Systemic Incentives to Mitigate AI Risk

Institute for Security and Technology Chief Strategy Officer Megan Stifel writes about the need for incentives that help organizations eliminate legacy technical debt and mitigate risks introduced by frontier AI models.

Read more

Providence CISO Mike Ratliff writes about his organization's adoption of artificial intelligence. While AI is making rapid inroads in terms of reducing the time around low-impact, high-frequency tasks, there's still caution around deep deployments on systems that affect patient care directly. Providence's test-validate-scale model reflects the realities of healthcare, where changes must be introduced carefully to avoid unintended consequences.

Operational Resilience

Risk Management

AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control

Internet-facing cyber-physical systems (CPS) are a consequential and structural risk in many modern manufacturing environments, one that can introduce disruption without the need for much sophistication on a threat actor’s part.

Cyber Resilience

Operational Resilience

Exposed Manufacturing Assets a Consequential Risk

Swisscom Head of Physical Security, Safety, BCM, Emergency & Crisis Management Thomas Dummermuth writes about the growing mandates to achieve operational resilience—digital and physical—within data centers and critical infrastructure organizations to meet evolving threats.

Operational Resilience

Cyber Resilience

Achieving Cyber and Physical Resilience Across Data Centers, Critical Infrastructure

Thomas Dummermuth

AJ Eserjose, Regional Director for Operational Technology Information Sharing and Analysis Center (OT-ISAC), writes about how the information shared among members of a hub such as OT-ISAC creates a predictive resilience. Attack, threat, and risk signals are aggregated from contributions made by different members into comprehensive intelligence that improves overall cyber and operational resilience.

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

How Collective Intelligence Enhances Predictive Resilience

Trending in Cyber

Explore now

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

Vulnerability Management

Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks

Rapid7 Principal Security Research (IoT) lead Deral Heiland joins the Nexus Podcast to discuss work his team did on how attackers might weaponize cellular-based IoT. Rapid7 conducted three phases of this research, with the most recent digging into how attackers with access to these systems can abuse them to gain unauthorized access, potentially exfiltrate critical data, or pivot into backend network infrastructure.

Internet of Things

Vulnerability Management

Risk Management

Operational Resilience

Nexus Podcast: Deral Heiland on Weaponizing Cellular-Based IoT

Operational Technology

Vulnerability Management

Nexus Podcast: Rob King on OT Asset Exposures, Mitigations

Jon Holzbauer, OT systems manager at Silgan Containers, is featured in Episode 3 of Claroty Nexus Digest. Jon discusses the skills gap between IT security teams and OT asset operators as these two distinct operational disciplines converge. He also describes the challenges and conflicting priorities that emerge in converged environments, and how to navigate those.

Cyber Resilience

Operational Resilience

Operational Technology

Nexus Digest: Jon Holzbauer on CPS Security Skills Gap

Jon Holzbauer, OT systems manager at Silgan Containers, is featured in Episode 3 of Claroty Nexus Digest. Jon discusses the skills gap between IT security…

Essential Topics (for Security Leaders)

Discover expert insights on Risk Management, Cyber Resilience, Vulnerability Management, and more. Learn how top security leaders safeguard critical cyber-physical systems.

Explore more

Risk Management

Securing the Frontier: Moving Past AI Fear and Toward Systemic Incentives AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks

Cyber Resilience

Securing the Frontier: Moving Past AI Fear and Toward Systemic Incentives Nexus Digest: Dan Ricci on Turning Visibility into Risk Reduction Nexus Podcast: Krista Arndt on Healthcare Cyber Resilience Exposed Manufacturing Assets a Consequential Risk

Healthcare

AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control Nexus Podcast: Krista Arndt on Healthcare Cyber Resilience Nexus Podcast: Tiffany Wilson on the Security Crisis of Consumer Tech in Healthcare Nexus Podcast: Joe Slowik on Securing Exposed Internet-Facing Assets

Industrial

Nexus Digest: Dan Ricci on Turning Visibility into Risk Reduction Exposed Manufacturing Assets a Consequential Risk Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks Nexus Digest: Jon Holzbauer on CPS Security Skills Gap

Vulnerability Management

From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks Exploring Some Nuance on Project Glasswing Nexus Podcast: Deral Heiland on Weaponizing Cellular-Based IoT

Latest Insights in

The convergence of IT and OT systems, primarily driven by the deployment of IIoT (industrial Internet of Things), cloud computing, and the need for remote monitoring, has fundamentally altered the OT architecture that the Purdue Model was initially designed to help manage.

