Episode 131
Is AI Becoming Your Plant Floor's Biggest Vulnerability?
Craig and Dino dig into the widening gap between IT and OT and why the plant floor keeps getting left behind.
Chapters
- 00:00:00 — AI Enters the OT Battlefield
- 00:01:30 — Why IoT Is Creeping Onto the Plant Floor
- 00:03:30 — Printers, Cameras, and the Default Passwords Nobody Owns
- 00:06:00 — Dragos, Phosphorus, and the Managed Services Question
- 00:08:00 — How AI Lowers the Bar for Attacking Control Systems
- 00:09:40 — Stuxnet Then vs. AI-Powered Attacks Now
- 00:12:00 — The Laptop in the Plant: Contractors, USBs, and Open Networks
- 00:16:00 — Frameworks on Paper vs. Reality (IEC 62443 & NIST 800-82)
- 00:19:00 — Tripping Over Dollars to Pick Up Nickels
- 00:24:00 — Short-Tenure CISOs and Why You Shouldn't Go It Alone
Show notes
Craig and Dino dig into the widening gap between IT and OT and why the plant floor keeps getting left behind.
They break down what Dragos ' acquisition of Phosphorus signals for the future of IoT security in manufacturing, from cameras and label printers to X-ray inspection systems that ship with default passwords and almost never get patched.
The conversation gets sharp on artificial intelligence: the same models helping plants work smarter are now lowering the barrier for attackers, putting Stuxnet-style capabilities into the hands of people who lack the resources and sophistication that nation states once needed.
Craig and Dino expose the everyday habits that leave operations vulnerable, including system integrators plugging personal laptops straight into production networks, locked USB ports that solve only half the problem, and remote access so wide open that a single entry point can expose an entire plant.
They argue that nobody truly owns OT cyber hygiene, that frameworks like IEC 62443 and the NIST 800 82 series get named in RFPs but rarely enforced, and that leaders keep tripping over dollars to pick up nickels by choosing the cheapest bid over real protection.
It's a candid, experience-driven look at why industrial security moves so slowly and what plant leaders, engineers, and security teams can actually do about it.
Chapters:
- (00:00:00) - AI Enters the OT Battlefield
- (00:01:30) - Why IoT Is Creeping Onto the Plant Floor
- (00:03:30) - Printers, Cameras, and the Default Passwords Nobody Owns
- (00:06:00) - Dragos, Phosphorus, and the Managed Services Question
- (00:08:00) - How AI Lowers the Bar for Attacking Control Systems
- (00:09:40) - Stuxnet Then vs. AI-Powered Attacks Now
- (00:12:00) - The Laptop in the Plant: Contractors, USBs, and Open Networks
- (00:16:00) - Frameworks on Paper vs. Reality (IEC 62443 & NIST 800-82)
- (00:19:00) - Tripping Over Dollars to Pick Up Nickels
- (00:24:00) - Short-Tenure CISOs and Why You Shouldn't Go It Alone
Links And Resources:
- Want to Sponsor an episode or be a Guest? Reach out here.
- Industrial Cybersecurity Insider on LinkedIn
- Cybersecurity & Digital Safety on LinkedIn
- BW Design Group Cybersecurity
- Dino Busalachi on LinkedIn
- Craig Duckworth on LinkedIn
Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!
Full transcript
[00:00:00] Amplafy Media: And what's going on, fam? My name is Hector Santi. Steon. If you are wanting to make more content in less time, I want you to watch this video. for much of the last decade I've been trying to help businesses to grow and scale their business through media and content.
[00:00:15] Amplafy Media: , And on this video I'm gonna get into how we are leveraging ai specifically what's called Hermes and a new agent platform to basically create videos for us, uh, at scale for almost pennies on the dollar. And so once you get all of this set up right, there's a, another video for how to set up Hermes, um, and how to, you know, get it going.
[00:00:36] Amplafy Media: But once you actually get it set up, you can create. And give it different skills and different, uh, personalities and you can give it different, uh, tools that it can utilize to do almost whatever it is that you want. And so my background was podcasts and media and content creation. And so for years we would spend hours and hours creating clips and creating these shorts. for almost a decade have, we've been clipping things and it's becoming more and more popular today, but taking a long form piece of content, like a podcast or a live stream or a YouTube video or a speech or something like that, and then finding the best clips and finding the best parts of segment And then clipping it down to the best 60 seconds or 90 seconds, and it's gone through all of these iterations where they were throwing captions on there and then there were, things sort of blowing up on the screen and, had all of these different ways. And I think now people are sort of just settling on just good content.
[00:01:34] Amplafy Media: Right. Which I'm excited about because that's actually, at least for me, that seems to be the easiest thing. but doing it at scale. always took time because even for me, I was pretty proficient in some of these tools and even some of the tools like a Descript or like a Premiere Pro.
