Artificial intelligence is reshaping cybersecurity — but in operational technology (OT), industrial control systems (ICS), and critical infrastructure, the most dangerous threats aren't coming from AI‑powered superattacks. They're coming from something far more basic:

Internet‑exposed systems. Legacy equipment. No asset inventory. Weak controls. Minimal monitoring. And decades of cybersecurity debt.

In episode 57 of Cyber Security America, Joshua Nicholson sits down with Santosh Kaveti, CEO & Founder of ProArch, for a candid conversation about the escalating risks facing water treatment facilities, power grids, manufacturing plants, and other essential services.

Recent attacks on U.S. water systems exposed a painful truth: many PLCs, HMIs, remote access portals, and ICS components are still directly reachable from the internet — no zero‑day required. When those systems control the infrastructure communities rely on, cybersecurity failures become public safety failures.

This isn't just an IT problem anymore. It's a national security problem.

• Why internet‑exposed PLCs and ICS devices represent one of the biggest OT security breakdowns of our time

• How AI can strengthen OT environments through asset discovery, behavioral baselining, anomaly detection, and accelerated response

• Why separating IT and OT security is no longer viable for modern critical infrastructure

• The hidden risks inside supposedly "air‑gapped" systems that aren't actually monitored or governed

• How secure remote access, vulnerability management, change control, and recovery planning can dramatically reduce OT incident impact

• Why legacy infrastructure continues to hinder utilities and critical operations

• How compliance‑driven cultures create blind spots that undermine true cyber maturity and resilience

• Why visibility, accountability, and continuous assessment matter when outages affect entire communities

Joshua and Santosh also dig into the uncomfortable questions: Who is responsible when critical infrastructure operators fall behind? How transparent should utilities be with regulators and the public? And why do basic cybersecurity failures still persist despite rising consequences?

This conversation explores the intersection of AI, OT security, legacy systems, resilience, and national security — and challenges the idea that cybersecurity must be complex to be effective.

Sometimes the most impactful improvement is simply knowing: What you have. Who can access it. What changed. What's normal. And whether you can recover.

Santosh Kaveti, CEO & Founder of ProArch, brings more than 18 years of experience modernizing technology environments across energy, healthcare, manufacturing, and critical infrastructure. His insights offer a grounded, practical view of how organizations can modernize OT systems without compromising safety or reliability.

This episode is essential for CISOs, OT/ICS defenders, critical infrastructure operators, utility leaders, cybersecurity engineers, risk teams, and anyone responsible for protecting the systems communities depend on.

If you care about OT cybersecurity, ICS security, PLC protection, industrial resilience, AI in cybersecurity, or the safety of water and power systems, this episode delivers a clear look at the real risks — and what organizations can do right now to address them.

Subscribe to Cyber Security America for more conversations with cybersecurity leaders, responders, and innovators shaping the future of digital and operational defense.

AI is transforming cybersecurity at a breathtaking pace—but is it the greatest tool businesses can leverage, or the greatest threat they need to prepare for?

In Episode 56, cybersecurity veteran Brad Hawkins, CEO of SaferNet and host of the Digital Desperados Podcast, draws on more than 30 years of experience to explore how artificial intelligence is changing the threat landscape—and what business leaders need to do now to stay ahead.

Brad breaks down why cybersecurity is no longer simply an IT problem and why basic security hygiene can be the difference between a minor incident and a business-ending breach. From ransomware and insider threats to data breaches and AI-powered attacks, this conversation delivers practical insights for entrepreneurs, business owners, and technology leaders.

In this episode, you'll discover:

• Why IT expertise and cybersecurity expertise are not the same thing

• How basic cybersecurity hygiene can prevent devastating attacks

• How AI is improving threat detection across industries, including legal and financial services

• How AI systems can be manipulated, bypassed, or misused by attackers

• Why traditional risk management must evolve alongside rapidly advancing technology

• What businesses can do today to build stronger cyber resilience

• Why cybersecurity needs to be part of leadership and business strategy—not an afterthought

Brad also explores the bigger forces shaping our digital future, from the accelerating global AI race to the economic and infrastructure challenges created by massive data centers.

The message is clear: AI creates extraordinary opportunity, but organizations that fail to understand its risks may find themselves exposed to threats they aren't prepared to see coming.

Whether you're an entrepreneur, business leader, cybersecurity professional, or technology enthusiast, this episode offers a practical blueprint for navigating a future where cyber resilience isn't optional—it's essential.

The threats of tomorrow are already taking shape. The question is whether your business will be ready.

Connect with Brad Hawkins and learn more about cybersecurity and AI at SaferNetVPN.com and InfiniteProtection.ai. Reach out to our sponsor Darkstack7 Cyber Defense to find the right cybersecurity people for you company, https://www.darkstack7.com

Why do even the best cyber incident response playbooks fail during a real ransomware attack or data breach? Because the biggest vulnerability isn't in your systems — it's how leaders make decisions under pressure.

In this episode of Cyber Security America, host Joshua Nicholson talks with Lisa Larson, founder of Awakening Performance, about the missing link in cybersecurity: decision enablement. After two decades leading enterprise technology organizations and six years in breach response, Lisa developed the GEAR Framework (Ground, Explore, Attune, Resolve) — a protocol for cutting through cognitive overload, stress, and bias when the stakes are highest.

Josh and Lisa dig into real-world ransomware investigations, Hurricane Katrina disaster recovery, tabletop exercises that reveal which executives will crumble in a crisis, and why technical excellence alone isn't enough.

In this episode:

• Why incident response playbooks collapse under real pressure
• The GEAR Framework for decision clarity in a crisis
• Cognitive overload and executive decision fatigue during ransomware attacks
• The "we'll just restore from backup" assumption that sinks recovery
• Splitting tactical vs. strategic incident bridges
• How CISOs should communicate with the C-suite mid-incident
• Executive ego in a crisis: fight, flight, freeze, fawn
• Why incident response retainers matter before the next cyber tsunami
• Burnout, stress, and knowing your own cognitive breaking point

For CISOs, security directors, incident responders, SOC analysts, and business leaders responsible for crisis management.

Connect with Lisa Larson: https://www.mindfulcorporatemastery.com

Sponsored by Darkstack7 Cyber Defense — Incident Response, Ransomware Recovery, Penetration Testing, Virtual CISO, and Tabletop Exercises: https://www.darkstack7.com