Shownotes
Detection got fast, but remediation didn't. And that gap is exactly where attackers live.
Manufacturers have spent the last decade building visibility into their plants: sensors, dashboards, alerts flying into every SOC. But knowing about a threat and fixing it are two different problems, and most industrial teams are still solving the second one at human speed. A ticket gets opened. A maintenance window gets scheduled. Three departments get looped in. Meanwhile, the attacker isn't waiting for anyone's approval.
In this episode, Craig Duckworth talks with Tal Kollender, founder and CEO of Remedio, about what's actually keeping industrial environments exposed: misconfigurations left untouched for months, unnecessary services quietly giving attackers a path to move laterally, and aging systems nobody wants to be the one to touch. Tal makes the case that patching alone will never close this gap and explains why safe automated remediation is becoming essential as AI accelerates attacks faster than most security teams can keep up.
They also dig into the reality of OT: uptime and safety come first, IT security tools often can't reach the controls layer, and the wrong change can cause real damage on the plant floor. It's a candid look at what it takes to align security and operations, and why building that trust is the real first step toward proactive protection instead of reactive cleanup.
If you're responsible for securing a plant floor, a fleet of facilities, or the budget behind either one, this conversation gives you a clear, practical way to think about closing the gap between seeing a threat and actually stopping one.
Chapters:
- (00:00:00) Why machine speed detection needs machine speed remediation
- (00:01:00) Tal’s path from teenage hacker to cybersecurity founder
- (00:06:00) Misconfigurations and lateral movement in industrial environments
- (00:11:00) Why patching and configuration changes are difficult in OT
- (00:15:00) Moving from reactive detection to proactive hardening
- (00:17:00) Aligning people, process, and technology
- (00:22:00) AI adoption, unmanaged risk, and doing more with less
- (00:25:00) Bridging the IT and OT divide without disrupting operations
- (00:29:00) The first practical step toward proactive industrial security
Links And Resources:
Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!