[00:01:53] Amplafy Media: And I know my way around those tools. I've spent hours and I've, probably gotten my 10,000 hours across the variety of different platforms. But even still. it would take me a half hour, 45 minutes to knock out three or four clips, and that's a, a significant amount of time, right? And so even for me working as quickly as I can, it didn't always, I wasn't able to do it really at the scale and at the output that I wanted to because today, there are channels that are posting 5, 10, 15 times a day.
[00:02:27] Amplafy Media: And so to be able to compete with that sort of volume, is just hard to do it all alone. And so. This is just a really long preamble to figuring out, you know, why I created this particular profile, which I call my create profile here in, uh, in my Hermes agent. And so I've been working on this for. A number of weeks now is really how long the, the, the agent has been going.
[00:02:52] Amplafy Media: And what's great about this particular setup is that it continues to grow and it continues to iterate and it continues to learn. And I'll, I'll share with you one of the things about ai and one of the things that I realized early on about ai. Was that at the beginning? It might actually take longer to do than if I would've just done it normally.
[00:03:14] Amplafy Media: And because I remember early on when I was working through this clip creation process, uh, what ended up happening was. There was a lot of back and forth and there was a lot of mistakes that were happening and, uh, things that just needed to be adjusted, you know, back and forth. Very similar to what you might do with a new, you know, hire or a new employee is, you know, they bring you something and you say, Hey, you know, adjust this, adjust that, change this, change that.
[00:03:39] Amplafy Media: And then they give you another, you know, they come back with another round and you do the same thing hopefully until it passes your standards. And that sort of happened at the beginning with. Um, you know, with this agent, and I've done that and that the challenge is, is that with a lot of AI agents and a lot of, excuse me, with a lot of AI interfaces, a lot of chat AI programs that today, ch.
[00:04:04] Amplafy Media: open AI chat, GPT, Claude, all of these things, they were chat interfaces. And so you told it something and then maybe it sort of remembered it if you put it in a project or if had some sort of, file system or had some sort of a way to remind it, but it wasn't really good at really improving anything, let alone actually improving at creating something.
[00:04:30] Amplafy Media: But when you strap what's called a, Hermes is, called a harness. And it's basically, I have these, these models here. If you look down at the bottom, I'm running an an owl alpha model from open router. And, and it's just a, you know, it's like a. It's like a, um, you know, a 5.5 or it's like a Codex or it's like a, a Claude, you know, haiku or you know, these sort of models.
[00:04:56] Amplafy Media: It's just a different model, but a harness sort of straps onto this model. And it's a, it's a set of instructions, right? If a model is like an engine, the car, the car's super computer is sort of like this harness that tells it how to run the engine that tells it how to run, all the different parts of the car.
[00:05:12] Amplafy Media: And obviously not a car guy, but you get what I'm saying in the sense that. This harness, you strap on top of a, of a model. the model knows how to run things, the harness tells it what to run, and all of a sudden you've got, the beginnings of a really cool AI system, what Hermes does on top of that, right?
[00:05:34] Amplafy Media: Because there's some things out there right now and, clot and even chat, GPT, you could say that those are, kind of like a harness already. What Hermes really allows and what makes it different is what's, what's called this persistent memory. And, and basically it just allows it to have a memory base that it can continue to learn and iterate upon.
[00:05:54] Amplafy Media: And going back to my video creation example and going back to comparing it to like a new employee or a new contractor that you're bringing on. What was really interesting is over the last really several days as I've continued to work with it and I've continued to tell it to improve itself, I almost had to do no edits. at the very beginning I had to make an edit, an edit for almost every single video. And it would gimme back five to six to sometimes seven videos, and I would have edits for every single one. Now, I don't have any edits on there, or almost no edits on there.
[00:06:26] Amplafy Media: sometimes an occasional one I'll, I'll tell it to, to make this sort of adjustment, but it was really cool to see. AI's starting to learn what it is that I wanted. And it was learning, my standards, my processes. I had to tell it at the beginning, do this, do that, take off this, take off that, use these modalities.
[00:06:47] Amplafy Media: But what was great is that it learned it, it remembered it, and it continued to do that. And so now we can sort of move forward and expand upon it. So, um, here I asked my, uh, my, uh. My create profile you can create these profiles that have very specific skills. And so my Kreate profile is the one that's responsible for, he's like my creative person. It's like , my graphic designer and videographer.
[00:07:12] Amplafy Media: Like all sort of wrapped into one. I have, uh, hype, which is more of like my copywriter and like my social media strategist and, and he's not really a guy. Maybe he is. I don't know. Um, I have my AMP asked, which is AMP assistant. This is my, you know, my.
