule 54:08 Where to find Zach's research About the guest Zach Miller is a cybersecurity engineer based in Colorado Springs. He started as a network and switching specialist supporting K-12 education, then moved through defense contracting, consulting and managed services into cybersecurity engineering. Through Skip to Secure, his independent research and training effort, he publishes white papers on trust concentration and management-plane abuse, including the Blast Radius framework and the LOLMgmt paper on living-off-the-land management attacks. Blast Radius white paper and scoring workbook: https://github.com/ridgestoneco/blast-radius LOLMgmt white paper: https://zenodo.org/records/21255394 Zach on LinkedIn: https://www.linkedin.com/in/zacharymiller0111/ Learn more about PrOTect IT All: Work with Aaron: https://protectitallpod.com/work/ The book: https://protectitallpod.com/book/ This episode: https://protectitallpod.com/ep128/ The OT Security Starter Kit: https://protectitallpod.com/starter-kit/ YouTube: https://www.youtube.com/@PrOTectITAll Email: [email protected] X: https://twitter.com/protectitall Facebook: https://facebook.com/protectitallpodcast To be a guest or suggest a guest or episode, email [email protected]. Please leave us a review on Apple or Spotify: Apple: https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124 Spotify: https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Trust Me, It's Air-GappedEpisode: AI and OT Cybersecurity: Managing Risk Inside and Outside the PlantPub date: 2026-10-09Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationAI is a force multiplier for your workforce and for attackers. In this episode of Trust Me, It’s Air-Gapped, GrayMatter OT Cybersecurity Practice Lead Scott Christensen unpacks what industrial leaders are saying about AI and cyber risk.Scott explains how AI-powered reconnaissance lets bad actors launch attacks in minutes instead of weeks. He also covers the risks growing inside the house: well-meaning employees adopting AI tools without a plan, vendors adding undisclosed AI to their products and plant-floor data flowing to the cloud without zero trust architecture.Also discussed:Why every manufacturer needs a cross-functional AI working groupTreating AI like a new employee with least-privilege accessKeeping a human in the loop for agentic AI decisionsCapturing tribal knowledge before your veteran operators retireQuestions to ask vendors about their AI roadmapWhy AI won’t replace your SOC anytime soonVisit graymattersystems.com.The podcast and artwork embedded on this page are from GrayMatter, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Talk OT to MeEpisode: When does OT remote access become infrastructure?Pub date: 2026-10-07Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationRemote access started as a way to save time and avoid unnecessary travel. But as industrial operations become more connected, distributed and dependent on remote expertise, its role is changing.In this episode of Talk OT to Me, Jesper and Jeff explore when OT remote access stops being just another tool and becomes part of the infrastructure an operation depends on.They discuss what happens when access goes down, how dependency and downtime change the equation, when redundancy starts to matter, and why the conversation should begin with operational needs — not just cybersecurity.Because the real question isn’t simply whether remote access is secure. It’s: what happens to your operation when it’s no longer there?The podcast and artwork embedded on this page are from Secomea, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure (LS 30 · TOP 5% what is this?)Episode: Pushing Cyber Planning Beyond Prevention with Stephanie Crowe and Nick AndersenPub date: 2026-10-06Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationKeeping power, water, and other essential services running requires planning for what happens when cyber defenses fail. On this episode of Cyber Focus, Frank Cilluffo speaks with Stephanie Crowe, head of the Australian Cyber Security Centre, and Nick Andersen, acting director of the Cybersecurity and Infrastructure Security Agency (CISA), about how two close allies are preparing critical infrastructure to operate through compromise. The conversation examines how governments and industry identify their most critical systems, turn shared intelligence into joint action, and prepare for attacks that cross sectors and borders. Crowe and Andersen also discuss how AI is changing cyber defense and what that means for infrastructure investment, workforce skills, and decisions in the boardroom. Main Topics Operating through cyberattacks Protecting critical assets and dependencies China's infrastructure prepositioning CI Fortify and joint industry planning U.S.-Australia and Five Eyes cooperation AI defense and aging infrastructure AI's energy demands Workforce skills and boardroom decisions Key Quotes "You have to be able to fight through compromise now, which is a really different way of thinking about the cyber threat." — Stephanie Crowe "We've come a long way from thinking about our number one cyber risk being data breaches and theft of information into a world where service disruption is now the thing that we have to really consider and plan in our cyber risk management." — Stephanie Crowe "And just to be completely honest, Australia really bailed us out when we were in the middle of our shutdown… Australia led from the front." — Nick Andersen "If the Congress decided that in the next budget that CISA needed to be quintupled in size, we're still not going to have enough resources to be able to meet every single