Exposing Fragile Foundations

Nick Leiserson, President of the Center for Advancing Cybersecurity at the Institute for Security and Technology (IST), cautions that AI may lower the barrier to entry for lesser skilled attackers who may choose to disrupt or damage operational environments.

Read more

ASL Roma 1’s Healthcare Operational Protection & Excellence (HOPE) cybersecurity and risk governance framework is re-organizing the way it recognizes assets via their relationships. According to CISO Stefano Scaramuzzino and Deloitte’s Fabio Battelli, this is a better reflection of how healthcare organizations view events and mitigate exposures, based upon their dependencies and strategic value.

Cyber Resilience

Operational Resilience

HOPE Has Shed Its Skin: Beyond the Canonical Asset

Stefano Scaramuzzino

Operational resilience must evolve as artificial intelligence becomes a prominent tool in the protection of operational technology (OT) and cyber-physical systems (CPS). Defenders may use AI to correlate operational signals at machine speed to make more context-informed judgments about the intent behind changes to a facility.

Cyber Resilience

Operational Resilience

Operational Technology

Operational Resilience in the Age of AI: Hunting Beyond Malware

Cyber Resilience

Operational Resilience

Risk Management

OpenAI-Hugging Face Incident a Wake-Up Call—Not a Reason to Panic

ADM. Michael S. Rogers, USN (Ret.)

ICS Advisory Project founder Dan Ricci writes that traditional OT cybersecurity hygiene practices such as strong authentication and virtual network segmentation are solid defensive measures against the capabilities of frontier AI models in 2026. Will that hold beyond remains to be seen.

Frontier AI Models Closing OT Exploitation Gap

Trending in Cyber

Explore now

Operational Technology

Nexus Podcast: Tatyana Bolton on IEC 62443 as a Global OT Security Standard

In this episode of the Nexus Podcast, Ben Gardiner, Senior Cybersecurity Research Engineer at the National Motor Freight Traffic Association (NMFTA), shares his experience analyzing security risks in heavy-duty commercial vehicles. His research into the Bendix EC80 braking system controllers confirmed that a safety recall that resolved several software defects also patched a number of critical vulnerabilities that put the risk of a truck’s braking architecture at risk.

Operational Technology

Vulnerability Management

Risk Management

Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers

Check Point Head of Agentic Security Innovation Shahar Tal joins the Nexus Podcast to discuss research he and researcher Yarden Porat presented at Black Hat on vulnerabilities in popular AI agent frameworks, including LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK. The vulnerabilities are an indication that these frameworks require additional scrutiny from a security perspective given the trust AI agents are given to execute tasks.

Cyber Resilience

Risk Management

Operational Resilience

Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks

Tal Kollender, CEO and founder of Remedio, joins the Nexus Podcast to discuss the challenges and security gaps enterprises and critical infrastructure organizations face with insecure configurations and other risky exposures. As AI and advanced attackers accelerate the speed at which exposures are uncovered and exploited, organizations are beginning to consider automated remediation.

Vulnerability Management

Risk Management

Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation

Essential Topics (for Security Leaders)

Discover expert insights on Risk Management, Cyber Resilience, Vulnerability Management, and more. Learn how top security leaders safeguard critical cyber-physical systems.

Explore more

Risk Management

Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure

Cyber Resilience

HOPE Has Shed Its Skin: Beyond the Canonical Asset Operational Resilience in the Age of AI: Hunting Beyond Malware Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure

Healthcare

HOPE Has Shed Its Skin: Beyond the Canonical Asset AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control Nexus Podcast: Krista Arndt on Healthcare Cyber Resilience Nexus Podcast: Tiffany Wilson on the Security Crisis of Consumer Tech in Healthcare

Industrial

Nexus Podcast: Tatyana Bolton on IEC 62443 as a Global OT Security Standard Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers How AI Fits into a Manufacturing CPS Security Strategy Nexus Digest: Dan Ricci on Turning Visibility into Risk Reduction

Vulnerability Management

Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks

Latest Insights in

Enterprise CISOs must consider disinformation and misinformation campaigns targeting their companies and industries as part of their threat model. Organizations must also develop disinformation response plans, similar to incident response actions.

