Exploited: The Cyber Truth · 2026-07-10 · 25 min
In this episode of Exploited: The Cyber Truth , host Paul Ducklin is joined by RunSafe Security CEO Joe Saunders and special guest Derrick Bethea, NERC Compliance Manager and OT Cybersecurity Leader at Cypress Creek Energy, for an inside look at how utilities and renewable energy operators prepare for, respond to, and recover from cyber incidents. Drawing on years of experience securing operational technology (OT) environments, Derrick explains why incident response plans must be tested - not just documented - and how organizations navigate the complex intersection of cybersecurity, regulatory compliance, and operational resilience. Joe explores how AI is changing both cyber defense and attacker capabilities, why legacy infrastructure presents unique security challenges, and how security-by-design and security-by-demand must work together to strengthen the energy sector.
When Cybersecurity Becomes a Safety Issue: Protecting Autonomous and Critical Systems81 / 100
From Compliance to Resilience: Securing Digital Mission Systems at Military Scale76 / 100
When Cyber Attacks Become Physical: The Truth About OT Security Risk
Seeing the Invisible: Asset Discovery, Segmentation, and the Reality of OT Security
The Cyber-Physical Truth: What We Get Wrong About Attacks on Critical Infrastructure