Michael Mimoso

Ric Derbyshire, a Principal Security Researcher at Orange Cyberdefense and an Honorary Researcher at Imperial College London, joins the Nexus Podcast to discuss how attackers are able to gain lateral movement across operational technology (OT) assets through a tactic known as Living Off the Plant. Similar to Living-off-the-Land attacks, Living-Off-the-Plant TTPs leverage native functionality specific to OT, with a potential negative impact on physical assets and safety concerns.

Jon Holzbauer, OT systems manager at Silgan Containers, is featured in Episode 3 of Nexus Digest. Jon discusses an article he wrote about the skills gap between IT security teams and OT asset operators as these two distinct operational disciplines converge. Jon describes the challenges and conflicting priorities that emerge in converged environments, and how to navigate those.

Rapid7 Principal Security Research (IoT) lead Deral Heiland joins the Nexus Podcast to discuss work his team did on how attackers might weaponize cellular-based IoT. Rapid7 conducted three phases of this research, with the most recent digging into how attackers with access to these systems can abuse them to gain unauthorized access, potentially exfiltrate critical data, or pivot into backend network infrastructure. MIMOSO 0:14 All right, welcome back to the Nexus Podcast. Dural Hyland is my guest.