Operational Resilience

Cyber Resilience

Risk Management

CISOs Urged to Prepare for Evolving Disinformation Tactics

George V. Hulme

Securing connectivity in operational technology (OT) environments is crucial for the safety of critical infrastructure and maintaining the uninterrupted service it provides. Leaving unnecessary open ports, protocols, and services exposed, along with directly connected devices to the internet, such as programmable logic controllers (PLCs) and human machine interfaces (HMIs), greatly increases the risks of cyberattacks.

Operational Technology

Risk Management

Explaining the Importance of Secure Connectivity in OT

In this episode of the Nexus Podcast. Runsafe Security CEO and cofounder Joe Saunders examines the motivations of these adversaries, the targeting of memory-based vulnerabilities in embedded systems prevalent in OT and healthcare, and how initiatives such as secure-by-design/default/demand can make a dent in ensuring the resilience of critical infrastructure.

Cyber Resilience

Nexus Podcast: Joe Saunders on Advanced Attacks Against Critical Infrastructure

Operational Technology

Cyber Resilience

Secure by Design in Manufacturing is Not an Empty Concept

The HHS Office for Civil Rights proposes substantial rule changes to the long-standing Health Insurance Portability and Accountability Act (HIPAA) Security Rule. While details on the proposed rule changes remain unclear, HHS plans to issue a Notice of Proposed Rulemaking (NPRM) by the end of the year. These changes are believed to be the most substantial changes since the HIPAA Security rule went into effect in 2003

Significant Changes to HIPAA Security Rule on the Way

Enterprise CISOs must consider disinformation and misinformation campaigns targeting their companies and industries as part of their threat model. Organizations must also develop disinformation response plans, similar to incident response actions.

Operational Resilience

Cyber Resilience

Risk Management

CISOs Urged to Prepare for Evolving Disinformation Tactics

George V. Hulme

Securing connectivity in operational technology (OT) environments is crucial for the safety of critical infrastructure and maintaining the uninterrupted service it provides. Leaving unnecessary open ports, protocols, and services exposed, along with directly connected devices to the internet, such as programmable logic controllers (PLCs) and human machine interfaces (HMIs), greatly increases the risks of cyberattacks.

Operational Technology

Risk Management

Explaining the Importance of Secure Connectivity in OT

In this episode of the Nexus Podcast. Runsafe Security CEO and cofounder Joe Saunders examines the motivations of these adversaries, the targeting of memory-based vulnerabilities in embedded systems prevalent in OT and healthcare, and how initiatives such as secure-by-design/default/demand can make a dent in ensuring the resilience of critical infrastructure.

Cyber Resilience

Nexus Podcast: Joe Saunders on Advanced Attacks Against Critical Infrastructure

Operational Technology

Cyber Resilience

Secure by Design in Manufacturing is Not an Empty Concept

The HHS Office for Civil Rights proposes substantial rule changes to the long-standing Health Insurance Portability and Accountability Act (HIPAA) Security Rule. While details on the proposed rule changes remain unclear, HHS plans to issue a Notice of Proposed Rulemaking (NPRM) by the end of the year. These changes are believed to be the most substantial changes since the HIPAA Security rule went into effect in 2003

Significant Changes to HIPAA Security Rule on the Way

George V. Hulme

screenshot-2024-11-07-at-4.43.18-pm.png

Nexus Conference

Rodnei Gripp da Petrobras Fortalece a Conexão entre Segurança de Infraestruturas Críticas e Negócio

Saiba como a Claroty colaborou com o time de segurança cibernética da Petrobras, gerando benefícios estratégicos para a equipe responsável pelas plataformas de…

screenshot-2024-11-07-at-4.40.51-pm.png

José Carlos Hererra de Sigma, la Importancia de la Visibilidad y la Simplicidad

José Carlos Herrera, CISO de Sigma Europa, nos habla de la importancia de tener un inventario claro y una herramienta amigable como base para desarrollar una…

Nexus Conference

Felipe Bonomo Destaca os Desafios Relacionados à Proteção de Infraestruturas Críticas

Felipe Bonomo, CISO da Alpargatas, empresa responsável pela icônica marca Havaianas, compartilha os desafios e benefícios de sua parceria com a Claroty na…

Risk Management

Court Ruling on SEC v. SolarWinds Good News for CISOs—For Now

Cristin Flynn Goodwin