area that we'd like to be able to stray into with our attention." — Nick Andersen "We know that we're seeing exceedingly aggressive, well-orchestrated campaigns, in particular from entities like China, that are engaged in a significant way to preposition across our critical infrastructure to hold it at risk at a time and place of their choosing." — Nick Andersen Links and Resources Cybersecurity and Infrastructure Security Agency (CISA) Australian Cyber Security Centre: Guidance and Resources About the Guests: Stephanie Crowe is Deputy Director-General of the Australian Signals Directorate and Head of the Australian Cyber Security Centre. She has held senior roles in signals intelligence and cybersecurity, leading efforts to strengthen Australia's cyber defenses, build threat intelligence capabilities, and support industry during major cyber incidents. Nick Andersen is Acting Director of the Cybersecurity and Infrastructure Security Agency (CISA), where he leads efforts to reduce risks to America's cyber and physical infrastructure. A U.S. Marine Corps veteran, he has held senior cybersecurity roles at the Department of Energy, the White House, and in the private sector. The podcast and artwork embedded on this page are from Frank Cilluffo / McCrary Institute, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Casos de Ciberseguridad IndustrialEpisode: 3/4 Acciones de la estrategia global de ciberseguridad industrialPub date: 2026-10-19Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationEn este episodio se detallan las decisiones estratégicas que marcan la diferencia entre los proyectos de ciberseguridad industrial que obtienen resultados tangibles y los que fracasan. A través de este bloque, definiremos las capacidades imprescindibles que cualquier compañía industrial debe consolidar de cara a los próximos cinco años. Por último, abordaremos fórmulas prácticas de optimización […]The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Industrial Talk Podcast Network (LS 39 · TOP 2% what is this?)Episode: Cesar Tascon with EYPub date: 2026-10-16Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIndustrial Talk/BCC is talking to Cesar Tascon, Cybersecurity Partner with EY about "OT / ICS - cyber physical and critical infrastructure security". Overview The discussion focused on adapting cybersecurity to connected operational technology while protecting safe, continuous operations. OT Risk and Approach OT security prioritizes availability and safety; outages can disrupt essential services or cause physical harm.Security must fit each organization’s assets, structure, and risk tolerance. Prioritize critical scenarios, contain incidents, and scale controls to asset criticality.Treat cybersecurity as an ongoing business process, with asset inventories, consistent practices, and rapid detection and response. People and Emerging Risks Introduce changes incrementally with operators, integrating security into existing workflows rather than imposing disruptive processes.OT security ownership depends on the organization; IT and OT responsibilities should align with its operating model.Regulations can overlap and differ in terminology. AI may strengthen attacks but also help analysts review alerts and respond faster.How should each organization assign OT security responsibilities? The transcript identifies no universal model. Outline OT Cybersecurity Context Connected devices and remote operations create significant business benefits, but expand cyber exposure.OT security differs from IT: availability and safety are central concerns, alongside confidentiality. Risk Assessment and Controls Assess assets, organizational structure, operational constraints, threats, and potential impacts before choosing controls.Prioritize critical facilities and prevent incidents from spreading across sites.Maintain asset and software information, responsibilities, backups, and restoration processes; use standards such as NIST and IEC 62443 as applicable. Operating Model and Change Assign security responsibilities according to the organization’s structure; there is no one-size-fits-all IT/OT ownership model.Involve operators and add security requirements to existing workflows to reduce resistance and preserve operations. Regulation and Shared Threats EU regulation promotes protection but may create complexity through overlapping requirements and inconsistent terminology.Coordinate across vendors, peers, sectors, and governments to address supply-chain and shared infrastructure risks. AI in Cybersecurity AI can make attacks and social engineering more convincing and scalable.Defensive uses include helping analysts process alerts and freeing time for incident response. If interested in being on the Industrial Talk show, simply contact us and let's have a quick conversation. Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2026. