200 episodes listed below
Industrial cyber risk, heard from the field.
@BEERISAC gathers OT and ICS security conversations from across the field, moving between plant floors, legacy systems, industrial patching, and cyber-physical disruption. Its range is technical, international, and practical, with episodes in English, Arabic, and German.
PRESS PLAY
@BEERISAC is a discovery feed for operational technology and ICS cybersecurity, built from conversations already happening across the industrial security community. It is not confined to one studio voice. Instead, the playlist moves through English, Arabic, and German episodes that share a concern with cyber risk in physical systems. The scope is broad. Airports, power stations, refineries, substations, factories, medical devices, PLCs, and data centers all appear as part of the same operating landscape. One episode frames Triton as a warning about attacks on safety systems. Another turns patching into a practical question about old machines, limited asset visibility, and plant floors where standard IT assumptions break down quickly. The best moments are grounded in operational detail. Speakers talk about manuals, OEM history, packet capture, Windows event logs, virtual patching, and the people closest to the equipment. That field-level texture gives the playlist its value. It treats OT security as a discipline of investigation, not just compliance language. The playlist also follows how industrial cyber questions travel across regions and sectors. Arabic episodes cover digital twins, wearable medical devices, replay attacks, denial-of-service, jamming, and the scarcity of detailed public discussion in the Arab world. German material brings in refinery security, manufacturing systems, Good Manufacturing Practice, and the changing legal and executive context for OT security. Other selections widen the frame to risk quantification, CISO strategy, AI, intelligence gathering, and conflict where digital and physical operations meet. The pacing can shift from formal interview to hands-on technical exchange. That variety is part of the point. @BEERISAC suits listeners who want to sample the working edge of industrial cybersecurity across languages, industries, and professional roles. It is especially strong when the conversation moves from abstract risk to the machine center, the safety controller, the wireless link, or the board question that has to be answered clearly.
Made for: For OT security practitioners, ICS engineers, CISOs, researchers, and policy-minded listeners who want grounded conversations about cyber-physical risk. It also suits technical newcomers willing to learn from real plant-floor and infrastructure examples.
What sets it apart: Its strength is aggregation across languages, sectors, and source podcasts, giving a wider view of OT security than a single-host format can provide. The playlist keeps returning to practical constraints: old equipment, scarce visibility, safety systems, asset owners, and board-level risk questions.
A curated playlist of Operational Technology and ICS Cyber Security related podcast episodes [any language] by ICS Security enthusiasts. Contact Anton Shipulin / @shipulin_anton on Twitter or LinkedIn if something is missing. Subscribe!
Based on 5 episodes we listened to · September 2026
A practical collection about securing industrial systems when legacy equipment, incomplete inventories, and operational constraints complicate every clean cybersecurity answer.
@BEERISAC moves between practitioner interviews and two-host shop talk, keeping its attention on the awkward realities of securing operational systems.
A PLC scan, a medical-device replay attack, and legacy airport controls walk into your threat model.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
An OT patching primer that puts plant-level reality ahead of IT habits.
The piece frames IT patching as a reflex, then grounds that habit in the plant floor, where the logic does not map cleanly onto OT. It is strongest when it contrasts the IT default of constant patching with OT realities: older systems, mixed technologies across plants, and the…
Triton makes legacy safety gear feel like live infrastructure.
Robert Famosi and Dan Gunner keep the focus on the 2017 Triton, or Trisis, attack on a Saudi power station, where malware reached Triconics safety controllers and turned an industrial intrusion into a human-safety problem.
Wearable medical devices meet sniffing, jamming, and replay attacks in a direct OT security conversation.
This episode examines wearable medical devices through the lens of offensive testing, following Sulaiman Al-Hassawi and Dr. Mohamed Hassan as they move from watches to wireless packets and the ways a device can be stressed or cut off. Dr.
A practical look at OT scanning, where timing and visibility matter as much as the scan itself.
Rafael Arkelyan and Dr. Sleiman frame OT scanning as the kind of question that can keep asset owners awake: to scan or not to scan. The discussion follows Arkelyan's research into OT cyber monitoring, with a close look at active scanning, the scan period, and why timing around a…
Craig Duckworth and Dino Bussocchi examine why an organization can call its manufacturing security status “green” while lacking visibility into 70–80% of plant assets.
Caleb says OT plants inherit decades-old PLCs because availability makes patching and replacement risky.
Alan Friedman says an “omnibom” may be the destination, but SBOM, HBOM, CBOM, and AI BOM need focused implementation paths.
On Exploited the Cyber Truth, retired Lieutenant General Bill Bender explains how the US Air Force approached cybersecurity across 700,000 endpoints.
Daniel Ehrenreich says a ransom key cannot guarantee safe restoration of encrypted PLCs, HMIs, or control servers.
Jim Sortino of ISARA says 85% of CISOs have no quantum readiness strategy, 50% of organizations hold self-signed, rogue or invalid certificates, and 30% of infrastructure still uses deprecated protocols.
This episode discusses the differences between IT and OT patching practices, highlighting the gap in vulnerability management between the two environments.
This episode discusses the 2017 Triton cyber attack on a Saudi Arabian power station's safety systems, highlighting the need for securing legacy cyber-physical systems.
Klaus Mochalski interviews Erwin Kruschitz about the evolution of OT security and the importance of proper prioritization for CEOs.
Suleiman Al-Hassawi introduces a podcast episode featuring Arab cybersecurity expert Nibras Al-Urashi, discussing digital twins in ICS/OT environments.
An oxymeter reading was changed from 99% to 94% by sitting "50 meters" or "100 meters" away.
Aaron Crow interviews Nick about OT risk management, focusing on asset visibility, risk quantification, and CISO-level strategy for communicating security posture to boards.
Rafael Arkelyan says some PLCs show a 55% scan-time jump during active scanning, while others show only 5.7%.
Matt Suiche discusses how AI and cyber operations are integral to modern warfare, from intelligence gathering to attacks on data centers, in the context of Iran.
A discussion on whether AI, particularly large language models, benefits attackers or defenders in cybersecurity.
Simon Chassar discusses two major cybersecurity shifts in OT and cyber physical systems that the industry is unprepared for.
Aaron Crow discusses the heightened threat of nation-state cyber attacks on critical infrastructure like energy and water systems, urging OT security professionals to stay vigilant.
Craig Duckworth and Dino Pusolaki discuss the differences between IT and OT Security Operations Centers, using a case study of a global beverage company that discovered its OT-IDS platform only saw a third of its assets due to misdirected alerts.