Correlating Signal with Context

OT-ISAC Regional Director AJ Eserjose writes about the changing defensive landscape around OT, and AI's machine-speed capabilities to contextualize the environment.

Read more

Operational resilience must evolve as artificial intelligence becomes a prominent tool in the protection of operational technology (OT) and cyber-physical systems (CPS). Defenders may use AI to correlate operational signals at machine speed to make more context-informed judgments about the intent behind changes to a facility.

Cyber Resilience

Operational Resilience

Risk Management

OpenAI-Hugging Face Incident a Wake-Up Call—Not a Reason to Panic

ADM. Michael S. Rogers, USN (Ret.)

ICS Advisory Project founder Dan Ricci writes that traditional OT cybersecurity hygiene practices such as strong authentication and virtual network segmentation are solid defensive measures against the capabilities of frontier AI models in 2026. Will that hold beyond remains to be seen.

Frontier AI Models Closing OT Exploitation Gap

Cyber Resilience

Operational Resilience

Risk Management

Securing the Frontier: Moving Past AI Fear and Toward Systemic Incentives

Former Pfizer Global Head of Automation Engineering James LaBonty writes about how to develop an AI-powered cybersecurity strategy to protect cyber-physical systems (CPS) in manufacturing environments. An AI-powered CPS security strategy in manufacturing should establish operational resilience as its prime mission statement. That means ensuring that uptime of manufacturing assets is paramount. It also means strategizing about how to handle the growing influx of vulnerability disclosures driven by frontier AI models

Operational Resilience

Cyber Resilience

How AI Fits into a Manufacturing CPS Security Strategy

Trending in Cyber

Explore now

Check Point Head of Agentic Security Innovation Shahar Tal joins the Nexus Podcast to discuss research he and researcher Yarden Porat presented at Black Hat on vulnerabilities in popular AI agent frameworks, including LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK. The vulnerabilities are an indication that these frameworks require additional scrutiny from a security perspective given the trust AI agents are given to execute tasks.

Cyber Resilience

Risk Management

Operational Resilience

Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks

Ellen Boehm, Senior Vice President Strategy and AI Innovation at Keyfactor, joins the Nexus Podcast to discuss post-quantum cryptography (PQC) readiness in critical infrastructure organizations. She also delves into how critical infrastructure organizations overseeing fleets of cyber-physical systems (CPS) assets transition those environments and avoid disruptions.

Cyber Resilience

Operational Resilience

Risk Management

Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure

Operational Resilience

Risk Management

Nexus Podcast: John Laliberte on AI and Non-Human Identity Controls

Cyber Resilience

Risk Management

Operational Resilience

Nexus Podcast: Jessica Ji on Frontier AI Models and Cybersecurity

Essential Topics (for Security Leaders)

Discover expert insights on Risk Management, Cyber Resilience, Vulnerability Management, and more. Learn how top security leaders safeguard critical cyber-physical systems.

Explore more

Risk Management

Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure Nexus Podcast: John Laliberte on AI and Non-Human Identity Controls OpenAI-Hugging Face Incident a Wake-Up Call—Not a Reason to Panic

Cyber Resilience

Operational Resilience in the Age of AI: Hunting Beyond Malware Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure OpenAI-Hugging Face Incident a Wake-Up Call—Not a Reason to Panic

Healthcare

AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control Nexus Podcast: Krista Arndt on Healthcare Cyber Resilience Nexus Podcast: Tiffany Wilson on the Security Crisis of Consumer Tech in Healthcare Nexus Podcast: Joe Slowik on Securing Exposed Internet-Facing Assets

Industrial

How AI Fits into a Manufacturing CPS Security Strategy Nexus Digest: Dan Ricci on Turning Visibility into Risk Reduction Exposed Manufacturing Assets a Consequential Risk Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks

Vulnerability Management

From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks Exploring Some Nuance on Project Glasswing Nexus Podcast: Deral Heiland on Weaponizing Cellular-Based IoT

Latest Insights in

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

Nexus Podcast: Andrew Ohrt on Starting Cyber-Informed Engineering Projects

Cyber Resilience

Operational Technology

Risk Management

Vulnerability Management

Cloud's Double-Edged Sword: Transforming OT Exposure Management

Cyber Resilience

Operational Resilience

Nexus Podcast: Megan Stifel on the Impact of the Ransomware Task Force

Vulnerability Management

Risk Management

Cyber Resilience

How Hackers Exploit Healthcare Technology to Turn Life-Saving Systems into Weapons

Joe Slowik, threat intelligence and detections lead at Gigamon, joins the Nexus podcast to discuss a Virus Bulletin paper and presentation he gave recently on XENOTIME.

Risk Management

Cyber Resilience

Operational Resilience

Nexus Podcast: Joe Slowik on Identifying Truly ‘Critical’ Infrastructure

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

Nexus Podcast: Andrew Ohrt on Starting Cyber-Informed Engineering Projects

Cyber Resilience

Operational Technology

Risk Management

Vulnerability Management

Cloud's Double-Edged Sword: Transforming OT Exposure Management

George V. Hulme

Cyber Resilience

Operational Resilience

Nexus Podcast: Megan Stifel on the Impact of the Ransomware Task Force

Vulnerability Management

Risk Management

Cyber Resilience

How Hackers Exploit Healthcare Technology to Turn Life-Saving Systems into Weapons

Francesco Terlizzi

Joe Slowik, threat intelligence and detections lead at Gigamon, joins the Nexus podcast to discuss a Virus Bulletin paper and presentation he gave recently on XENOTIME.

Risk Management

Cyber Resilience

Operational Resilience

Nexus Podcast: Joe Slowik on Identifying Truly ‘Critical’ Infrastructure

The NSA's Cybersecurity Technical Report on securing smart OT controllers champions secure-by-design and cyber-informed engineering, stating they prioritize “engineering controls to mitigate the worst consequences of cyberattacks”-like physical damage or loss of life. CIE moves cybersecurity from a design afterthought to a core engineering discipline. Traditional OT security often relied on air-gapping or retrofitting defenses, but CIE mandates designing systems that inherently resist attacks.

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

How Cyber-Informed Engineering Shapes NSA’s Blueprint for OT Cyber Resilience

George V. Hulme

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

Nexus Podcast: Danielle Jablanski on Critical Infrastructure Protection

Cyber Resilience

Operational Resilience

Vulnerability Management

Risk Management

Nexus Podcast: Cassie Crossley on Hardware Security, HBOMs

Cyber Resilience

Operational Technology

Operational Resilience

Risk Management

An Operational Checklist for Securing the IT/OT Ecosystem