Off the Wire: A Play by Play on Cybersecurity and Technology Issues

Email Protection for OT Security: Stop Impersonation, Phishing, and Inbox Threats (Series Part 1)

In this Off the Wire Podcast episode (part 1 of a four-part miniseries inspired by the Dragos OT security report), Tanner and Anthony explain why email remains one of the most common paths attackers use to move from IT into OT, highlighting growing sophistication from LLM-enabled spearphishing and simple employee-impersonation attacks using lookalike Gmail accounts. They argue that relying only on built-in Microsoft 365 tools can leave gaps and require heavy manual work, and they outline key capabilities of dedicated email security platforms: behavioral detection, impersonation protection, post-delivery remediation to remove emails from many mailboxes, mailbox visibility, DLP for PII, shadow IT/SaaS discovery, and automated user reporting workflows. They discuss major vendors, compare gateway vs API-based deployments, stress proof-of-concept testing in monitor mode, and preview upcoming episodes on browser protection, third-party remote access, and OT monitoring.

00:00 Impersonation Email Crisis

00:51 OT Report Sparks Mini Series

02:12 Phishing Gets Smarter With AI

03:13 Why Email Is The Weak Link

04:57 Why Built In Tools Fall Short

08:23 Modern Email Security Features

12:36 Break And Subscribe

13:22 Top Vendors And Deployment Models

17:43 How To Evaluate The Right Tool

22:02 Proof Of Concept And Rollout Tips

25:35 Results And OT Security Takeaway

27:23 Final Thoughts And Next Episode

2026 Dragos OT Report: Foreign Adversaries Inside Utility Networks + How to Protect Your OT Environment

In this Off The Wire episode, Anthony and Tanner break down the 2026 Dragos OT report, describing it as sobering and highlighting claims that foreign adversaries are already embedded in U.S. utility networks. They discuss how these actors differ from typical fast-moving ransomware by staying hidden, mapping OT environments, studying SCADA points, alarms, configuration files, and normal process behavior, with detection potentially taking days even in best cases.

The conversation covers attacker specialization and handoffs between teams for initial access, reconnaissance, and exploitation, sometimes involving transactions between groups. They highlight the gap between vulnerability disclosure, patch availability, and exploitation (reported as ~24 days), and emphasize the need for mitigation beyond patching. Visibility is a major theme: only 46% reportedly have OT monitoring, with average detection cited as ~5 days with monitoring versus ~42 days without, often only discovered after something breaks. They discuss why OT is hard to secure (limited logging, fragile legacy systems, insecure protocols like Telnet/LDAP, flat networks, and weak IT/OT separation) and why monitoring helps detect anomalies and insecure traffic. The episode also addresses third-party and remote-access risk, including targeting of engineering firms and edge devices, exploitation of cellular router devices, and the growing reliance on stolen credentials and valid logins (including MFA fatigue), citing a stat that 73% of breaches involve stolen credentials. They note a reported 49% increase in ransomware groups affecting OT, 119 groups targeting OT, and over 3,300 impacted OT environments, with many OT incidents misclassified as IT-only. The hosts recommend focusing on fundamentals: an OT incident response plan, asset inventory, behavior-based monitoring, tight restrictions on remote access, and unique credentials supported by password managers. They announce a five-episode miniseries springboarding from this overview, with upcoming episodes on OT monitoring/visibility, securing users via a secure browser approach, improving email defenses against phishing, and revisiting third-party remote access.

00:00 Dragos 2026 OT Report: Why This One Hits Different

01:24 Adversaries Already Inside: Quiet Recon in Utility OT Networks

02:59 Specialized Attack Teams & Access Handoffs (Initial Access → Recon → Exploit)

05:07 Patch Lag vs Exploit Speed: Why Mitigation Matters in OT

06:24 Visibility Gap: OT Monitoring Stats and Detection Time Reality

07:49 Why OT Monitoring Works: Protocols, Anomalies, and Holistic Context

09:56 Third-Party Remote Access: Vendors, VPNs, Edge Devices, and Cellular Routers

13:07 Valid Credentials Are the New Exploit: Detecting “Legit” Logins

17:06 Ransomware Moves Into OT: Scale, Misclassification, and Rising Risk

18:56 Old Problems Still Breaking OT: Flat Networks, Legacy Protocols, No Segmentation

22:15 Disruption Is the Goal: OT Security Fundamentals to Focus On Now

25:58 Mini-Series Preview + Final Takeaways (Stolen Credentials, Next Episodes)

29:01 Wrap-Up and What’s Next: OT Monitoring & Visibility Episode Teaser

Cost-Saving Strategies for IT: Reports vs Alerts & Beyond | Off the Wire Podcast

In this episode of Off the Wire Podcast, we dive deep into effective cost-saving strategies for IT departments. We discuss the pros and cons of reports versus alerts, the rising costs of technology, and how to make every dollar count. We also share insights on consolidating tools and platforms, justifying hardware and software expenses, and leveraging AI to maximize efficiency. Join us as we explore practical tips to help you save money and optimize resources amidst an environment of increasing costs. Don't miss our real-world examples and actionable advice to streamline your IT operations!

