Exposing Fragile Foundations

Nick Leiserson, President of the Center for Advancing Cybersecurity at the Institute for Security and Technology (IST), cautions that AI may lower the barrier to entry for lesser skilled attackers who may choose to disrupt or damage operational environments.

Read more

ASL Roma 1’s Healthcare Operational Protection & Excellence (HOPE) cybersecurity and risk governance framework is re-organizing the way it recognizes assets via their relationships. According to CISO Stefano Scaramuzzino and Deloitte’s Fabio Battelli, this is a better reflection of how healthcare organizations view events and mitigate exposures, based upon their dependencies and strategic value.

Cyber Resilience

Operational Resilience

HOPE Has Shed Its Skin: Beyond the Canonical Asset

Stefano Scaramuzzino

Operational resilience must evolve as artificial intelligence becomes a prominent tool in the protection of operational technology (OT) and cyber-physical systems (CPS). Defenders may use AI to correlate operational signals at machine speed to make more context-informed judgments about the intent behind changes to a facility.

Cyber Resilience

Operational Resilience

Operational Technology

Operational Resilience in the Age of AI: Hunting Beyond Malware

Cyber Resilience

Operational Resilience

Risk Management

OpenAI-Hugging Face Incident a Wake-Up Call—Not a Reason to Panic

ADM. Michael S. Rogers, USN (Ret.)

ICS Advisory Project founder Dan Ricci writes that traditional OT cybersecurity hygiene practices such as strong authentication and virtual network segmentation are solid defensive measures against the capabilities of frontier AI models in 2026. Will that hold beyond remains to be seen.

Frontier AI Models Closing OT Exploitation Gap

Trending in Cyber

Explore now

Operational Technology

Nexus Podcast: Tatyana Bolton on IEC 62443 as a Global OT Security Standard

In this episode of the Nexus Podcast, Ben Gardiner, Senior Cybersecurity Research Engineer at the National Motor Freight Traffic Association (NMFTA), shares his experience analyzing security risks in heavy-duty commercial vehicles. His research into the Bendix EC80 braking system controllers confirmed that a safety recall that resolved several software defects also patched a number of critical vulnerabilities that put the risk of a truck’s braking architecture at risk.

Operational Technology

Vulnerability Management

Risk Management

Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers

Check Point Head of Agentic Security Innovation Shahar Tal joins the Nexus Podcast to discuss research he and researcher Yarden Porat presented at Black Hat on vulnerabilities in popular AI agent frameworks, including LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK. The vulnerabilities are an indication that these frameworks require additional scrutiny from a security perspective given the trust AI agents are given to execute tasks.

Cyber Resilience

Risk Management

Operational Resilience

Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks

Tal Kollender, CEO and founder of Remedio, joins the Nexus Podcast to discuss the challenges and security gaps enterprises and critical infrastructure organizations face with insecure configurations and other risky exposures. As AI and advanced attackers accelerate the speed at which exposures are uncovered and exploited, organizations are beginning to consider automated remediation.

Vulnerability Management

Risk Management

Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation

Essential Topics (for Security Leaders)

Discover expert insights on Risk Management, Cyber Resilience, Vulnerability Management, and more. Learn how top security leaders safeguard critical cyber-physical systems.

Explore more

Risk Management

Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure

Cyber Resilience

HOPE Has Shed Its Skin: Beyond the Canonical Asset Operational Resilience in the Age of AI: Hunting Beyond Malware Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure

Healthcare

HOPE Has Shed Its Skin: Beyond the Canonical Asset AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control Nexus Podcast: Krista Arndt on Healthcare Cyber Resilience Nexus Podcast: Tiffany Wilson on the Security Crisis of Consumer Tech in Healthcare

Industrial

Nexus Podcast: Tatyana Bolton on IEC 62443 as a Global OT Security Standard Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers How AI Fits into a Manufacturing CPS Security Strategy Nexus Digest: Dan Ricci on Turning Visibility into Risk Reduction

Vulnerability Management

Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks

Latest Insights in

How Under-Resourced Healthcare Providers Can Up Their Cybersecurity Game

George V. Hulme

Vulnerability Management

Risk Management

Better Medical Device Classification for Enhanced Risk Management

Claroty Chief Strategy Officer Grant Geyer recaps and provides important context to the results of a Claroty survey looking at the impact of business disruptions resulting from cyberattacks on cyber-physical systems. The survey queried 1,100 cybersecurity leaders and practitioners globally on questions about the disruptive impact of attacks on operational technology, connected medical devices and systems, building automation systems, and the internet of things.

Cyber Resilience

Operational Resilience

Operational Technology

Nexus Podcast: Grant Geyer on the Business Impact of Disruptions from Cyberattacks

Cyber Resilience

Risk Management

Deterrence in Cyberspace Proving to be a Difficult Exercise

Operational Technology

Does DevOps have a place in OT/ICS Development?

How Under-Resourced Healthcare Providers Can Up Their Cybersecurity Game

George V. Hulme

Vulnerability Management

Risk Management

Better Medical Device Classification for Enhanced Risk Management

Claroty Chief Strategy Officer Grant Geyer recaps and provides important context to the results of a Claroty survey looking at the impact of business disruptions resulting from cyberattacks on cyber-physical systems. The survey queried 1,100 cybersecurity leaders and practitioners globally on questions about the disruptive impact of attacks on operational technology, connected medical devices and systems, building automation systems, and the internet of things.

Cyber Resilience

Operational Resilience

Operational Technology

Nexus Podcast: Grant Geyer on the Business Impact of Disruptions from Cyberattacks

Cyber Resilience

Risk Management

Deterrence in Cyberspace Proving to be a Difficult Exercise

ADM. Michael S. Rogers, USN (Ret.)

Operational Technology

Does DevOps have a place in OT/ICS Development?

George V. Hulme

Nexus Conference

Mike Rogers and Corey Elinburg on the Value of Business Impact Assessments

Mike Rogers, CISO and Director Information Security and Compliance at Hormel Foods, and Corey Elinburg, SVP and the Chief Information Security Officer for…

Nexus Conference

John Ballentine on OT Threat Response

John Ballentine, OT Cybersecurity Lead for the Port Authority New York/New Jersey, explains his team's efforts to protect the Port Authority's extensive OT…

Nexus Conference

Greg Garcia on Mapping Cybersecurity Risk within Healthcare

Greg Garcia, the Executive Director for Cybersecurity of the Health Sector Coordinating Council, explains how the Change Healthcare ransomware attack disclosed…

Nexus Conference

Operational Technology

Daryl Haegley on Defending OT Against Advanced Cybersecurity Threats

Daryl Haegley, Technical Director, Control Systems Cybersecurity for the U.S. Air Force, brings his extensive federal cybersecurity experience to a discussion…