Automated Remediation Anyone?

Tal Kollender, CEO and founder of Remedio, joins the Nexus Podcast to discuss the challenges and security gaps enterprises and critical infrastructure organizations face with insecure configurations and other risky exposures. As AI and advanced attackers accelerate the speed at which exposures are uncovered and exploited, organizations are beginning to consider automated remediation.

Listen here

ASL Roma 1’s Healthcare Operational Protection & Excellence (HOPE) cybersecurity and risk governance framework is re-organizing the way it recognizes assets via their relationships. According to CISO Stefano Scaramuzzino and Deloitte’s Fabio Battelli, this is a better reflection of how healthcare organizations view events and mitigate exposures, based upon their dependencies and strategic value.

Cyber Resilience

Operational Resilience

HOPE Has Shed Its Skin: Beyond the Canonical Asset

Stefano Scaramuzzino

Operational resilience must evolve as artificial intelligence becomes a prominent tool in the protection of operational technology (OT) and cyber-physical systems (CPS). Defenders may use AI to correlate operational signals at machine speed to make more context-informed judgments about the intent behind changes to a facility.

Cyber Resilience

Operational Resilience

Operational Technology

Operational Resilience in the Age of AI: Hunting Beyond Malware

Cyber Resilience

Operational Resilience

Risk Management

OpenAI-Hugging Face Incident a Wake-Up Call—Not a Reason to Panic

ADM. Michael S. Rogers, USN (Ret.)

ICS Advisory Project founder Dan Ricci writes that traditional OT cybersecurity hygiene practices such as strong authentication and virtual network segmentation are solid defensive measures against the capabilities of frontier AI models in 2026. Will that hold beyond remains to be seen.

Frontier AI Models Closing OT Exploitation Gap

Trending in Cyber

Explore now

Check Point Head of Agentic Security Innovation Shahar Tal joins the Nexus Podcast to discuss research he and researcher Yarden Porat presented at Black Hat on vulnerabilities in popular AI agent frameworks, including LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK. The vulnerabilities are an indication that these frameworks require additional scrutiny from a security perspective given the trust AI agents are given to execute tasks.

Cyber Resilience

Risk Management

Operational Resilience

Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks

Ellen Boehm, Senior Vice President Strategy and AI Innovation at Keyfactor, joins the Nexus Podcast to discuss post-quantum cryptography (PQC) readiness in critical infrastructure organizations. She also delves into how critical infrastructure organizations overseeing fleets of cyber-physical systems (CPS) assets transition those environments and avoid disruptions.

Cyber Resilience

Operational Resilience

Risk Management

Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure

Operational Resilience

Risk Management

Nexus Podcast: John Laliberte on AI and Non-Human Identity Controls

Cyber Resilience

Risk Management

Operational Resilience

Nexus Podcast: Jessica Ji on Frontier AI Models and Cybersecurity

Essential Topics (for Security Leaders)

Discover expert insights on Risk Management, Cyber Resilience, Vulnerability Management, and more. Learn how top security leaders safeguard critical cyber-physical systems.

Explore more

Risk Management

Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure Nexus Podcast: John Laliberte on AI and Non-Human Identity Controls

Cyber Resilience

HOPE Has Shed Its Skin: Beyond the Canonical Asset Operational Resilience in the Age of AI: Hunting Beyond Malware Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks Nexus Podcast: Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure

Healthcare

HOPE Has Shed Its Skin: Beyond the Canonical Asset AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control Nexus Podcast: Krista Arndt on Healthcare Cyber Resilience Nexus Podcast: Tiffany Wilson on the Security Crisis of Consumer Tech in Healthcare

Industrial

How AI Fits into a Manufacturing CPS Security Strategy Nexus Digest: Dan Ricci on Turning Visibility into Risk Reduction Exposed Manufacturing Assets a Consequential Risk Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks

Vulnerability Management

Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction Nexus Podcast: Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks Exploring Some Nuance on Project Glasswing

Latest Insights in

With Federal policy changes pushing more cybersecurity and AI regulation to the state level, CISOs should prepare for even more fragmentation of cybersecurity laws and more jurisdictions to contend with, writes Cristin Flynn Goodwin.

Risk Management

Cyber Resilience

Operational Resilience

50 States of Cybersecurity Complexity

Cristin Flynn Goodwin

The convergence of IT and OT systems, primarily driven by the deployment of IIoT (industrial Internet of Things), cloud computing, and the need for remote monitoring, has fundamentally altered the OT architecture that the Purdue Model was initially designed to help manage.