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy! CESAR TASCON'S CONTACT INFORMATION: Personal LinkedIn: https://www.linkedin.com/in/c%C3%A9sar-tasc%C3%B3n-1198973/ Company LinkedIn: https://www.linkedin.com/company/ernstandyoung/ Company Website: https://www.ey.com/en_gl PODCAST VIDEO: https://youtu.be/JbG5VG1UbdI THE STRATEGIC REASON "WHY YOU NEED TO PODCAST": OTHER GREAT INDUSTRIAL RESOURCES: Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/ Industrial Academy: https://industrialtalk.com/industrial-academy/ Industrial Dojo: https://industrialtalk.com/industrial_dojo/ Business Beatitude the Book Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES! TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES! Reserve My Copy and My 25% DiscountThe podcast and artwork embedded on this page are from The Industrial Talk Podcast with Scott MacKenzie, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Industrial Talk Podcast Network (LS 39 · TOP 2% what is this?)Episode: Martijn Grooten with CensysPub date: 2026-10-15Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIndustrial Talk/BCC is talking to Martijn Grooten, Principal Security Researcher at Censys about "State of the Internet Report". Overview The discussion examined findings from Censys’ State of the Internet Report and their implications for organizational cybersecurity. Report Findings The report uses Censys’ internet-wide data to describe exposed services, vulnerabilities, threats, and infrastructure; it provides evidence rather than prescriptive guidance.Many vulnerabilities are patched by vendors, but organizations often delay applying updates. HTTP services are frequently found on nonstandard ports. Exposure Risks About 80% of internet-visible hosts running industrial control system services also run a non-ICS service, such as HTTP, SSH, or FTP, expanding potential attack surfaces.Public-facing AI infrastructure grew 63% during the nine-month period covered. Among observed n8n hosts, 76% had at least one vulnerability with a severity score above 9; patches existed, but updates were not applied promptly.Threat actors select hosting providers based partly on permissiveness and resistance to takedowns. Shadow IT and shadow AI can arise when employees use unofficial tools to get work done. Outline Report Purpose Censys shares data from its internet-wide observations to inform cybersecurity professionals and organizations.The report describes exposure and trends rather than providing detailed remediation instructions. Vulnerabilities and Protocols Vulnerabilities are routinely discovered and patched, but organizations may be slow to install updates.Services such as HTTP can run on nonstandard ports, so monitoring only default ports may miss exposed services. Industrial Systems About 80% of observed hosts running an industrial control system service also ran a non-ICS service, including HTTP, SSH, or FTP.These additional services can broaden the attack surface of industrial environments. Threat Infrastructure Threat actors choose hosting providers based on cost, functionality, and permissiveness, rather than choosing infrastructure by country alone.The report observes phishing pages and command-and-control servers, not malware activity on individual computers. AI and Shadow IT Public internet-facing AI infrastructure grew 63% during the report’s covered period.Many observed n8n hosts had severe known vulnerabilities; the interview emphasized delayed patching.Unofficial tools and AI use can create security risks when organizational systems do not meet employees’ work needs. If interested in being on the Industrial Talk show, simply contact us and let's have a quick conversation. Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2026. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy! MARTIJN GROOTEN'S CONTACT INFORMATION: Personal LinkedIn: https://www.linkedin.com/in/martijngrooten/ Company LinkedIn: https://www.linkedin.com/company/censysio/ Company Website: https://censys.com/ State of the Internet Blog: https://censys.com/blog/state-of-the-internet-report-2026/ State of the Internet Report: https://censys.com/2026-state-of-the-internet-report/ PODCAST VIDEO: https://youtu.be/t_k-lsrLBGU THE STRATEGIC REASON "WHY YOU NEED TO PODCAST": OTHER GREAT INDUSTRIAL RESOURCES: Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/ Industrial Academy: https://industrialtalk.com/industrial-academy/ Industrial Dojo: https://industrialtalk.com/industrial_dojo/ Business Beatitude the Book Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES! TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES! Reserve My Copy and My 25% DiscountThe podcast and artwork embedded on this page are from The Industrial Talk Podcast with Scott MacKenzie, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Smart Buildings Academy Podcast | Teaching You Building Automation, Systems Integration, and Information Technology (LS 44 · TOP 1% what is this?)Episode: SBA 566: Integrating Audio Visual Systems into BASPub date: 2026-10-15Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationYour building automation system may be missing valuable information that already exists elsewhere in the building. What happens when your BAS and audio visual (AV) systems operate independently, even though both are designed to support the same spaces? Conference rooms experience unnecessary heating and cooling, occupancy data goes unused, and facility teams are left troubleshooting comfort complaints that could have been avoided. In Episode 566 of the Smart Buildings Academy Podcast, we explore the opportunities and challenges of integrating AV systems with building automation systems. For BAS professionals, understanding how these systems interact can open new possibilities for improving occupant comfort, energy efficiency, and building performance. But successful integration involves more than connecting devices and exchanging data. Topics Covered How AV systems can provide valuable occupancy and scheduling information to your BAS Integration options and communication methods between AV and building automation systems Network architecture, cybersecurity, and coordination challenges across AV and BAS environments Common integration failures that can impact system reliability and occupant experience Why commissioning, documentation, and clearly defined responsibilities matter for long-term integration success Are you overlooking valuable