Artificial intelligence is reshaping cybersecurity — but in operational technology (OT), industrial control systems (ICS), and critical infrastructure, the most dangerous threats aren't coming from AI‑powered superattacks. They're coming from something far more basic:

Internet‑exposed systems. Legacy equipment. No asset inventory. Weak controls. Minimal monitoring. And decades of cybersecurity debt.

In episode 57 of Cyber Security America, Joshua Nicholson sits down with Santosh Kaveti, CEO & Founder of ProArch, for a candid conversation about the escalating risks facing water treatment facilities, power grids, manufacturing plants, and other essential services.

Recent attacks on U.S. water systems exposed a painful truth: many PLCs, HMIs, remote access portals, and ICS components are still directly reachable from the internet — no zero‑day required. When those systems control the infrastructure communities rely on, cybersecurity failures become public safety failures.

This isn't just an IT problem anymore. It's a national security problem.

• Why internet‑exposed PLCs and ICS devices represent one of the biggest OT security breakdowns of our time

• How AI can strengthen OT environments through asset discovery, behavioral baselining, anomaly detection, and accelerated response

• Why separating IT and OT security is no longer viable for modern critical infrastructure

• The hidden risks inside supposedly "air‑gapped" systems that aren't actually monitored or governed

• How secure remote access, vulnerability management, change control, and recovery planning can dramatically reduce OT incident impact

• Why legacy infrastructure continues to hinder utilities and critical operations

• How compliance‑driven cultures create blind spots that undermine true cyber maturity and resilience

• Why visibility, accountability, and continuous assessment matter when outages affect entire communities

Joshua and Santosh also dig into the uncomfortable questions: Who is responsible when critical infrastructure operators fall behind? How transparent should utilities be with regulators and the public? And why do basic cybersecurity failures still persist despite rising consequences?

This conversation explores the intersection of AI, OT security, legacy systems, resilience, and national security — and challenges the idea that cybersecurity must be complex to be effective.

Sometimes the most impactful improvement is simply knowing: What you have. Who can access it. What changed. What's normal. And whether you can recover.

Santosh Kaveti, CEO & Founder of ProArch, brings more than 18 years of experience modernizing technology environments across energy, healthcare, manufacturing, and critical infrastructure. His insights offer a grounded, practical view of how organizations can modernize OT systems without compromising safety or reliability.

This episode is essential for CISOs, OT/ICS defenders, critical infrastructure operators, utility leaders, cybersecurity engineers, risk teams, and anyone responsible for protecting the systems communities depend on.

If you care about OT cybersecurity, ICS security, PLC protection, industrial resilience, AI in cybersecurity, or the safety of water and power systems, this episode delivers a clear look at the real risks — and what organizations can do right now to address them.

Subscribe to Cyber Security America for more conversations with cybersecurity leaders, responders, and innovators shaping the future of digital and operational defense.

AI is transforming cybersecurity at a breathtaking pace—but is it the greatest tool businesses can leverage, or the greatest threat they need to prepare for?

In Episode 56, cybersecurity veteran Brad Hawkins, CEO of SaferNet and host of the Digital Desperados Podcast, draws on more than 30 years of experience to explore how artificial intelligence is changing the threat landscape—and what business leaders need to do now to stay ahead.

Brad breaks down why cybersecurity is no longer simply an IT problem and why basic security hygiene can be the difference between a minor incident and a business-ending breach. From ransomware and insider threats to data breaches and AI-powered attacks, this conversation delivers practical insights for entrepreneurs, business owners, and technology leaders.

In this episode, you'll discover:

• Why IT expertise and cybersecurity expertise are not the same thing

• How basic cybersecurity hygiene can prevent devastating attacks

• How AI is improving threat detection across industries, including legal and financial services

• How AI systems can be manipulated, bypassed, or misused by attackers

• Why traditional risk management must evolve alongside rapidly advancing technology

• What businesses can do today to build stronger cyber resilience

• Why cybersecurity needs to be part of leadership and business strategy—not an afterthought

Brad also explores the bigger forces shaping our digital future, from the accelerating global AI race to the economic and infrastructure challenges created by massive data centers.

The message is clear: AI creates extraordinary opportunity, but organizations that fail to understand its risks may find themselves exposed to threats they aren't prepared to see coming.

Whether you're an entrepreneur, business leader, cybersecurity professional, or technology enthusiast, this episode offers a practical blueprint for navigating a future where cyber resilience isn't optional—it's essential.

The threats of tomorrow are already taking shape. The question is whether your business will be ready.