Risk Management

Operational Resilience

Operational Technology

Is It Time to Rethink the Purdue Model?

OT cybersecurity expert Danielle Jablanski of STV makes her first contribution to Claroty Nexus. She writes about how OT cybersecurity programs should not compromise safety and reliability over the likelihood a vulnerability will be exploited.

Operational Technology

Cyber Resilience

Vulnerability Management

Risk Management

Throw Likelihood to the Wind: OT Cybersecurity is Categorical, Not Mathematical

On this episode of the Nexus Podcast, Vivek Ponneda, SVP Growth & Strategy at Frenos, discusses the maturity and evolution of OT security as a practice, and advises that organizations need to leverage these data-rich environments in order to bring necessary context to threat and risk management efforts

Nexus Podcast: Vivek Ponnada on the Need for Context in OT Security

Cyber Resilience

Leandro Ribeiro, Sobre la Segurança Cibernética no Setor de Saúde

With Federal policy changes pushing more cybersecurity and AI regulation to the state level, CISOs should prepare for even more fragmentation of cybersecurity laws and more jurisdictions to contend with, writes Cristin Flynn Goodwin.

Risk Management

Cyber Resilience

Operational Resilience

50 States of Cybersecurity Complexity

Cristin Flynn Goodwin

The convergence of IT and OT systems, primarily driven by the deployment of IIoT (industrial Internet of Things), cloud computing, and the need for remote monitoring, has fundamentally altered the OT architecture that the Purdue Model was initially designed to help manage.

Risk Management

Operational Resilience

Operational Technology

Is It Time to Rethink the Purdue Model?

George V. Hulme

OT cybersecurity expert Danielle Jablanski of STV makes her first contribution to Claroty Nexus. She writes about how OT cybersecurity programs should not compromise safety and reliability over the likelihood a vulnerability will be exploited.

Operational Technology

Cyber Resilience

Vulnerability Management

Risk Management

Throw Likelihood to the Wind: OT Cybersecurity is Categorical, Not Mathematical

Danielle Jablanski

On this episode of the Nexus Podcast, Vivek Ponneda, SVP Growth & Strategy at Frenos, discusses the maturity and evolution of OT security as a practice, and advises that organizations need to leverage these data-rich environments in order to bring necessary context to threat and risk management efforts

Nexus Podcast: Vivek Ponnada on the Need for Context in OT Security

Cyber Resilience

Leandro Ribeiro, Sobre la Segurança Cibernética no Setor de Saúde

Leandro Ribeiro, CISO do Hospital Sírio-Libanês, compartilha sua experiência no Nexus 24 em Boston, discutindo segurança cibernética no setor de saúde e o…

Vulnerability Management

Cyber Resilience

Arthur Paixao Sobre los Principais Riscos Cibernéticos no Setor de Saúde

Entrevista com Arthur Paixão, Head de Cybersecurity do Hospital Albert Einstein, sobre os principais riscos cibernéticos no setor de saúde. Arthur destaca que…

In this episode of the Claroty Nexus Podcast, Austin Allen, Sr. Director of Global Solutions Architecture at Airlock Security, discusses the cybersecurity challenges facing healthcare delivery organizations, and the potential negative impacts of a breach or incident on patient care.

Vulnerability Management

Risk Management

Nexus Podcast: Austin Allen on Healthcare Cybersecurity and Patient Safety

Mike Ratliff, CISO at Providence, one of the country's largest not-for-profit healthcare providers, writes about his organization's attempt to re-think GRC as Governance, Risk, Attack Surface Management, and Compliance (GRAC). Ratliff describes five areas GRAC improves the overall security program, including the quantification and prioritization of risk, the integration of attack surface management, and an architecture that supports secure-by-design principles.

Risk Management

Cyber Resilience

Operational Resilience

Rebuilding Legacy GRC from the Ground Up

Current OT cybersecurity budgeting approaches reflect a misalignment of prioritizing surface-level defenses over architectural shortcomings. Instead, CISOs should demand vendors deliver products that are secure by design, and address systemic failures over a reactive approach to the security of cyber-physical systems.

Operational Technology

Risk Management

The Economics of OT Cybersecurity: Are We Investing in the Wrong Priorities?