@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Hack the Plant (LS 35 · TOP 3% what is this?)
Episode: Securing What Feeds Us
Pub date: 2026-10-14

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

In this episode, Bryson Bort talks with Kristin King, technologist, environmental manager, and host of the Bites and Bytes podcast, on why food and agriculture remain a dangerously overlooked piece of critical infrastructure. Kristin explains how human emotional responses drive social engineering, how rapidly expanding OT and connected tech in farms, factories, and fisheries create new attack surfaces, and what the JBS ransomware attack reveals about cascading risks from animal welfare to empty grocery shelves. She also offers a preview into her forthcoming book Securing What Feeds Us, outlining a path from today’s cyber-physical vulnerabilities toward better policy, shared language, and a new generation of “food cybersecurity” practitioners.
“We are creating the potential for a foodborne illness to happen from a cyber attack that may not be noted,” Kristin said.
Join us for this and more on this episode of Hack the Plan[e]t.
The views and opinions expressed in this podcast represent those of the speaker(s) and do not necessarily represent the views and opinions of their employers.
Hack the Plant is brought to you by ICS Village and the Institute for Security and Technology.


The podcast and artwork embedded on this page are from Bryson Bort, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Risky Business (LS 56 · TOP 0.5% what is this?)
Episode: Risky Business #855 -- ShinyHunters done sowing, enters reaping phase
Pub date: 2026-10-14

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

On this week’s show Patrick Gray and James Wilson are joined by special guest co-host Brad Arkin to talk through the week’s cybersecurity news, including:

Sacré bleu! Hackers turn up the heat at French supermarket freezers

ShinyHunters enters “find out” stage

Netscaler, Zimbra, SharePoint, Atlassian…. So many bugs exploited in the wild

More models “behave badly” (by… doing exactly what we’re telling them to do)

Ukraine hit another Yandex data centre in Russia and all those Texan patriots with numbers in their usernames have gone super quiet

Much, much more…

This week’s show is brought to you by Corelight. Co-founder and Chief Strategy Officer Gregory Bell joins James Wilson to chat about the company’s new white paper that looks into whether a sophisticated model or nicely structured data is more important with automated SOC work.

This episode is also available on YouTube



Show notes



Cyberattack disrupts refrigeration at hundreds of French supermarkets | therecord.media


Dangerous flaws in refrigeration equipment were disclosed months before retail attacks | Cybersecurity Dive


Retail giant Ahold Delhaize takes systems offline after cyberattack | BleepingComputer


Hacked FBI data has sensitive information about employees' intelligence roles | reuters.com


Hackers stole millions of US military personnel records during months-long data breach | TechCrunch Security


ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks | BleepingComputer


Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation | krebsonsecurity.com


Key ShinyHunters hacker detained in Jordan, is cooperating, sources say | reut.rs


FBI Arrests Founder of Ransomware Negotiation Firm | krebsonsecurity.com


Ransomware recovery CEO charged over secret ransom payments | BleepingComputer


Citrix urges immediate upgrades of NetScaler amid widespread exploitation attempts | Cybersecurity Dive


Citrix confirms two NetScaler RCE zero-days exploited in attacks | BleepingComputer


Kiteworks urges customers to stop using platform after warning from federal intelligence agencies | therecord.media


Attackers have been exploiting critical Zimbra flaw to steal emails | arstechnica.com


FBI, Secret Service add to warnings of FortiBleed credential stealing campaign | therecord.media


Check Point warns of hackers exploiting Security Gateway VPN RCE flaw | BleepingComputer


Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks | securityweek.com


Hackers exploit critical Atlassian flaw after public PoC release | BleepingComputer


CISA: Ransomware gangs now exploiting critical TeamCity flaw | BleepingComputer


Anthropic Agents Tried to Fill Out Visa Forms on State Dept. Website | nytimes.com


An Anthropic AI model sent a false homicide tip to Philadelphia police | TechCrunch


OpenAI bots meddled with US government agencies, including SEC and Census | bbc.com


OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government | wired.com


Anthropic Says Its A.I. Agents Attempted to Access a Range of Government Sites | nytimes.com


OpenAI agent breached Australian government health website, Albanese says | therecord.media


Doubts grow over claims OpenAI agent hacked Australian Medicare portal | therecord.media


OpenAI agents tried to hack Wikipedia tools and flooded it with traffic | arstechnica.com


OpenAI Ignored Employees' Warnings About Safely Testing A.I. Models | nytimes.com


AI models may be capable of self-replicating without access to a datacenter |


South Korean officials believe AI agents were used to hack several banks | therecord.media


JadePuffer agentic AI attacks target Azure, destroy cloud resources | BleepingComputer


GLM-5.3 and the Spread of Advanced Cyber Capabilities | anthropic.com


New bill would create federal investigative body for AI-driven hacks | cyberscoop.com


Court rules Trump can blacklist Anthropic for refusing to enable Claude features | Ars Technica


Apple changes full-disk access permissions to curb abuse from AI agents | arstechnica.com


Google Gemini could soon get full access to your Mac’s files, apps and the web | BleepingComputer


Bitget hacked via zero-day in third-party security products | BleepingComputer


Ledger confirms spy chip implant behind wallet crypto thefts | BleepingComputer


Who Is Planting Backdoors in Ledger Crypto Wallets? | zetter-zeroday.com


Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware | zscaler.com


New Spectre v2 attack variant leaks Linux root password hash in minutes | BleepingComputer