Connect with Brad Hawkins and learn more about cybersecurity and AI at SaferNetVPN.com and InfiniteProtection.ai. Reach out to our sponsor Darkstack7 Cyber Defense to find the right cybersecurity people for you company, https://www.darkstack7.com

Why do even the best cyber incident response playbooks fail during a real ransomware attack or data breach? Because the biggest vulnerability isn't in your systems — it's how leaders make decisions under pressure.

In this episode of Cyber Security America, host Joshua Nicholson talks with Lisa Larson, founder of Awakening Performance, about the missing link in cybersecurity: decision enablement. After two decades leading enterprise technology organizations and six years in breach response, Lisa developed the GEAR Framework (Ground, Explore, Attune, Resolve) — a protocol for cutting through cognitive overload, stress, and bias when the stakes are highest.

Josh and Lisa dig into real-world ransomware investigations, Hurricane Katrina disaster recovery, tabletop exercises that reveal which executives will crumble in a crisis, and why technical excellence alone isn't enough.

In this episode:

• Why incident response playbooks collapse under real pressure
• The GEAR Framework for decision clarity in a crisis
• Cognitive overload and executive decision fatigue during ransomware attacks
• The "we'll just restore from backup" assumption that sinks recovery
• Splitting tactical vs. strategic incident bridges
• How CISOs should communicate with the C-suite mid-incident
• Executive ego in a crisis: fight, flight, freeze, fawn
• Why incident response retainers matter before the next cyber tsunami
• Burnout, stress, and knowing your own cognitive breaking point

For CISOs, security directors, incident responders, SOC analysts, and business leaders responsible for crisis management.

Connect with Lisa Larson: https://www.mindfulcorporatemastery.com

Sponsored by Darkstack7 Cyber Defense — Incident Response, Ransomware Recovery, Penetration Testing, Virtual CISO, and Tabletop Exercises: https://www.darkstack7.com

In this episode of the Cyber Security America Podcast, we expose one of the internet's most overlooked—and costly—threats: ad fraud.

Host Josh Nicholson sits down with Rich Kahn, CEO and co-founder of Anura, to break down how bots, click farms, and fraudulent traffic are quietly manipulating digital advertising—and why as much as 25% of marketing spend may be wasted on fake users.

With decades of experience in fraud detection, Rich shares how his platform identified over 1.2 billion fraudulent ad interactions in a single year, and why this issue is no longer just a marketing problem—it's a growing cybersecurity threat.

Together, they explore the evolving intersection of cybersecurity, AI, and digital marketing, and what businesses must do to protect their data, budgets, and decision-making.

• What ad fraud is and why it's massively underestimated

• How bots, malware, and click farms generate fake traffic

• The real impact of bad data on ROI and business performance

• How AI is accelerating both cyber threats and fraud detection

• Case studies of companies losing—and recovering—millions

• Why ad fraud overlaps with broader cybersecurity risks

• How to identify and stop fraudulent traffic in real time

Not all traffic is real—and if you're not measuring it, you're paying for it.

🌐 Anura: https://www.anura.io
🛡️ Darkstack7: https://www.darkstack7.com

Stay ahead of real-world cyber threats, incident response strategies, and leadership insights.

Apple Podcasts: https://podcasts.apple.com/us/podcast/cyber-security-america/id1668216285
Spotify: https://open.spotify.com/show/3wmyUbe1TY5hNl96Q8UFFI

Follow for updates & clips:
Instagram: https://www.instagram.com/cybersecurityamericapodcast/
TikTok: https://www.tiktok.com/@cybersecurityamerica

Host Josh Nicholson:
https://www.linkedin.com/in/joshuarnicholson/

Darkstack7 Cyber Defense delivers enterprise-grade cybersecurity solutions to growing organizations. Founded by Marine Corps veteran and cybersecurity leader Josh Nicholson, the firm specializes in:

• Incident Response & Breach Management

• Cloud & AI Security

• Security Engineering & Architecture

• vCISO Advisory

• Insider Threat Programs

• Cyber Readiness & Tabletop Exercises

Darkstack7 helps organizations build resilient defenses while aligning security with business goals.

Follow the show, leave a review, and share with your network to support more expert conversations on cybersecurity and fraud prevention.