building data because your AV and BAS systems aren't communicating? Listen in to discover what these integration opportunities could mean for your next project.The podcast and artwork embedded on this page are from Smart Buildings Academy, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: BrakeSec Education Podcast (LS 42 · TOP 1.5% what is this?)Episode: Password issues for Danish org, mimosas at midnight, and SocVel quizPub date: 2026-10-15Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationThis episode discusses the breach of Denmark's CPR register with a weak password, CrowdStrike's identification of the ARTEX AI pen test tool, a double-cross in the Gentleman ransomware gang, and the Silent Ransom Group's $200 million earnings from stolen data. Chapters 00:00 Denmark's CPR register breached through an admin password of 123456 10:52 SocVel quiz Q1: China-linked attack on South Africa's air traffic control 15:34 Q2: How a New Jersey engineer who ransomed his employer was caught 22:40 Q3: CrowdStrike finds the ARTEX AI pentest tool used in attacks 25:35 Q4: The Gentleman ransomware: an affiliate double-crosses his gang 29:43 Q5: Silent Ransom Group's $200 million from data theft alone 34:47 Q6: Empire Market co-creator sentenced to 40 years 37:59 Q7: Iranian hackers pose as Dubai airport IT 42:19 Q8: Influencers targeted with fake brand deals 43:40 Q9: Midnight Mimosa, Android malware preinstalled on fake flagship phones 48:14 Q10: FBI on MicroScan and PhishHub, Flax Typhoon's tools 51:37 Quiz score, and Malware & Monsters, an OWASP incident-response game Watch the full video on YouTube: https://www.youtube.com/watch?v=SRTtp5QX9dg. Over an hour more content!The podcast and artwork embedded on this page are from Bryan Brake, Amanda Berlin, and Brian Boettcher, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Industrial Talk Podcast Network (LS 39 · TOP 2% what is this?)Episode: Ulrich Seldeslachts with LSEC, The Digital Security CatalystPub date: 2026-10-14Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIndustrial Talk/BCC is talking to Ulrich Seldeslachts, CEO at LSEC about "What CISOs are losing sleep over in 2026". Overview The discussion examined cybersecurity risks facing organizations and how leaders can protect operations without slowing business activity. Key Challenges Legacy operational technology, IT/OT alignment, and supplier vulnerabilities make it difficult to keep manufacturing and other critical operations secure.The European NIS2 regulation requires covered organizations to demonstrate cybersecurity measures and address supply-chain risk. Scarce cybersecurity talent and expensive, complex tools add to the burden.Ulrichdescribed difficulty securing management support and resources when executives do not prioritize cybersecurity. Approaches and Open Questions AI can help analyze security data and review product documentation, but its output needs guardrails and human review.The Cyber Resilience Act will require products with digital elements sold in Europe to meet cybersecurity and documentation requirements; noncompliant products may be removed from the market. New products must comply from January 2028.How can organizations secure extensive supplier networks and legacy systems while maintaining business continuity and pace of innovation? Outline CISO and Operational Risk Legacy operational technology and IT/OT alignment create ongoing security challenges.Supplier cybersecurity is a business-continuity risk, reinforced by NIS2 requirements.Cybersecurity staffing gaps and poorly fitted or underused tools constrain organizations. AI and Regulation AI supports analysis of large volumes of security data and review of compliance documentation; guardrails and human review remain important.The Cyber Resilience Act applies to products with digital elements entering the European market, with requirements for new products from January 2028. Organizational Readiness Executives must understand cybersecurity risks and provide appropriate resources.Ulrich described practical engagement with hospital teams and boards to build awareness and improve cybersecurity maturity. If interested in being on the Industrial Talk show, simply contact us and let's have a quick conversation. Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2026. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy! ULRICH SELDESLACHTS' CONTACT INFORMATION: Personal LinkedIn: https://www.linkedin.com/in/ulrichseldeslachts/ Company LinkedIn: https://www.linkedin.com/company/lsec---leaders-in-security/ Company Website: https://www.digitalsecuritycatalyst.com/ PODCAST VIDEO: https://youtu.be/eitsjlTMKhk THE STRATEGIC REASON "WHY YOU NEED TO PODCAST": OTHER GREAT INDUSTRIAL RESOURCES: NEOM: https://www.neom.com/en-us Hexagon: https://hexagon.com/ Arduino: https://www.arduino.cc/ Fictiv: https://www.fictiv.com/ Hitachi Vantara: https://www.hitachivantara.com/en-us/home.html Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/ Industrial Academy: https://industrialtalk.com/industrial-academy/ Industrial Dojo: https://industrialtalk.com/industrial_dojo/ We the 15: https://www.wethe15.org/ YOUR INDUSTRIAL DIGITAL TOOLBOX: LifterLMS: Get One Month Free for $1 – https://lifterlms.com/ Active Campaign: Active Campaign Link Social Jukebox: https://www.socialjukebox.com/ Business Beatitude the Book Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES! TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES! Reserve My Copy and My 25% DiscountThe podcast and artwork embedded on this page are from The Industrial Talk Podcast with Scott MacKenzie, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.