Correlating Signal with Context

OT-ISAC Regional Director AJ Eserjose writes about the changing defensive landscape around OT, and AI's machine-speed capabilities to contextualize the environment.

Read more

Operational resilience must evolve as artificial intelligence becomes a prominent tool in the protection of operational technology (OT) and cyber-physical systems (CPS). Defenders may use AI to correlate operational signals at machine speed to make more context-informed judgments about the intent behind changes to a facility.

Cyber Resilience

Operational Resilience

Risk Management

OpenAI-Hugging Face Incident a Wake-Up Call—Not a Reason to Panic

ADM. Michael S. Rogers, USN (Ret.)

ICS Advisory Project founder Dan Ricci writes that traditional OT cybersecurity hygiene practices such as strong authentication and virtual network segmentation are solid defensive measures against the capabilities of frontier AI models in 2026. Will that hold beyond remains to be seen.

Frontier AI Models Closing OT Exploitation Gap

Cyber Resilience

Operational Resilience

Risk Management

Securing the Frontier: Moving Past AI Fear and Toward Systemic Incentives

Former Pfizer Global Head of Automation Engineering James LaBonty writes about how to develop an AI-powered cybersecurity strategy to protect cyber-physical systems (CPS) in manufacturing environments. An AI-powered CPS security strategy in manufacturing should establish operational resilience as its prime mission statement. That means ensuring that uptime of manufacturing assets is paramount. It also means strategizing about how to handle the growing influx of vulnerability disclosures driven by frontier AI models

Operational Resilience

Cyber Resilience

How AI Fits into a Manufacturing CPS Security Strategy

Trending in Cyber

Explore now

Check Point Head of Agentic Security Innovation Shahar Tal joins the Nexus Podcast to discuss research he and researcher Yarden Porat presented at Black Hat on vulnerabilities in popular AI agent frameworks, including LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK. The vulnerabilities are an indication that these frameworks require additional scrutiny from a security perspective given the trust AI agents are given to execute tasks.

Cyber Resilience

Risk Management

Operational Resilience

Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks

Ellen Boehm, Senior Vice President Strategy and AI Innovation at Keyfactor, joins the Nexus Podcast to discuss post-quantum cryptography (PQC) readiness in critical infrastructure organizations. She also delves into how critical infrastructure organizations overseeing fleets of cyber-physical systems (CPS) assets transition those environments and avoid disruptions.

Cyber Resilience

Operational Resilience

Risk Management

Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure

Operational Resilience

Risk Management

Nexus Podcast: John Laliberte on AI and Non-Human Identity Controls

Cyber Resilience

Risk Management

Operational Resilience

Nexus Podcast: Jessica Ji on Frontier AI Models and Cybersecurity

Essential Topics (for Security Leaders)

Discover expert insights on Risk Management, Cyber Resilience, Vulnerability Management, and more. Learn how top security leaders safeguard critical cyber-physical systems.

Explore more

Risk Management

Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure Nexus Podcast: John Laliberte on AI and Non-Human Identity Controls OpenAI-Hugging Face Incident a Wake-Up Call—Not a Reason to Panic

Cyber Resilience

Operational Resilience in the Age of AI: Hunting Beyond Malware Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure OpenAI-Hugging Face Incident a Wake-Up Call—Not a Reason to Panic

Healthcare

AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control Nexus Podcast: Krista Arndt on Healthcare Cyber Resilience Nexus Podcast: Tiffany Wilson on the Security Crisis of Consumer Tech in Healthcare Nexus Podcast: Joe Slowik on Securing Exposed Internet-Facing Assets

Industrial

How AI Fits into a Manufacturing CPS Security Strategy Nexus Digest: Dan Ricci on Turning Visibility into Risk Reduction Exposed Manufacturing Assets a Consequential Risk Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks

Vulnerability Management

From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks Exploring Some Nuance on Project Glasswing Nexus Podcast: Deral Heiland on Weaponizing Cellular-Based IoT

Latest Insights in

Jay C. Catherine, a security architect for a major retailer, joins the Nexus Podcast to discuss best practices for logistics cybersecurity within the retail space. This includes securing not only distribution, but also the operational technology involved in these manufacturing processes.

Internet of Things

Cyber Resilience

Operational Resilience

Operational Technology

Nexus Podcast: Jay Catherine on Securing Logistics, OT in Retail

Congress' failure to reauthorize the Cybersecurity Information Sharing Act of 2015 (CISA 2015) signals a fundamental shift in threat intelligence sharing and overall risk management strategies.

Vulnerability Management

Risk Management

Cyber Resilience

Internet of Things

CISO Survival Guide: 4 Steps to Prepare for CISA 2015 Expiration

Jason Elrod, VP and CISO at Multicare Health System, discusses how artificial intelligence and machine learning can help security leaders have high confidence assertions around identity and privileges, and making authentication as frictionless as possible. The journey at his not-for-profit healthcare organization includes offloading certain manual processes to AI-led automation such as provisioning reviews and managing a trouble ticket queue.