#CyberSecurity #AdFraud #DigitalMarketing #FraudDetection #BotTraffic #ClickFraud #AIinCybersecurity #BusinessSecurity #MarketingFraud #CyberSecurityPodcast #CyberSecurityAmerica

Discover how a Nepali American founder turned a personal frustration with security questionnaires into a rapidly growing AI-driven platform revolutionizing enterprise compliance. Pukar Hamal, CEO of Security Pal, reveals the untold story behind building one of the fastest-growing cybersecurity tools trusted by OpenAI, Figma, and Snapchat — and how Kathmandu's overlooked talent pool is shaping the future of cybersecurity innovation. In this explosive episode, you'll learn how Security Pal slashes the time to respond to complex security questionnaires from months to hours — transforming a tedious regulatory burden into a strategic advantage. Pukar shares his unique journey from a startup co-founder to a Silicon Valley CEO, highlighting the paradox of building trust in enterprise security while fighting misinformation and AI hallucinations.

We break down specific techniques that will empower CISOs and security teams: how to leverage AI for continuous vendor monitoring, how to identify hidden risks through dynamic questionnaires, and how to use data-driven insights to propel security into a growth enabler. You'll discover how Security Pal's AI doesn't just automate answers — it predicts vulnerabilities, surfaces gaps, and helps companies stay ahead of technological and regulatory curves. Why is understanding the evolving security landscape critical right now? Because the traditional questionnaire isn't going away — instead, it's becoming the backbone of risk management that, if mastered, unlocks faster deal cycles, stronger compliance, and market differentiation. Next-generation security leaders can harness these insights to anticipate threats, streamline vendor assessments, and turn compliance from a bottleneck into a business booster. Perfect for security executives, compliance officers, and tech founders ready to harness AI's potential at scale — this episode unveils the future of cybersecurity at the intersection of talent, technology, and global opportunity. Whether you're navigating third-party risks or seeking competitive edge, you'll walk away with actionable strategies to elevate your security game in a fast-changing world. Join Pukar Hamal for a behind-the-scenes look at how AI, overlooked talent pools, and strategic insights are redefining what's possible in enterprise security. Don't miss this chance to learn from an innovator who's transforming the industry, one questionnaire at a time. www.darkstack7.com

In this episode of the Cyber Security America Podcast, host Joshua R Nicholson sits down with Chris Freedman, CEO of Ondefend, and Ron Frechette, CEO of CyberSurv, for a deep dive into cybersecurity entrepreneurship.

Both guests share their journeys building companies in the cybersecurity space—from early startup challenges to scaling services, building strong company cultures, and navigating the rapidly evolving role of artificial intelligence in security.

Chris discusses how Ondefend identified an opportunity on the preventative side of cybersecurity, focusing on red teaming, vulnerability discovery, and proactive security testing rather than crowded monitoring and incident response markets.

Ron shares his path from executive search into cybersecurity during the early days of HIPAA compliance and how that experience eventually led him to focus on helping small and mid-sized businesses improve cyber hygiene and resilience.

Together, they explore what it really takes to move a cybersecurity company from zero to one—and eventually from one to scale.

In This Episode

• Why cybersecurity remains one of the largest and fastest-growing markets
• The realities of launching a bootstrapped cybersecurity startup
• How partnerships and subcontracting helped scale early services
• Why culture, mission, and hiring the right people matter most
• How AI is transforming cybersecurity services and advisory work
• The growing demand for fractional CIO and fractional CISO leadership
• Lessons learned from scaling consulting and cybersecurity service firms

Key Takeaways

• The hardest stage of building a company is going from zero to your first customers.
• Strong partnerships can accelerate growth when building credibility in cybersecurity.
• AI is rapidly changing how cybersecurity assessments and advisory services are delivered.
• Many organizations are shifting toward fractional cybersecurity leadership models to gain specialized expertise without full-time executive hires.

Featured Guests

Chris Freedman
CEO of Ondefend
Entrepreneur and cybersecurity innovator focused on proactive defense, red teaming, and security testing technologies.

Ron Frechette
CEO of CyberSurv
Serial entrepreneur helping organizations improve cyber hygiene through AI-driven cybersecurity advisory services.

🎧 Listen now on Spotify, Apple Podcasts, or your favorite podcast platform.

#Cybersecurity #InfoSec #CyberThreats #CyberDefense #RedTeam #PenTesting #IncidentResponse #CyberHygiene #DataSecurity #MDR (Managed Detection & Response). Thanks to our show sponsor Darkstack7 Cyber Defense services www.darkstack7.com.

Episode 50 — Cybersecurity Leadership Secrets with MK Palmore

In this milestone episode of Cyber Security America, Joshua Nicholson sits down with Malcolm "MK" Palmore — former FBI cybersecurity executive, Naval Academy graduate, U.S. Marine, and former Director of Security at Google Cloud — for a powerful conversation on leadership, risk, and the future of cybersecurity.

