Systemic Incentives to Mitigate AI Risk

Institute for Security and Technology Chief Strategy Officer Megan Stifel writes about the need for incentives that help organizations eliminate legacy technical debt and mitigate risks introduced by frontier AI models.

Read more

Providence CISO Mike Ratliff writes about his organization's adoption of artificial intelligence. While AI is making rapid inroads in terms of reducing the time around low-impact, high-frequency tasks, there's still caution around deep deployments on systems that affect patient care directly. Providence's test-validate-scale model reflects the realities of healthcare, where changes must be introduced carefully to avoid unintended consequences.

Operational Resilience

Risk Management

AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control

Internet-facing cyber-physical systems (CPS) are a consequential and structural risk in many modern manufacturing environments, one that can introduce disruption without the need for much sophistication on a threat actor’s part.

Cyber Resilience

Operational Resilience

Exposed Manufacturing Assets a Consequential Risk

Swisscom Head of Physical Security, Safety, BCM, Emergency & Crisis Management Thomas Dummermuth writes about the growing mandates to achieve operational resilience—digital and physical—within data centers and critical infrastructure organizations to meet evolving threats.

Operational Resilience

Cyber Resilience

Achieving Cyber and Physical Resilience Across Data Centers, Critical Infrastructure

Thomas Dummermuth

AJ Eserjose, Regional Director for Operational Technology Information Sharing and Analysis Center (OT-ISAC), writes about how the information shared among members of a hub such as OT-ISAC creates a predictive resilience. Attack, threat, and risk signals are aggregated from contributions made by different members into comprehensive intelligence that improves overall cyber and operational resilience.

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

How Collective Intelligence Enhances Predictive Resilience

Trending in Cyber

Explore now

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

Vulnerability Management

Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks

Rapid7 Principal Security Research (IoT) lead Deral Heiland joins the Nexus Podcast to discuss work his team did on how attackers might weaponize cellular-based IoT. Rapid7 conducted three phases of this research, with the most recent digging into how attackers with access to these systems can abuse them to gain unauthorized access, potentially exfiltrate critical data, or pivot into backend network infrastructure.

Internet of Things

Vulnerability Management

Risk Management

Operational Resilience

Nexus Podcast: Deral Heiland on Weaponizing Cellular-Based IoT

Operational Technology

Vulnerability Management

Nexus Podcast: Rob King on OT Asset Exposures, Mitigations

Jon Holzbauer, OT systems manager at Silgan Containers, is featured in Episode 3 of Claroty Nexus Digest. Jon discusses the skills gap between IT security teams and OT asset operators as these two distinct operational disciplines converge. He also describes the challenges and conflicting priorities that emerge in converged environments, and how to navigate those.

Cyber Resilience

Operational Resilience

Operational Technology

Nexus Digest: Jon Holzbauer on CPS Security Skills Gap

Jon Holzbauer, OT systems manager at Silgan Containers, is featured in Episode 3 of Claroty Nexus Digest. Jon discusses the skills gap between IT security…

Essential Topics (for Security Leaders)

Discover expert insights on Risk Management, Cyber Resilience, Vulnerability Management, and more. Learn how top security leaders safeguard critical cyber-physical systems.

Explore more

Risk Management

Securing the Frontier: Moving Past AI Fear and Toward Systemic Incentives AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks

Cyber Resilience

Securing the Frontier: Moving Past AI Fear and Toward Systemic Incentives Nexus Digest: Dan Ricci on Turning Visibility into Risk Reduction Nexus Podcast: Krista Arndt on Healthcare Cyber Resilience Exposed Manufacturing Assets a Consequential Risk

Healthcare

AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control Nexus Podcast: Krista Arndt on Healthcare Cyber Resilience Nexus Podcast: Tiffany Wilson on the Security Crisis of Consumer Tech in Healthcare Nexus Podcast: Joe Slowik on Securing Exposed Internet-Facing Assets

Industrial

Nexus Digest: Dan Ricci on Turning Visibility into Risk Reduction Exposed Manufacturing Assets a Consequential Risk Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks Nexus Digest: Jon Holzbauer on CPS Security Skills Gap

Vulnerability Management

From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks Exploring Some Nuance on Project Glasswing Nexus Podcast: Deral Heiland on Weaponizing Cellular-Based IoT

Latest Insights in

Rockwell Automation Chief Product Safety and Security Officer Tony Baker joins this episode of the Claroty Nexus podcast to discuss OT and ICS product cybersecurity and how industrial automation and control system protections must adapt to changes such as the cloud and greater connectivity.

