@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Smashing Security (LS 55 · TOP 0.5% what is this?)Episode: How hackers turned Russian cars into pumpkinsPub date: 2026-11-12Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationYou're driving your new Chinese SUV when the dashboard goes dark. Ten minutes later, your phone rings. A stranger says they've got the digital key to your car, and would you like it back? Of course you would. That'll be $550.Meanwhile, three men have been charged over a scheme that used deepfakes of company bosses to steal around $130 million. Hear more about what happened, and the simple human trick that can foil the fakes.All this and more in episode 492 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Danny Palmer.EPISODE LINKS:Binance warns of iOS flaw that could leak crypto wallet secrets - Bleeping Computer.Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain - The Record.Hotel giant Wyndham exposed customer data after app security lapse - TechCrunch.Взлом кроссоверов Li Auto в России. Схема, защита, последствия - Autonews.Cyber thieves Remotely block Luxury Chinese cars for Ransom - Известия.Кроссовер за миллионы превратился в тыкву. Хакеры блокируют Li Auto и требуют выкуп - Securitylab.Man accused of disabling 100 cars over Internet - NBC News.Russian dealer threatens to block multimedia in cars imported via gray schemes - Kursiv Media Kazakhstan.Three Foreign Nationals Arrested And Charged With Scheme To Use Super Intelligence To Defraud Companies Of $129 Million - US Department of Justice.Arsène Lupin - Wikipedia.Lupin- Netflix.Lupin Official Trailer - YouTube.Two Point Museum - Steam Store.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)SPONSORS:Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!Hack The Box - Develop, exercise and measure the capabilities of your human operators and AI agents.Dropzone AI - See how AI SOC agents investigate every alert with this self-guided demo.SUPPORT THE SHOW:Tell your friends and colleagues about Smashing Security, and leave us a review on Apple Podcasts or Podchaser.Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!FOLLOW THE SHOW:Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: 'Vinyl Memories' by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Privacy & Opt-Out: https://redcircle.com/privacyThe podcast and artwork embedded on this page are from Graham Cluley, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: (CS)²AI Podcast Show: Control System Cyber SecurityEpisode: From a Commodore 64 to Co-op Cybersecurity with Carter ManucyPub date: 2026-11-11Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationCarter Manucy, Senior Director, Cybersecurity for NRECA, joins Derek Harp to trace a career that started with a Commodore 64 and his dad's ham radio. Carter talks about typing in games from a magazine, building computers from scrounged parts, running a bulletin board, and landing at the Florida Municipal Power Agency, where he became the go-between for an engineering network on Novell NetWare and an accounting network on Unix, replacing SneakerNet with something better. He explains how NERC CIP changed the work, why breaking down silos mattered more than any one tool, and the story of the power plant HMI computer the manufacturer said couldn't be repaired. Carter also shares how his definition of success has changed, why he moved to NRECA, how the cybersecurity maturity model and "cyber champions" help more than 900 cooperative utilities, and what he is watching next, including AI. They close with a few questions from Derek's creative ending.Guest: Carter Manucy, Senior Director, Cybersecurity, NRECA Guest LinkedIn: https://www.linkedin.com/in/cmanucy/ Host: Derek Harp, Founder and Chairman, (CS)²AI Episode: 140Chapters: 00:42 Welcome and introducing Carter Manucy 01:59 From Havre de Grace to Orlando 03:43 Commodore 64s, bulletin boards and Frankenstein computers 06:59 First jobs and learning what he didn't like 08:04 UCF, Fortran and bouncing around 09:34 From odd jobs to the Florida Municipal Power Agency 11:42 Silos, SneakerNet and one network 16:10 From dial-up to firewalls 18:44 NERC CIP arrives 21:07 Distrust between departments and the HMI nobody could fix 24:42 Success, impact and leaving the world a little better 27:12 Helping people, soft skills and unsung heroes 29:13 From FMPA to NRECA 31:43 Co-ops versus municipals 35:03 NRECA's 900 co-ops and the cybersecurity maturity model 38:34 Cyber champions for resource-constrained utilities 40:35 Who does cybersecurity? Job titles and career paths 43:12 What's next: AI and staying one step out 46:12 The creative ending 49:04 