Nexus: A Claroty Podcast

Joe Slowik, Director of Threat Research and Cyber Engineering at Dataminr, joined the Nexus Podcast to discuss how artificial intelligence (AI), frontier AI models and large-language models (LLMs) are accelerating vulnerability discovery and exploitation. Slowik wrote a report called "Examining the Vulnapocalypse and Defensive Responses" that cautions security leaders not to be distracted by the volume of CVEs being produced, but instead focus on the velocity of exploitation and how attacks are increasingly preceding disclosure. 
Subscribe and listen to the Nexus Podcast here.

Jake Braun, cofounder of DEF CON Franklin and former White House acting Principal Deputy National Cyber Director, joins the Nexus Podcast to discuss cybersecurity for water and wastewater utilities. 
DEF CON Franklin is a volunteer-driven program that connects security researchers and hackers associated with the DEF CON conference with U.S.-based water wastewater utilities and K-12 schools. This summer at DEF CON, DEF CON Franklin and the National Rural Water Association announced the Water Watch Center, which provides support to water utilities in the event of a breach. 
Jake explains how both initiatives are progressing, the cybersecurity challenges smaller water utilities face, and what the government can do to help from a policy and regulatory standpoint. 
Subscribe and listen to the Nexus Podcast here.

Tatyana Bolton, Executive Director of the Operational Technology Cybersecurity Coalition (OTCC), joins the Nexus Podcast to discuss a new partnership between OTCC and the International Society of Automation (ISA), alongside a joint position paper advocating for the ISA/IEC 62443 standard as the definitive global benchmark for operational technology (OT) cybersecurity.
Read more about the partnership
Read the position paper on a unified approach to OT cybersecurity
Subscribe and listen to the Nexus Podcast here.

Ben Gardiner, senior cybersecurity research engineer for the National Motor Freight Traffic Association (NMFTA), joins the Nexus Podcast to discuss research he published on a silent patch released by vendor Bendix addressing serious cybersecurity vulnerabilities in brake controllers found on tractor trailers. The vulnerabilities—which were updated as part of a safety recall—posed safety risks to drivers and others on the road. 
Ben explains how and why he chose to reverse-engineer the safety recall and how the vulnerabilities impact the security of any trailer-connected telematics devices, and also how they could be exploited at close range. 
Subscribe and listen to the Nexus Podcast here.

Remedio cofounder and Chief Executive Officer Tal Kollender joins the Nexus Podcast to discuss the challenges and security gaps enterprises and critical infrastructure organizations face with insecure configurations and other risky exposures. As AI and advanced attackers accelerate the speed at which exposures are uncovered and exploited, organizations are beginning to consider automated remediation. 
Subscribe and listen to the Nexus Podcast here.