The OT and IoT Security Podcast

The OT and IoT Security Podcast is the podcast feed for Nozomi Networks webinars, livestreams and panels, and it makes no secret of where it comes from. Several episodes open with good morning, good afternoon and good evening welcomes to people dialing in from wherever they are, speakers ask for the next slide, and one moderator reads audience questions aloud. The subject is the security of operational technology and connected devices: factories, critical assets and the industrial networks behind them, where an incident can mean downtime or danger to people. The show says so directly. One Security Sandbox conversation traces a threat all the way to breakdowns, more downtime and potential risks to human life and safety. The Security Sandbox is a recurring series within the feed, hosted by Sandeep and Viv. Its name borrows the childhood sandbox as a place to test things before taking them anywhere else. Its session on AI makes a pointed case: techniques like data poisoning are old, but attackers now use AI to automate and scale them, without the legal and privacy reviews that slow defenders down. A session with guest Phil Traynor turns to product instead, describing tools meant to surface the one fix that would make a network safer today, along with a new dashboards concept in Vantage. Outside the Sandbox, the formats vary more. Bruce Snell, who cites about 25 years in the cybersecurity industry, talks risk management with Shan Zhou, and the conversation lands on asset inventory as step zero rather than step one. It also calls Industry 4.0 a catch-22, since the integration that improves supply chains also lets threats in. A smart-factory panel moderated by Patrick Miller includes voices from Nozomi, IBM Global Security Services and Siemens, and one panelist explains that ransomware gangs weigh company size and revenue, not industry, when access is sold on the dark web. In 'A Day in the Life of an OT Responder', Frank Santucci of Paraflare and Marty Rickard of Nozomi Networks field audience questions, and one of them warns about high-severity alerts that nobody goes back to clear, until responders find themselves back three or four months later. Researchers Alessandro Di Pinto and Ivan Speciali present findings from a threat intelligence report on the second half of 2020. There is some levity too. A guest opens with the old long time listener, first time caller line, and one moderator promises Nozomi hoodies to attendees. Product talk is part of the deal. A listener who can filter it out gets practitioners explaining how attacks start with broad scanning and turn targeted once something valuable appears. The risk management conversation, which lays out its fundamentals plainly, is a sensible place to start.