Closing and where to find CarterJoin us at Level Zero 2027 in Atlanta, on the Georgia Tech campus, where Carter will be speaking again.Produced by (CS)²AI (Control System Cyber Security Association International).The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity InsiderEpisode: How To Lose Millions Without Getting HackedPub date: 2026-11-11Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationManufacturing cybersecurity mistakes that cost millions without a hacker in sight, and the steps that prevent them, in this rewind episode.We pulled one of our earliest conversations out of the archive, and it hits harder now than when we first recorded it. Dino and Craig share stories from the plant floor about mistakes that quietly cost manufacturers millions:A vending machine with a duplicate IP address that took down a $35 million wheel pressThirty Siemens PLCs that wiped their own IP addresses after an IT technician scanned the wrong network at the wrong timeFederal agents who scanned a beverage plant’s control system while hunting malware on its mail serversA steel mill that had to choose between pulling an unpatched server off the network and shutting the plant downNone of these came from a sophisticated attacker. Competent people doing normal jobs caused them, with no idea how the plant floor would react.Dino explains what actually closes the gap: an accurate asset inventory, a network built to contain mistakes, continuous monitoring, control over remote access, and an incident response plan rehearsed before the bad day arrives. His advice for where to start is to run one tabletop exercise and name one owner for plant floor security at every site.Chapters:(00:00:00) Cold open: a soda machine takes down a $35 million wheel press(00:01:12) The incidents that never make the news(00:02:26) Thirty Siemens PLCs reset their IP addresses to zero(00:05:38) When federal agents scan your control network(00:07:02) WannaCry, SMBv1, and the steel plant standoff(00:11:16) A pen tester can't tell a PLC from a printer(00:18:12) The air gap myth and the contractor laptop(00:21:09) Five ICS controls IT and OT can work on together(00:25:41) Windows 7 on the plant floor and the CISO's purview(00:31:22) Start here: a tabletop exercise and one OT owner per plantLinks And Resources:Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityDino Busalachi on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: OT Security Made SimpleEpisode: Layer 0 Security: What If the PLC and HMI Are Lying? | OT Security Made SimplePub date: 2026-11-10Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationKlaus Mochalski and Joe Weiss (Applied Control Solutions) explore Layer 0 security in ICS. Learn why network monitoring misses unauthenticated sensor data and how real-time physics monitoring restores true visibility.Links:https://www.controlglobal.com/blogs/unfettered/blog/55416557/the-plc-says-the-valve-is-open-the-hmi-agrees-but-what-if-neither-is-telling-the-truth https://ieeexplore.ieee.org/document/9928204The podcast and artwork embedded on this page are from Klaus Mochalski, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Trust Me, It's Air-GappedEpisode: Grocery Fridge Hacks and the Shadow IT GapPub date: 2026-11-09Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationA cyberattack that took down grocery store refrigerators across Europe reveals that risks behind shadow IT, third-party vendor management and remote access.GrayMatter's Scott Christensen and Jeff Dunham look at why connected devices bought outside IT’s view are a growing risk. They cover what a vendor security review should ask before procurement and discuss GrayMatter’s SOC 2 journey.Topics covered:Lessons from the European grocery store refrigerator cyberattackShadow IT and shadow AI in IT and OT environmentsThird-party vendor risk and security questionnairesSOC 2 compliance and proving that security controls workNetwork segmentation for IoT and OT devicesContainment, visibility and recovery as core security practicesWhy IT/OT security works best as a team sportVisit graymattersystems.com.The podcast and artwork embedded on this page are from GrayMatter, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: PrOTect It All (LS 28 · TOP 10% what is this?)Episode: Walk the Floor: Why Your Asset Count Is WrongPub date: 2026-11-09Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationWork with Aaron: https://protectitallpod.com/work/ The book: https://protectitallpod.com/book/ This episode: https://protectitallpod.com/ep131/ The OT Security Starter Kit: https://protectitallpod.com/starter-kit/ Kevin Kumpf started out strapping steel under