Nexus Podcast: Tony Baker on OT Cybersecurity Challenges, CIP Security

Michael Arceneaux, managing director of the Water Information Sharing and Analysis Center (WaterISAC), joined Claroty's Nexus podcast to discuss the the Water Sector Coordinating Council's survey of the water and wastewater sector about its cybersecurity practices, investments, and areas of need.

Nexus Podcast: Inside the Water Sector Cybersecurity Survey

In this episode of Claroty's Nexus podcast, retired Adm. Mike Rogers, former director of the National Security Agency and commander of U.S. Cyber Command joins to talk about ransomware and its impact on ICS and OT, defensive strategies, and whether to pay ransom demands in order to promptly resume production.

Nexus Podcast: Adm. Mike Rogers on Ransomware and OT

Nathan Brubaker, senior manager of Mandiant Threat Intelligence, joins the Nexus podcast to discuss a Mandiant report that examines how cyberattackers are using low-tech means of accessing industrial networks and, on occasion, interacting with processes without much understanding of possible physical outcomes or impacts to public safety.

Nexus Podcast: Mandiant on Low Sophistication OT Attacks

In this episode of Claroty's Nexus podcast, Manny Cancel, CEO of the Electricity Information Sharing and Analysis Center (E-ISAC) and a NERC senior vice president, discusses the Biden Administration's 100-day plan to improve cybersecurity in the electric industry.

Nexus Podcast: E-ISAC on Biden 100-Day Plan for Power Grid Cybersecurity

Rockwell Automation Chief Product Safety and Security Officer Tony Baker joins this episode of the Claroty Nexus podcast to discuss OT and ICS product cybersecurity and how industrial automation and control system protections must adapt to changes such as the cloud and greater connectivity.

Nexus Podcast: Tony Baker on OT Cybersecurity Challenges, CIP Security

Michael Arceneaux, managing director of the Water Information Sharing and Analysis Center (WaterISAC), joined Claroty's Nexus podcast to discuss the the Water Sector Coordinating Council's survey of the water and wastewater sector about its cybersecurity practices, investments, and areas of need.

Nexus Podcast: Inside the Water Sector Cybersecurity Survey

In this episode of Claroty's Nexus podcast, retired Adm. Mike Rogers, former director of the National Security Agency and commander of U.S. Cyber Command joins to talk about ransomware and its impact on ICS and OT, defensive strategies, and whether to pay ransom demands in order to promptly resume production.

Nexus Podcast: Adm. Mike Rogers on Ransomware and OT

Nathan Brubaker, senior manager of Mandiant Threat Intelligence, joins the Nexus podcast to discuss a Mandiant report that examines how cyberattackers are using low-tech means of accessing industrial networks and, on occasion, interacting with processes without much understanding of possible physical outcomes or impacts to public safety.

Nexus Podcast: Mandiant on Low Sophistication OT Attacks

In this episode of Claroty's Nexus podcast, Manny Cancel, CEO of the Electricity Information Sharing and Analysis Center (E-ISAC) and a NERC senior vice president, discusses the Biden Administration's 100-day plan to improve cybersecurity in the electric industry.

Nexus Podcast: E-ISAC on Biden 100-Day Plan for Power Grid Cybersecurity

Katie Moussouris, CEO of Luta Security, joins the Nexus Podcast for a wide-ranging discussion of her work pioneering vulnerability disclosure programs, bug bounties, and crucial standards work.

Nexus Podcast: Katie Moussouris on Vulnerability Disclosure Programs

In this episode of the Nexus Podcast, the head of Kaspersky's ICS security team Evgeny Goncharov joins Claroty researchers Sharon Brizinov and Uri Katz to discuss their respective research into OPC security, vulnerabilities each team has disclosed, and how vendors and protocol maintainers can improve the OPC protocol's security going forward.

Nexus Podcast: Claroty and Kaspersky on OPC Security Research

On this episode of the Nexus Podcast, Josh Grunzweig of Volexity joins to discuss the ProxyLogon Exchange zero days. The Volexity research team was the first to discover and disclose in-the-wild attacks, allegedly by a Chinese APT group, exploiting these flaws dating back to early January 2021.

Nexus Podcast: Josh Grunzweig on ProxyLogon Exchange Zero-Day Exploits

Professor Mauro Conti of the University of Padua, Italy, joins this episode of the Nexus Podcast to discuss a research paper that examines the extent of insecure OT and ICS protocols in use that are often vulnerable by design, most notably lacking encryption and authentication services.

Nexus Podcast: Mauro Conti on Assessing the Use of Insecure ICS Protocols