Data breach at Denmark’s national population register exposes 8.8 million people | therecord.media


Shares in British clothing company ASOS dive after hackers apparently send push notification | therecord.media


Google halts open-source bug bounty program amid AI spam surge | BleepingComputer


International coalition seizes tools used by cyber firm behind Flax Typhoon | therecord.media


Hackers hijack Google domains after breaching ccTLD registries | BleepingComputer


GoBalance Flaw Lets Attackers Hijack.onion Addresses by Recovering Tor-Format Keys | The Hacker News


Ukraine strikes third Yandex data center, disrupting digital services across Russia | therecord.media


Provably Better Data | Corelight




The podcast and artwork embedded on this page are from Risky Business Media, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: Why Your Security Team Isn't Ready for a Real Cyberattack
Pub date: 2026-10-14

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Most manufacturers have an incident response plan. Few have tested it at 2 AM on a Sunday, with a skeleton crew and the people who know the equipment best nowhere to be found.
Fresh from the ICS Cybersecurity Conference in Nashville, Craig Duckworth and Dino Busalachi compare notes on what keeps industrial organizations from being ready for a real attack. The risk today goes beyond ransomware. It's attackers who blend into normal plant activity, process data that quietly exposes your intellectual property, security tools that never get used after the sale, and teams that still work in separate camps.
Craig and Dino talk through why IT, plant floor teams, system integrators, and equipment builders need to operate as one technology team, why new projects are the best place to build security in, and why passing an audit is not the same as being secure. They also look at how AI is speeding up both attacks and defenses, leaving manufacturers less time to react.
If you lead a plant, an engineering team, or a security program, this conversation will help you answer one question: if your plant was hit tonight, who makes the first call and who's on the other end receiving the call?
Listen now and share it with the people who own your plant floor.
Chapters:
00:00:00 Incident response plans must work outside office hours
00:01:00 Inside the OTICS Cyber Security Conference
00:02:00 Threat actors living in the normal
00:04:00 Why process data can expose intellectual property
00:07:00 The gap between tools, skills, and operating practice
00:08:00 Moving beyond the IT and OT divide
00:11:00 Why technology adoption matters after the sale
00:12:00 Building security into projects from the start
00:15:00 Defense in depth and protecting critical assets
00:17:00 Practicing incident response when it counts
00:19:00 Bringing integrators and asset owners to the table
00:20:00 Authority, accountability, and the CISO challenge
00:23:00 CMMC, continuous monitoring, and process data
00:24:00 Artificial intelligence changes the threat timeline
00:27:00 Asset discovery and security baselines
00:29:00 Checking a box versus improving the environment
00:32:00 Staying ahead through collaboration and readiness

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: (CS)²AI Podcast Show: Control System Cyber Security
Episode: 136: Inside the Tabletop: What an Airport OT Incident Taught Us About Command, Cost, and Chaos
Pub date: 2026-10-13

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Inside the Tabletop: What an Airport OT Incident Taught Us About Command, Cost, and Chaos
The team behind and inside Level Zero 2026's tabletop exercise breaks down what happened when an airport OT incident played out in real time. Derrik Oates and panelists from UPS, the Department of War, and the finance table walk through the ICS4ICS incident command framework, what it's like to be a first-timer when the pressure hits, why "keep your receipts" is real advice, and how to make sure exercise lessons actually change an organization. They also explain why the 2027 exercise becomes a dedicated full day.
Guests: Christian Harter (UPS); Donovan Tindill; Brad Willet (UPS); Daryl Haegley (United States Department of the Air Force) Host / moderator: Derrik Oates (UTSI)
Chapters: 00:00 Panel introductions 04:50 Why run tabletop exercises at all 08:48 The finance table: 'keep your receipts' 13:02 ICS4ICS sections and logistics 14:43 Decisions under fire 18:59 One voice: incident communications 20:46 Using the ICS4ICS framework anywhere 23:04 First-timer experience 27:45 Understand the problem before you fix it 30:30 Lessons learned and changes for 2027 35:20 Making lessons stick: ownership and after-action 40:56 Why practice matters: downtime and safety
Recorded at the CS²AI Online Symposium, "Level Zero: Visions & Reflections."
Join us at Level Zero 2027, April 23–30 at Georgia Tech in Atlanta: pre-conference training, the Conflag Zero™ tabletop exercise, and three days of practitioner-led sessions built so you can put what you learn to work the Monday you get back.
Questions: info@levelzeroconference.com
Sponsorship: sponsor@levelzeroconference.com
Produced by CS²AI (Control System Cyber Security Association International).

The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: OT Security Made Simple
Episode: Layer 0 AI in der OT: Wie KI-Sensoren die Entscheidungsgrundlage verändern | OT Security Made Sample
Pub date: 2026-10-13

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Klaus Mochalski und Yosi Shneck (YSICONS) sprechen über KI in OT-Sensoren. Erfahren Sie, wie „Layer 0 AI“ vertrauenswürdige Messdaten verändert und warum OT-Security künftig nicht nur Systeme, sondern die Wahrheit schützen muss.
Mehr zum Thema OT Security Made simple findet Ihr auf rhebo.com oder schreibt uns mit Euren Ideen, Fragen oder Gastvorschlägen an podcast@rhebo.com.  

The podcast and artwork embedded on this page are from Klaus Mochalski, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.