MK shares lessons from leading one of the FBI's largest cyber investigative teams in Silicon Valley, helping shape security strategy at Google Cloud, and advising enterprises through complex cyber risk and digital transformation challenges. This episode goes beyond technology and tools to explore what truly drives successful cybersecurity programs: leadership, decision-making, and strategic clarity.

Key topics include:

• How top CISOs think about cyber risk and executive leadership

• Lessons from FBI cyber investigations and real-world breach response

• The evolution of Zero Trust and cloud security strategy

• AI, emerging threats, and the future of enterprise defense

• Why fractional and strategic cybersecurity leadership is reshaping the industry

• Communicating cyber risk effectively to boards and executives

This episode is essential listening for CISOs, executives, board members, security leaders, and anyone responsible for protecting modern enterprises in an era of accelerating cyber threats.

🎧 Listen to the Cyber Security America Podcast — a cybersecurity podcast focused on real-world incident response, threat intelligence, ransomware, and security leadership.

https://www.youtube.com/playlist?list=PLBl5Ef4QLoa3szw4NGDVZCY0aa1tixnsa

🎙️ Apple Podcasts: https://podcasts.apple.com/us/podcast/cyber-security-america/id1668216285

🎙️Spotify: https://open.spotify.com/show/3wmyUbe1TY5hNl96Q8UFFI

🎙️Instagram: https://www.instagram.com/cybersecurityamericapodcast/

🎙️TikTok: https://www.tiktok.com/@cybersecurityamerica

🎙️X.com: https://x.com/nicholsonj7111

📱 Follow Cyber Security America for short clips and updates:

👤 Host — Joshua R. Nicholson: https://www.linkedin.com/in/joshuarnicholson/

🎙️Cyber Security America on LinkedIn: https://www.linkedin.com/company/cyber-security-america-podcast info@darkstack7.com for show inquires, guest requests, and sponsorship discussions or collaboration ideas or contact us through our website www.darkstack7.com/contact

In episode 49 of Cyber Security America, we explore how Artificial Intelligence is reshaping cybersecurity, Managed Detection and Response (MDR), and modern security operations. As cyber threats grow more advanced, organizations must evolve from reactive defense to proactive, intelligence-driven protection.

📱 Follow Cyber Security America on Youtube for short clips and updates

Featuring Woo An (CEO of Zaun.ai) and Tyler Lackey (AI Security Builder), this episode delivers real-world insight into how AI-native security platforms are improving detection, response, and operational scale across enterprise environments.

We discuss:

• The future of MDR and AI-driven security operations
• How AI agents and automation are transforming incident response
• Shadow AI, data leakage, and governance challenges
• AI security risks, role-based controls, and detection engineering
• Scaling cybersecurity outcomes without replacing security teams
• Real-world enterprise lessons from AI-powered security innovation

Whether you're a CISO, security leader, MDR provider, or cybersecurity professional, this episode provides practical insight into how AI is redefining cyber defense and how organizations can stay ahead of evolving threats.

🎧 Listen to the Cyber Security America Podcast — a cybersecurity podcast focused on real-world incident response, threat intelligence, ransomware, and security leadership.

YouTube Playlist:
https://www.youtube.com/playlist?list=PLBl5Ef4QLoa3szw4NGDVZCY0aa1tixnsa

🎙️ Apple Podcasts:
https://podcasts.apple.com/us/podcast/cyber-security-america/id1668216285

🎙️ Spotify:
https://open.spotify.com/show/3wmyUbe1TY5hNl96Q8UFFI

🎙️ Instagram:
https://www.instagram.com/cybersecurityamericapodcast/

🎙️ TikTok:
https://www.tiktok.com/@cybersecurityamerica

🎙️ X (Twitter):
https://x.com/nicholsonj7111

📱 Follow Cyber Security America for short clips and updates

👤 Host — Joshua R. Nicholson:
https://www.linkedin.com/in/joshuarnicholson/

🎙️ Cyber Security America on LinkedIn:
https://www.linkedin.com/company/cyber-security-america-podcast

📩 For show inquiries, guest requests, sponsorship discussions, or collaboration ideas:
info@darkstack7.com

🌐 Contact via website:
www.darkstack7.com/contact

#CyberSecurity #ArtificialIntelligence #AIinCybersecurity #MDR #ManagedDetectionAndResponse #CyberDefense #SecurityOperations #SecOps #CyberRisk #CISO #CyberLeadership #ThreatDetection #IncidentResponse #SecurityAutomation #AIsecurity #CyberThreats #EnterpriseSecurity #CyberResilience #CyberSecurityPodcast #CyberSecurityAmerica