Episode #47
Critical infrastructure hacks and rogue AI agents
Summary In this episode of the Blue Security Podcast, hosts Andy Jaw and Adam Brewer discuss the recent cyberattacks on water systems in Minnesota, attributed to Iran-linked hackers. They explore the vulnerabilities of programmable logic controllers (PLCs) and the broader implications for operational technology (OT) security. The conversation delves into the differences between Iranian and Chinese cyber threats, the limitations of traditional security measures, and the cultural challenges faced by cybersecurity professionals in securing OT environments. The episode concludes with key takeaways and recommendations for improving security in municipal utilities. The conversation delves into recent AI security incidents involving OpenAI and Anthropic, highlighting the implications of these breaches and the need for better operational discipline and regulatory frameworks. The speakers discuss the maturity of AI companies, the human errors leading to security lapses, and the potential risks associated with AI models. They emphasize the importance of treating AI testing environments with the same seriousness as production environments and call for standardized incident reporting in the AI sector.---------------------------------------------------- YouTube Video Link: ---------------------------------------------------- Documentation: https://cybernews.com/security/minnesota-water-systems-cyberattack-iranian-hackers/ https://thehackernews.com/2026/08/over-4400-rockwell-plcs-exposed-online.html https://www.techspot.com/news/113281-openai-rogue-ai-agent-did-more-than-hack.html https://thehackernews.com/2026/08/claude-mythos-5-tried-to-backdoor-real.html https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing ---------------------------------------------------- Contact Us: Website: https://bluesecuritypod.com Bluesky: https://bsky.app/profile/bluesecuritypod.com LinkedIn: https://www.linkedin.com/company/bluesecpod YouTube: https://www.youtube.com/c/BlueSecurityPodcast ----------------------------------------------------------- Andy Jaw Bluesky: https://bsky.app/profile/ajawzero.com LinkedIn: https://www.linkedin.com/in/andyjaw/ Email: andy@bluesecuritypod.com ---------------------------------------------------- Adam Brewer Twitter: https://twitter.com/ajbrewer LinkedIn: https://www.linkedin.com/in/adamjbrewer/ Email: adam@bluesecuritypod.com