Risk Management

Operational Resilience

Operational Technology

Is It Time to Rethink the Purdue Model?

George V. Hulme

OT cybersecurity expert Danielle Jablanski of STV makes her first contribution to Claroty Nexus. She writes about how OT cybersecurity programs should not compromise safety and reliability over the likelihood a vulnerability will be exploited.

Operational Technology

Cyber Resilience

Vulnerability Management

Risk Management

Throw Likelihood to the Wind: OT Cybersecurity is Categorical, Not Mathematical

On this episode of the Nexus Podcast, Vivek Ponneda, SVP Growth & Strategy at Frenos, discusses the maturity and evolution of OT security as a practice, and advises that organizations need to leverage these data-rich environments in order to bring necessary context to threat and risk management efforts

Nexus Podcast: Vivek Ponnada on the Need for Context in OT Security

Cyber Resilience

Leandro Ribeiro, Sobre la Segurança Cibernética no Setor de Saúde

Vulnerability Management

Cyber Resilience

Arthur Paixao Sobre los Principais Riscos Cibernéticos no Setor de Saúde

The convergence of IT and OT systems, primarily driven by the deployment of IIoT (industrial Internet of Things), cloud computing, and the need for remote monitoring, has fundamentally altered the OT architecture that the Purdue Model was initially designed to help manage.

Risk Management

Operational Resilience

Operational Technology

Is It Time to Rethink the Purdue Model?

George V. Hulme

OT cybersecurity expert Danielle Jablanski of STV makes her first contribution to Claroty Nexus. She writes about how OT cybersecurity programs should not compromise safety and reliability over the likelihood a vulnerability will be exploited.

Operational Technology

Cyber Resilience

Vulnerability Management

Risk Management

Throw Likelihood to the Wind: OT Cybersecurity is Categorical, Not Mathematical

Danielle Jablanski

On this episode of the Nexus Podcast, Vivek Ponneda, SVP Growth & Strategy at Frenos, discusses the maturity and evolution of OT security as a practice, and advises that organizations need to leverage these data-rich environments in order to bring necessary context to threat and risk management efforts

Nexus Podcast: Vivek Ponnada on the Need for Context in OT Security

Cyber Resilience

Leandro Ribeiro, Sobre la Segurança Cibernética no Setor de Saúde

Leandro Ribeiro, CISO do Hospital Sírio-Libanês, compartilha sua experiência no Nexus 24 em Boston, discutindo segurança cibernética no setor de saúde e o…

Vulnerability Management

Cyber Resilience

Arthur Paixao Sobre los Principais Riscos Cibernéticos no Setor de Saúde

Entrevista com Arthur Paixão, Head de Cybersecurity do Hospital Albert Einstein, sobre os principais riscos cibernéticos no setor de saúde. Arthur destaca que…

In this episode of the Claroty Nexus Podcast, Austin Allen, Sr. Director of Global Solutions Architecture at Airlock Security, discusses the cybersecurity challenges facing healthcare delivery organizations, and the potential negative impacts of a breach or incident on patient care.

Vulnerability Management

Risk Management

Nexus Podcast: Austin Allen on Healthcare Cybersecurity and Patient Safety

Mike Ratliff, CISO at Providence, one of the country's largest not-for-profit healthcare providers, writes about his organization's attempt to re-think GRC as Governance, Risk, Attack Surface Management, and Compliance (GRAC). Ratliff describes five areas GRAC improves the overall security program, including the quantification and prioritization of risk, the integration of attack surface management, and an architecture that supports secure-by-design principles.

Risk Management

Cyber Resilience

Operational Resilience

Rebuilding Legacy GRC from the Ground Up

Current OT cybersecurity budgeting approaches reflect a misalignment of prioritizing surface-level defenses over architectural shortcomings. Instead, CISOs should demand vendors deliver products that are secure by design, and address systemic failures over a reactive approach to the security of cyber-physical systems.

Operational Technology

Risk Management

The Economics of OT Cybersecurity: Are We Investing in the Wrong Priorities?

ASL Roma 1’s HOPE (Healthcare Operational Protection & Excellence) project stands as a cutting-edge initiative in healthcare cybersecurity, leveraging advanced technologies and innovative methodologies to strengthen organizational resilience. Here we lay the foundation for explaining how our CMDB becomes a key tool for proactively managing vulnerabilities, especially during waves of CVEs (Common Vulnerabilities and Exposures) that can quickly disrupt complex environments.

Operational Resilience

Cyber Resilience

Vulnerability Management

ASL Roma 1’s HOPE: Innovation and Resilience to Vulnerability Waves

Stefano Scaramuzzino