Exploited: The Cyber Truth

Exploited: The Cyber Truth is a hard-hitting, no-fluff podcast exposing the realities of today’s cyber threat landscape and risks to critical infrastructure. Through candid conversations with top cybersecurity experts, industry leaders, and frontline defenders, the show breaks down recent high-profile vulnerabilities and exploits and covers innovative strategies used to stop them. To keep critical infrastructure safe, defenders need the upper hand. Tune in and get the cyber truth.

Exploited: The Cyber Truth is a education podcast hosted by RunSafe Security, with 52 episodes on record and a Required Pod Score of 80. PitchCentric scores this show on Booking Probability, Listen Score, and live audience signals refreshed every 24 hours.

RunSafe Security hosts Exploited: The Cyber Truth, a education show with 52 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #12

  When Cybersecurity Becomes a Safety Issue: Protecting Autonomous and Critical Systems

  Aug 6, 202630 minS2

  In this episode of Exploited: The Cyber Truth , host Paul Ducklin is joined by RunSafe Security Founder and CEO Joe Saunders and returning guest Hemanth Tadepalli, Senior Cybersecurity and Compliance Manager at May Mobility, to explore why cybersecurity and safety are becoming inseparable as software takes control of vehicles and other critical systems. Drawing on his experience securing autonomous mobility platforms, Hemanth explains how connected vehicles have expanded the attack surface across software, cloud infrastructure, APIs, sensors, AI models, and supply chains. Joe explores how organizations can build resilience into software, protect legacy and resource-constrained systems, and move beyond the costly cycle of finding, patching, and deploying fixes. Together, Joe and Hemanth discuss: Why cyber-physical systems require a different security mindset How autonomous vehicles connect cybersecurity with physical safety Why compliance should be a baseline—not the end goal How AI is changing both cyberattacks and defense Where software resilience and runtime protection fit Why public trust depends on consistency, transparency, and safety How security, engineering, and compliance teams can work together Whether you secure autonomous vehicles, industrial equipment, medical devices, or other critical systems, this episode offers practical lessons for building software that is secure, resilient, and worthy of public trust.

  ListenShow Notes
• 

  Episode #11

  When Cyber Attacks Become Physical: The Truth About OT Security Risk

  Jul 23, 202627 minS2

  In this episode of Exploited: The Cyber Truth , host Paul Ducklin is joined by RunSafe Security Chief Strategy Officer Doug Britton and special guest Andrew Ginter, Vice President of Industrial Security at Waterfall Security Solutions, an author, and a leading voice in OT cybersecurity. Andrew explains why industrial security cannot simply borrow the same tools and practices used in enterprise IT. In OT environments, the physical process is the asset, and malicious information entering the system can become the threat. Doug explores how organizations can reduce exploitability, protect existing software, and maintain deterministic behavior without relying solely on disruptive patching cycles. Together, Doug and Andrew explore: Why OT security must be stronger than traditional IT security How cyber attacks can create real-world safety and operational consequences The risks created by IT/OT convergence How cyber-informed engineering strengthens industrial resilience The role of unidirectional gateways and deterministic protections Why patch management alone cannot keep pace with AI-driven threats For critical infrastructure leaders, engineers, and security teams, this episode offers a practical look at designing industrial systems that remain safe, reliable, and resilient when cyber threats become physical.

  ListenShow Notes
• 

  Episode #10

  When the Grid Gets Hit: Inside OT Incident Response in Energy & Renewables

  Jul 10, 202625 minS2

  In this episode of Exploited: The Cyber Truth , host Paul Ducklin is joined by RunSafe Security CEO Joe Saunders and special guest Derrick Bethea, NERC Compliance Manager and OT Cybersecurity Leader at Cypress Creek Energy, for an inside look at how utilities and renewable energy operators prepare for, respond to, and recover from cyber incidents. Drawing on years of experience securing operational technology (OT) environments, Derrick explains why incident response plans must be tested—not just documented—and how organizations navigate the complex intersection of cybersecurity, regulatory compliance, and operational resilience. Joe explores how AI is changing both cyber defense and attacker capabilities, why legacy infrastructure presents unique security challenges, and how security-by-design and security-by-demand must work together to strengthen the energy sector. Together, Joe and Derrick discuss: Why OT incident response differs from traditional IT security The realities of NERC CIP compliance and regulatory reporting How AI is accelerating vulnerability discovery across critical infrastructure Why security must be part of procurement and engineering decisions The importance of testing incident response plans before an emergency occurs How utilities can balance innovation with operational resilience Whether you secure power generation, renewable energy assets, industrial control systems, or other critical infrastructure, this episode offers practical lessons for strengthening cyber resilience before the next incident occurs.

  ListenShow Notes
• 

  Episode #9

  From Compliance to Resilience: Securing Digital Mission Systems at Military Scale

  Jun 25, 202630 minS2

  In this episode of Exploited: The Cyber Truth , host Paul Ducklin is joined by RunSafe Security CEO Joe Saunders and Lt. Gen. (Ret.) Bill Bender, former Chief Information Officer of the U.S. Air Force, to discuss what it takes to build true cyber resilience across some of the world's most complex digital environments. Drawing on his experience overseeing a $17 billion IT portfolio and helping establish the first Chief Information Security Officer (CISO) and Chief Data Officer (CDO) offices within the Department of Defense, Bender explains why organizations must move beyond checklist-driven security and adopt a mission-focused approach to risk management. Together, they explore: Why compliance alone cannot secure mission-critical systems Building cybersecurity leadership, accountability, and culture at scale Managing technical debt and long-lived systems that cannot easily be replaced The role of Zero Trust in protecting complex defense environments How software supply chains and SBOMs support mission assurance Why public-private collaboration is essential for modernization and innovation The growing impact of AI on cyber defense and critical infrastructure security From defense acquisition to critical infrastructure protection, this episode examines how organizations can strengthen resilience.

  ListenShow Notes
• 

  Episode #8

  Seeing the Invisible: Asset Discovery, Segmentation, and the Reality of OT Security

  Jun 11, 202630 minS2

  In this episode of Exploited: The Cyber Truth , host Paul Ducklin is joined by Shane Fry, CTO of RunSafe Security, and Andrew McPhee, Solutions Manager for Industrial Security at Cisco, to examine why visibility is one of the biggest challenges in OT cybersecurity. As industrial environments become more connected, organizations are struggling to identify unknown assets, understand hidden dependencies, and secure systems that were never designed with cybersecurity in mind. McPhee explains how attackers exploit these blind spots, why traditional IT security approaches often fall short in OT environments, and how visibility and segmentation can help reduce risk. Together, they explore: Why asset visibility is the foundation of OT security How unknown assets and communication pathways create risk The differences between active and passive asset discovery Why segmentation remains one of the most effective OT security controls How IT/OT convergence is expanding the attack surface The role of risk tolerance and risk acceptance in security decisions From manufacturing facilities to critical infrastructure, this episode explores what security teams must understand before they can effectively protect the systems they depend on.

  ListenShow Notes

Recent guests on Exploited: The Cyber Truth. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.