Nexus: A Claroty Podcast

Hosted by Claroty

TechnologyInterviews guests

Website RSS feed

Episodes

138

Latest episode

Aug 2026

Language

EN-US

About the show

Nexus is a cybersecurity podcast hosted by Claroty Editorial Director Mike Mimoso. Nexus will feature discussions with cybersecurity leaders responsible for the security and protection of cyber-physical systems. Guests include cybersecurity researchers, executives, innovators, and influencers, discussing the topics affecting cybersecurity professionals in OT, IoT, and IoMT environments.

Listen to episodes

60 recent

August 16, 2026Episode 13829 min

Check Point's Shahar Tal on Exploiting AI Agent Frameworks

Check Point Head of Agentic Security Innovation Shahar Tal joins the Nexus Podcast to discuss research he and colleague Yarden Porat conducted that uncovered a dozen vulnerabilities in popular AI agent frameworks such as LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK. The vulnerabilities allow an attacker to exploit the inherent trust given to AI agents and can pave the way to remote code execution and other malicious outcomes. Subscribe and listen to the Nexus Podcast here .

August 11, 2026Episode 13726 min

Ellen Boehm on Post-Quantum Readiness in Critical Infrastructure

Ellen Boehm, Senior Vice President Strategy and AI Innovation at Keyfactor, joins the Nexus Podcast to discuss post-quantum cryptography (PQC) readiness in critical infrastructure organizations. A recent Executive Order on PQC installed a December 2030 deadline for federal agencies to transition high-value systems and key generation to PQC. The EO also directs CISA, other federal sector risk management agencies to assist with road map development. In this episode, Ellen discusses readiness in this context. She also delves into how critical infrastructure organizations overseeing fleets of cyber-physical systems (CPS) assets transition those environments and avoid disruptions. Governance, budgeting, supply chain management, and the AI-driven threat landscape are also discussed. This episode was recorded during the Black Hat USA Conference. Subscribe and listen to the Nexus Podcast here .

August 5, 2026Episode 13627 min

John Laliberte on AI and Non-Human Identity Controls

John Laliberte, CEO of ClearVector, joins the Nexus Podcast in an episode recorded at Black Hat 2026 in Las Vegas. Laliberte discusses how artificial intelligence (AI) is accelerating the creation of so-called non-human identities, including autonomous identities created by AI agents. Laliberte covers the risks and controls that enterprises and critical infrastructure organizations must consider as AI adoption accelerates everywhere. Subscribe and listen to the Nexus Podcast here . Download ClearVector's Identity Intelligence report.

July 28, 2026Episode 13534 min

Jessica Ji on Frontier AI Models and Cybersecurity

Jessica Ji, a Senior Research Analyst at Georgetown’s Center for Security and Emerging Technology and its CyberAI Project , joins the Nexus Podcast to discuss how frontier AI models such as Claude Mythos are changing cybersecurity for practitioners and policymakers alike. Jessica works closely with policymakers in the U.S. government. She discusses how they view AI models' offensive and defensive capabilities, the need for a long-term strategy on AI and cybersecurity, and the disparate incentives between private AI companies such as Anthropic and OpenAI and the government as these models are developed and deployed. Subscribe and listen to the Nexus Podcast here .

June 29, 2026Episode 13413 min

Dan Ricci on OT/CPS Visibility and Risk Reduction

ICS Advisory Project founder Dan Ricci joins the Nexus Podcat to discuss how to turn operational technology (OT) and cyber-physical systems (CPS) visibility into actual risk reduction. Dan describes the need to distinguish between asset lists and actual asset inventories, what those differences are, and how to make the most of the information made available. Device data such as firmware versions, protocol identification, and more are vital to other aspects of the OT and CPS protection program, including exposure management and segmentation initiatives. Dan wrote more on this topic in this article: “ From Inventory to Insight: Turning OT Visibility into Concrete Risk Reduction .” This interview was pulled from Episode 4 of Nexus Digest . Subscribe and listen to the Nexus Podcast here .

June 14, 2026Episode 13333 min

Krista Arndt on Cyber Resilience in Healthcare

Krista Arndt, the Associate Chief Information Security Officer (CISO) at the St. Luke's University Health Network, a 15-hospital health system in Pennsylvania and New Jersey, joins the Nexus Podcast to discuss cybersecurity and resilience in a large hospital system. Krista and her team talk about the role of healthcare cybersecurity teams in ensuring patient safety, and some of the ongoing challenges in keeping medical devices and the healthcare network available and resilient to attack. Krista also discusses a microsegmentation project implemented through Elisity that helped remove blockers impeding innovation around robotic surgical systems. Subscribe and listen to the Nexus Podcast here .

May 31, 2026Episode 13213 min

Jon Holzbauer on IT/OT's Divergent Approaches to Asset Security

Jon Holzbauer, OT Systems Manager at Silgan Containers, joins the Nexus Podcast to discuss where IT security teams and OT operations run into challenges in protecting these diverse complicated environments in manufacturing. A clash of approaches may lead to rash decisions around cybersecurity that could disrupt key processes or impact safety and reliability. This interview was pulled from Episode 3 of Nexus Digest, a monthly recap of content published on Nexus. Subscribe and listen to the Nexus Podcast here .

May 25, 2026Episode 13124 min

Ric Derbyshire on Living-Off-the-Plant OT Cyberattacks

Ric Derbyshire, a Principal Security Researcher at Orange Cyberdefense and an Honorary Researcher at Imperial College London, joins the Nexus Podcast to discuss how attackers are able to gain lateral movement across operational technology (OT) assets through a tactic known as Living Off the Plant. Similar to Living-off-the-Land attacks, Living-Off-the-Plant TTPs leverage native functionality specific to OT, with a potential negative impact on physical assets and safety concerns. Subscribe and listen to the Nexus Podcast here .

May 10, 2026Episode 13026 min

Deral Heiland on Weaponizing Cellular-Based IoT

Rapid7 Principal Security Research (IoT) lead Deral Heiland joins the Nexus Podcast to discuss work his team did on how attackers might weaponize cellular-based IoT. Rapid7 conducted three phases of this research, with the most recent digging into how attackers with access to these systems can abuse them to gain unauthorized access, potentially exfiltrate critical data, or pivot into backend network infrastructure. Subscribe and listen to the Nexus Podcast here . Read the Rapid7 research report .

May 3, 2026Episode 12924 min

Rob King on OT Asset Exposures, Mitigations

Rob King, Director of Applied Research at RunZero, joins the Nexus Podcast to discuss the security risks and exposures introduced by digital transformation to operational technology environments. As many OT and cyber-physical systems assets are connected online, there could be signification exposures introduced to these internet-facing devices and systems. Rob also discusses the effectiveness of popular mitigations such as segmentation and other controls. Subscribe and listen to the Nexus Podcast here .