Exposing Fragile Foundations

Nick Leiserson, President of the Center for Advancing Cybersecurity at the Institute for Security and Technology (IST), cautions that AI may lower the barrier to entry for lesser skilled attackers who may choose to disrupt or damage operational environments.

Read more

ASL Roma 1’s Healthcare Operational Protection & Excellence (HOPE) cybersecurity and risk governance framework is re-organizing the way it recognizes assets via their relationships. According to CISO Stefano Scaramuzzino and Deloitte’s Fabio Battelli, this is a better reflection of how healthcare organizations view events and mitigate exposures, based upon their dependencies and strategic value.

Cyber Resilience

Operational Resilience

HOPE Has Shed Its Skin: Beyond the Canonical Asset

Stefano Scaramuzzino

Operational resilience must evolve as artificial intelligence becomes a prominent tool in the protection of operational technology (OT) and cyber-physical systems (CPS). Defenders may use AI to correlate operational signals at machine speed to make more context-informed judgments about the intent behind changes to a facility.

Cyber Resilience

Operational Resilience

Operational Technology

Operational Resilience in the Age of AI: Hunting Beyond Malware

Cyber Resilience

Operational Resilience

Risk Management

OpenAI-Hugging Face Incident a Wake-Up Call—Not a Reason to Panic

ADM. Michael S. Rogers, USN (Ret.)

ICS Advisory Project founder Dan Ricci writes that traditional OT cybersecurity hygiene practices such as strong authentication and virtual network segmentation are solid defensive measures against the capabilities of frontier AI models in 2026. Will that hold beyond remains to be seen.

Frontier AI Models Closing OT Exploitation Gap

Trending in Cyber

Explore now

Operational Technology

Nexus Podcast: Tatyana Bolton on IEC 62443 as a Global OT Security Standard

In this episode of the Nexus Podcast, Ben Gardiner, Senior Cybersecurity Research Engineer at the National Motor Freight Traffic Association (NMFTA), shares his experience analyzing security risks in heavy-duty commercial vehicles. His research into the Bendix EC80 braking system controllers confirmed that a safety recall that resolved several software defects also patched a number of critical vulnerabilities that put the risk of a truck’s braking architecture at risk.

Operational Technology

Vulnerability Management

Risk Management

Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers

Check Point Head of Agentic Security Innovation Shahar Tal joins the Nexus Podcast to discuss research he and researcher Yarden Porat presented at Black Hat on vulnerabilities in popular AI agent frameworks, including LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK. The vulnerabilities are an indication that these frameworks require additional scrutiny from a security perspective given the trust AI agents are given to execute tasks.

Cyber Resilience

Risk Management

Operational Resilience

Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks

Tal Kollender, CEO and founder of Remedio, joins the Nexus Podcast to discuss the challenges and security gaps enterprises and critical infrastructure organizations face with insecure configurations and other risky exposures. As AI and advanced attackers accelerate the speed at which exposures are uncovered and exploited, organizations are beginning to consider automated remediation.

Vulnerability Management

Risk Management

Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation

Essential Topics (for Security Leaders)

Discover expert insights on Risk Management, Cyber Resilience, Vulnerability Management, and more. Learn how top security leaders safeguard critical cyber-physical systems.

Explore more

Risk Management

Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure

Cyber Resilience

HOPE Has Shed Its Skin: Beyond the Canonical Asset Operational Resilience in the Age of AI: Hunting Beyond Malware Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure

Healthcare

HOPE Has Shed Its Skin: Beyond the Canonical Asset AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control Nexus Podcast: Krista Arndt on Healthcare Cyber Resilience Nexus Podcast: Tiffany Wilson on the Security Crisis of Consumer Tech in Healthcare

Industrial

Nexus Podcast: Tatyana Bolton on IEC 62443 as a Global OT Security Standard Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers How AI Fits into a Manufacturing CPS Security Strategy Nexus Digest: Dan Ricci on Turning Visibility into Risk Reduction

Vulnerability Management

Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks

Latest Insights in

Nexus Conference

Operational Technology

Ashish Agarwal on OT Visibility as a Cybersecurity Enabler

Nexus Conference

Andrew Schiefelbein on Exposure Management for CPS Environments

Nexus Conference

Operational Technology

Charles Carmakal on Disruptive APT Attacks

Nexus Conference

Jim Miller on Establishing OT Cybersecurity Baselines for Factory Environments

nexus_adm.-mike-rogers.png

Nexus Conference

Adm. Michael S. Rogers on Protecting Critical Infrastructure

Nexus Conference

Operational Technology

Ashish Agarwal on OT Visibility as a Cybersecurity Enabler

Ashish Agarwal, Director Operational Technology at Agco, discusses the foundational need for complete visibility and asset inventory and how it enables the…

Nexus Conference

Andrew Schiefelbein on Exposure Management for CPS Environments

Andrew Schiefelbein, Director of Cyber and Risk at PwC, breaks down exposure management within cyber-physical systems (CPS) environments. Schiefelbein explains…

Nexus Conference

Operational Technology

Charles Carmakal on Disruptive APT Attacks

Mandiant CTO Charles Carmakal explains strategic shifts in the operations of advanced persistent threat (APT) groups in their targeting of operational…

Nexus Conference

Jim Miller on Establishing OT Cybersecurity Baselines for Factory Environments

Jim Miller, Director of OT Cybersecurity for Magna, explains how distributed OT factory environments manage cybersecurity from cultural issues, to the need for…

nexus_adm.-mike-rogers.png

Nexus Conference

Adm. Michael S. Rogers on Protecting Critical Infrastructure

Former National Security Agency Director Adm. Michael S. Rogers (Ret. USN) explains how nation-state threat actors have evolved beyond reconnaissance and…

Nexus Conference

Anahi Santiago on Cybersecurity for Hospital Care at Home

ChristianaCare CISO Anahi Santiago explains her team's role in protecting her organization's Hospital Care at Home program. Patients in this program are not…

Nexus Conference

Dr. Bilyana Lilly on Ukraine's Cybersecurity Resilience

Cybersecurity advisor and author Dr. Bilyana Lilly, an expert on Russian strategy, in particular its use of misinformation and disinformation, discusses how…

Nexus Conference

Kemba Walden on the Chevron Doctrine Reversal

Kemba Walden, President of the Paladin Global Institute and former acting United States National Cyber Director, discusses the impact on cybersecurity of the…

Cyber Resilience

Risk Management

US Government Expands Tech Restrictions to Safeguard Critical Infrastructure

George V. Hulme