gantry cranes, found the crane control systems had never been updated, and has worked in OT security ever since, including leading OT security at a large US utility. He and Aaron spend this episode on the things that do not show up in a tool: safety culture, knowing what good looks like, and walking the floor. Why an IT data center would never post a "days since last incident" sign, and why OT treats safety as the job. Two engineers at one plant who count 50 and 200 control cabinets. Ten engines on one ship, one running different. Why plants protect the most expensive asset instead of the most critical one, and the five-cent part nobody budgets for. Then data and AI: a boiler tube failure spreadsheet that decided outage plans without ever being on a critical asset list, why AI without context is just numbers, and why a human who can check the work still matters. Aaron's zip tie that left a core switch failed for months, the only backup server sitting next to a space heater, and how to sell OT security to the business: uptime, reliability and competitive advantage, done securely. Key takeaways Count it yourself. If two people at the same plant give you 50 and 200, you do not have an inventory, and a tool will not settle it. Know what good looks like. A baseline of temperatures, flows, RPMs and who talks to whom is what makes the odd one out visible. Criticality is not price. Ask what stops production, including the small part and the small site on the same network. Walk the floor and ask what the red light means. If nobody knows, find out or remove the light. AI needs context and a human who can check its answer. Lead with uptime and reliability. Security comes along with it. Chapters 0:00 Intro 0:22 Welcome and introduction 1:58 From strapping steel to crane controls 3:16 Hard hats and safety culture in OT 6:08 Days since last incident: IT vs OT 6:58 A sticker for every year without an incident 8:29 No shortcuts to safety 9:54 Teaching IT people the safety mindset 13:11 No-judgment zone: who knows their baseline? 15:39 50 cabinets or 200: asset counts that disagree 17:17 Who controls the plant, and knowing your baseline 21:17 You have to know what good looks like 22:41 Ten engines, one running different 23:49 The most expensive asset is not the most critical 25:03 The boiler tube failure spreadsheet 28:04 Excel, history and data in context 30:57 If the AI says 42 33:42 Data versus information 36:17 The cloud and trust but verify 40:47 Firewalls, passive monitoring, people and process 42:41 Enterprise IT tools in a plant, done the OT way 44:58 One zip tie and a failed core switch 48:03 The backup server next to the space heater 50:48 Protecting the device from the human 51:15 What Kevin is building 53:51 Changing the oil: lessons learned the hard way 56:50 Where to find Kevin 57:38 Selling uptime, not security About the guest Kevin Kumpf has more than 20 years of IT and OT security and governance and compliance experience in energy, communications, the defense industrial base, transportation, manufacturing, healthcare, financial services and other sectors. As Director of OT Security (Iberdrola N.A.) he oversaw the security and regulatory compliance programs for operating companies including NYSEG, RG&E and CMP. Today he is Chief OT Strategist at Kasm Technologies. Kasm Technologies: https://kasm.com/ Kevin on LinkedIn: https://www.linkedin.com/in/kevin-kumpf-b5021412 Learn more about PrOTect IT All: Work with Aaron: https://protectitallpod.com/work/ The book: https://protectitallpod.com/book/ This episode: https://protectitallpod.com/ep131/ The OT Security Starter Kit: https://protectitallpod.com/starter-kit/ Support the show: https://protectitallpod.com/go/support/podcast YouTube: https://www.youtube.com/@PrOTectITAll Email: [email protected] X: https://twitter.com/protectitall Facebook: https://facebook.com/protectitallpodcast To be a guest or suggest a guest or episode, email [email protected]. Please leave us a review on Apple or Spotify: Apple: https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124 Spotify: https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Casos de Ciberseguridad IndustrialEpisode: 2/4 Análisis del riesgo de la IA en la digitalización industrialPub date: 2026-11-09Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationEn este episodio se profundiza en si el modelo tradicional de evaluación de ciberseguridad (amenazas, vulnerabilidades e impacto) resulta suficiente para evaluar sistemas de inteligencia artificial o si requiere incorporar otras dimensiones.The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Three Buddy Problem (LS 40 · TOP 2% what is this?)Episode: GPT-6 Cyber Sets Price of a Linux Exploit; Europe Silent on Fridge HacksPub date: 2026-11-08Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarization(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.) Three Buddy Problem - Episode 119: We discuss the supermarket fridge hacks rolling across Europe, why no government wants to say the word Russia out loud, active measures and cyber-warfare, and the European silence on attribution. Plus, OpenAI's GPT-6 Cyber and the cost of 948 Linux exploits, the Daybreak Blue training flap, a tough-love pep talk for researchers mourning the loss of the old game and the Binance postmortem the FBI pinned on North Korea's TraderTraitor. Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu. Timestamps: 0:00 Introductory banter 3:00 TLP Black and AI agents watching your edge devices 10:21 Supermarket fridge hacks spread across Europe 16:27 How the refrigeration attacks work 18:49 Is this Russia? 21:12 Boundary testing and the Article 5 problem 34:20 Sabotage short of war 40:06 The IOCs nobody is sharing 44:41 Costin's hunting playbook 51:24 Not just a European story 57:25 What do intelligence agencies know? 1:06:22 GPT-6 Cyber and Daybreak Red 1:26:40 948 Linux root exploits for $1.2 million 1:36:48 Daybreak Blue training and the mathematicians 2:09:01 Binance postmortem and TraderTraitorLinks:Transcript TBP Ep54: Train brake hack, GRU sanctions Tom Hegel: Defrost and Disrupt - Europe’s Refrigeration Attacks French blood service hit by Europe-wide fridge hacks Govs Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems Germany, Romania and UK report supermarket cyberattacks OpenAI Ships GPT‑6 Cyber A thousand fewer paths to root | OpenAI OpenAI plans to train models on Daybreak Blue cybersecurity session data Free Chinese AI Models Are Getting Scary Good at Hacking Tal Be'ery: Dense in Depth: Rethinking Security When Vulns Are Everywhere FBI blames N. Korea’s TraderTraitor for Binance theft Binance $6.5B Crypto Theft Post-Mortem FBI: North Korea Responsible for $6 Billion+ Binance Attack SkiSides 2027 CYBERWARCON Agenda RE//verse Conference TLPBLACK The podcast and artwork embedded on this page are from Security Conversations, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: PodomationEpisode: 015 - ISA Automation Summit & Expo: CRA and Regulation, AI, SCADA, and more!Pub date: 2026-11-04Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIn this episode, we're continuing our journey inside the ISA Automation Summit and Expo in Orlando. Our conversations kept returning to three questions. How do we protect critical infrastructure, especially water? How do we keep up with new regulations like Europe's Cyber Resilience Act? And how do we bring AI into the plant safely? ISA talked to experts on each of these topics... and their answers are more hopeful, and more practical, than the headlines suggest.The podcast and artwork embedded on this page are from ISA - International Society of Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity InsiderEpisode: Why Your Disaster Recovery Strategy Is At Risk (And How to Fix It)Pub date: 2026-11-04Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationA successful backup is reassuring, but can your team actually restore a critical system when production is on the line?Dino sits down with Hannah Bergin and Jack Mansfield of Macrium Software to explore what recovery looks like in manufacturing environments, from fragile legacy Windows machines to isolated networks and plant systems with different owners.They discuss why backup and recovery should be considered during system design, how IT and OT teams can share responsibility without losing sight of safety and production, and why documentation, training and recovery drills matter as much as the technology itself.Whether the disruption comes from a cyber incident or a failed drive, the conversation offers practical questions to help plant leaders and security teams prepare before something goes wrong.Chapters:(00:00:00) The risk of untested backups(00:03:00) Backup and recovery for industrial systems(00:06:00) On premises backup for isolated OT networks(00:09:00) Backup retention and recovery objectives(00:12:00) Building a disaster recovery program(00:15:00) Balancing plant control and enterprise oversight(00:19:00) Recovery by design for OEMs and integrators(00:23:00) Funding OT security through capital projects(00:27:00) Testing recovery before a disruptionLinks And Resources:Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityHannah Bergin on LinkedInJack Mansfield on LinkedInDino Busalachi on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.