[00:07:28] Amplafy Media: Executive assistant for my podcast and media repurposing company. And then I've got my main profile, which sort of handles everything and, and you know, sort of is the InBetween, all these different profiles. But in any case, the create is here to be my, um. Be my designer, be my developer, be my creator. So I have an idea, I tell it to make something.
[00:07:50] Amplafy Media: And so you'll see it can create, clips and shorts. we can also create, like, review pages and websites, for all of the things that we're doing. it can create LinkedIn carousels and PDFs. Obviously design and visuals, HTML, mockups, landing pages, pitch deck, sales decks, all those sorts of things we've made here.
[00:08:13] Amplafy Media: And then what's also nice about it is it can talk to all of the rest of my, databases and tools and so it can go into my notion databases and make adjustments and make changes there. And so an example for us is like we had it, earlier today. We had it create. A, uh, we had to create a number of videos that we were gonna be using to promote an episode that we recently published.
[00:08:39] Amplafy Media: And so it created seven videos from an episode. It pulled it, it clipped it, then it went and it threw, and it created, um, then it went into notion, created individual promotions in our database, for each of those. . But I want show you what we worked on a little earlier.
[00:08:54] Amplafy Media: . And so you'll see here what I did is I actually asked it to, I gave it our, our source file. And so it grabbed and it went in and got the video. And then you'll see here that, um, it went through and it created a number of shorts here, uh, for us.
[00:09:08] Amplafy Media: And let's see if we can, you know, make these a little bit bigger here. And this is from one of the episodes that we are, um, that we just published. So here are some of the videos, but that's really, those are cool and that's great.
[00:09:22] Amplafy Media: But we also wanted to get them into our notion here. And so you'll see that we have
[00:09:29] Amplafy Media: So you'll see here that uh, all of these here are the ones that just got dropped in. They have the video URL that got created. And so it's on a review dot Amplify link and just allows us to, to publicly host it, um, which is nice. And then we can go in here and because it's a notion we can use notions, AI and write our captions.
[00:09:50] Amplafy Media: Uh, as well. Um, and so that's really cool. And then what we did is for the guests that came on, we actually created a nice little page for them called, uh, you know, like a review page. And let's see, that's right here. So this is, again, super simple. Really what we wanted to do is we just wanted the guests to be able to download all of the videos here. I think that's what all. And, you know, access them. And it's a, a little link back to our, our services. Um, you know, it's sort of branded for our company. But again, this was all created from just chatting with this tool here that is, is taking a little long today 'cause it knows that I'm watching.
[00:10:30] Amplafy Media: But, um, all of those things were just done through a chat interface. I was able to, um. Upload a file I gave you, had some pre-programmed skills that it, uh, I gave it to know how to work with the video and such. Um, you know, I gave it some prompts to be able to find the best sort of clips, you know, how to process for how it found those clips.
[00:10:54] Amplafy Media: Uh, but ultimately. I was able to do it right there through just the, uh, the Hermes agent all in there, in that terminal. And some people are really afraid of that terminal. And, uh, I was for, uh, a bit at the beginning, but I'll, I'll, I'll share with you that it can actually make things much simpler when you just have one, One box to fill and you know, everything comes in and out of that. So, although there is a little bit of adjustment, and I don't think it's gonna stay like that for everybody who likes sort of the graphical interface, but the command line interface, which is called the CLI, which is sort of what that is, is um, you know, it is a, definitely a focusing place, but it's definitely not limiting in that regard.
[00:11:33] Amplafy Media: It's definitely not limiting in your ability because what's nice is that it can do. Um, just about anything else that, that, you know, any other AI agents can do. Um, you know, just take some sort of figuring out and setting up. So hopefully this just gave you some ideas, just sparked your, your interest and your, your palette, if you will, and what's possible with, uh, with AI and, and how it can be used for good.
[00:11:59] Amplafy Media: You know, there's so much talk about AI being sort of the end of the world and how it's going to replace people and, and all that sort of stuff. And I think that, it's really, it just behooves us as my wonderful Mrs. Coonan my second grade teacher would say it, it behooves us to, to learn how to use it so that we're not left behind because, um, you know, things are, are gonna be changing and, uh, if we can figure out how to leverage it for, for good and for our good.
[00:12:30] Amplafy Media: as well as the collective. Then, then why not the better? So make sure you hit that follow subscribe button, like it, whatever it is that, uh, you do on wherever platform it is that you are watching this. And if you made it this far, uh, thank you so much for being here. We'll see you on the next one.
About Industrial Cyber Security Insider
Industrial Cybersecurity Insider brings clarity to one of the most urgent gaps in manufacturing and critical infrastructure: the divide between IT and OT. Hosts Craig and Dino talk with plant leaders, engineers, and security practitioners about protecting industrial operations in the real world — practical conversations for the people responsible for keeping production running and secure.