Nexus Conference

Risk Management

Jason Elrod on Bringing AI to Identity Management

China-nexus threat actors are targeting edge devices that do not support EDR. Adm. Michael Rogers writes that cyber-physical systems could be next since many of the connected OT, IoT, and IoMT devices and sensors also lack EDR protection.

Operational Resilience

Internet of Things

Cyber Resilience

Risk Management

Adversaries' Adaptability is Bad News for Cyber-Physical Systems

Jon Holzbauer, OT Systems Manager at Silgan Containers, explains his experience facilitating the journey to OT security for IT security professionals. Coming from an IT perspective with an OT background, he has navigated the differing incentives, terminology and communication challenges, and overall connectivity and convergence of different technologies that are core to the business. Bridging the gap relies on finding overlaps between IT and OT, encouraging learning from each others’ day-to-day responsibilities, and encouraging effective communication.

Operational Technology

Operational Resilience

Cyber Resilience

Nexus Conference

Jon Holzbauer on Converging IT and OT Security Teams

Jay C. Catherine, a security architect for a major retailer, joins the Nexus Podcast to discuss best practices for logistics cybersecurity within the retail space. This includes securing not only distribution, but also the operational technology involved in these manufacturing processes.

Internet of Things

Cyber Resilience

Operational Resilience

Operational Technology

Nexus Podcast: Jay Catherine on Securing Logistics, OT in Retail

Congress' failure to reauthorize the Cybersecurity Information Sharing Act of 2015 (CISA 2015) signals a fundamental shift in threat intelligence sharing and overall risk management strategies.

Vulnerability Management

Risk Management

Cyber Resilience

Internet of Things

CISO Survival Guide: 4 Steps to Prepare for CISA 2015 Expiration

George V. Hulme

Jason Elrod, VP and CISO at Multicare Health System, discusses how artificial intelligence and machine learning can help security leaders have high confidence assertions around identity and privileges, and making authentication as frictionless as possible. The journey at his not-for-profit healthcare organization includes offloading certain manual processes to AI-led automation such as provisioning reviews and managing a trouble ticket queue.

Nexus Conference

Risk Management

Jason Elrod on Bringing AI to Identity Management

Jason Elrod, VP and CISO at Multicare Health System, discusses how artificial intelligence and machine learning can help security leaders have high confidence…

China-nexus threat actors are targeting edge devices that do not support EDR. Adm. Michael Rogers writes that cyber-physical systems could be next since many of the connected OT, IoT, and IoMT devices and sensors also lack EDR protection.

Operational Resilience

Internet of Things

Cyber Resilience

Risk Management

Adversaries' Adaptability is Bad News for Cyber-Physical Systems

ADM. Michael S. Rogers, USN (Ret.)

Jon Holzbauer, OT Systems Manager at Silgan Containers, explains his experience facilitating the journey to OT security for IT security professionals. Coming from an IT perspective with an OT background, he has navigated the differing incentives, terminology and communication challenges, and overall connectivity and convergence of different technologies that are core to the business. Bridging the gap relies on finding overlaps between IT and OT, encouraging learning from each others’ day-to-day responsibilities, and encouraging effective communication.

Operational Technology

Operational Resilience

Cyber Resilience

Nexus Conference

Jon Holzbauer on Converging IT and OT Security Teams

Jon Holzbauer, OT Systems Manager at Silgan Containers, explains his experience facilitating the journey to OT security for IT security professionals. Coming…

The forthcoming National Cyber Strategy must aims to scale cyber disruptions of malicious threat actor activity, reduce friction points, and incentivize public-private collaboration that are essential to securing critical infrastructure and protecting American innovation.

Cyber Resilience

Risk Management

Scaling Disruption: What the Next Cyber Strategy Must Get Right

On this episode of the Nexus Podcast, Greg Garcia, Executive Director of The Health Sector Coordinating Council Cybersecurity Working Group, discusses the Sector Mapping and Risk Toolkit (SMART). SMART contains a set of 17 templates that enable healthcare organizations to map and visualize workflows, identify areas of risk, and where mitigations are most desperately needed.

Risk Management

Operational Resilience

Cyber Resilience

Nexus Podcast: Greg Garcia on the Sector Mapping and Risk Toolkit for Healthcare

Amazon's intent to replace humans with robots represents a wave of cyber-physical systems (CPS) security that will need to be implemented not only in the logistics and warehousing industries but also for work-in-process (WIP) inventory in manufacturing and other critical industries.

Cyber Resilience

Internet of Things

Operational Resilience

Operational Technology

Vulnerability Management

Risk Management

Automation Inroads Bring Urgency to CPS Protection

A person in a professional suit and glasses speaks during a video interview, with text identifying him as Chris Inglis, former U.S. National Cyber Director.

Risk Management

Cyber Resilience

Nexus Conference

Chris Inglis on the Effectiveness of US Cyber Deterrence Policy

Former U.S. National Cyber Director Chris Inglis explains how state-sponsored threat actor groups are ramping up aggression against U.S. critical…