00:00 Introduction Hook: Reports vs Alerts
00:51 Welcome to Off the Wire Podcast
01:07 Rising Costs in Technology
02:14 Cost-Saving Strategies
09:19 Vendor Relationships and Consolidation
11:41 Tool and Platform Consolidation
22:27 Open Source Solutions: Pros and Cons
23:32 The Downside of Open Source Systems
24:28 AI: A Different Paradigm
25:57 Optimizing Hardware Costs
27:16 Support and Warranties: Are They Worth It?
32:34 Vendor Negotiations and Cost Savings
35:53 Auditing and Automating for Efficiency
44:32 Engaging Employees for Cost-Saving Ideas
46:08 Final Thoughts and Recommendations

Preparing for the Storm: Effective Risk Management & Crisis Planning

In this episode of 'Off the Wire,' join Hosts Anthony and Tanner as they discuss the essential strategies for preparing for impending storms, particularly how to handle weather-related crises, with a focus on risk management and maintaining efficiency. Topics covered include the importance of having a storm prep checklist, the necessity of contingency plans, the balance of mitigating risks while maintaining operational flexibility, and the crucial role of effective communication and leadership during a crisis. Listen in for invaluable insights on how to ensure the safety of personnel and continuous operation of essential services during critical events.

00:00 Introduction and Setting the Scene

00:11 Storm Preparation Mindset

01:02 High-Level Storm Preparation Process

01:20 Detailed Preparation Steps

03:20 Importance of Checklists and Risk Assessment

05:37 Technology and Field Operations

08:38 Internet Connectivity During Storms

12:02 Managing Personnel During Crises

19:17 Flexibility and Adjustments During Crises

25:23 Final Thoughts and Tips

29:35 Closing Remarks

Effective Communication: Key Tips for IT and End Users

In this episode of Off The Wire, we dive into the challenges and solutions for effective communication between IT professionals and end users. Through realistic role-playing scenarios, we highlight common issues and frustrations faced when trying to extract necessary details for troubleshooting. Our hosts share actionable advice for both IT personnel and non-IT staff on how to provide clear, specific information, making the problem-solving process more efficient. Tune in to learn useful tips that can improve workflow and response times in your organization.

00:00 Introduction and Initial Problem

00:15 Understanding the Issue

00:47 Challenges in IT Communication

01:52 Effective Communication Strategies

04:26 Generational Differences in IT

06:12 Importance of Detailed Information

09:03 Ticketing Systems and Prioritization

17:33 Role-Playing Scenarios

20:10 Common IT Issues and Solutions

24:01 Final Thoughts and Communication Tips

30:48 Conclusion and Call to Action

Off The Wire: Reflecting on Cybersecurity and Organizational Implementations

In this episode of 'Off The Wire,' hosts Anthony and Tanner reflect on past episodes and discuss the various strategies and innovations they've implemented at their organization. They cover key topics such as cybersecurity, asset management, backup testing, employee mental health, and training methods. The episode dives into specific episodes like 'Low-Cost, High-Impact Cybersecurity Investments,' 'Zero Trust,' and 'Talent Tetris,' providing insights on how they've taken their learnings to enhance their company's safety, efficiency, and employee satisfaction. Join them as they share practical advice, valuable lessons, and their goals for future implementations.

00:00 Introduction and Reflection

01:12 Implementing Crown Jewels Concept

02:12 Zero Trust Network Implementation

03:17 CIS Benchmarks and Hardening Systems

05:20 Talent Tetris: Building the Perfect Team

07:38 Communicating with Leadership

09:52 Remote Access Solutions

13:55 Low Cost, High Impact Cybersecurity Investments

16:50 Backup Testing and Cloud Recovery

19:30 Breaking Up With One and Done Training

22:28 Employee Mental Health and Leadership

27:14 Bonus: Future Implementations

31:18 Conclusion and Final Thoughts

Top 5 Reasons Why Software Projects Fail and How to Avoid Them | Off the Wire Podcast

In this episode of Off the Wire, hosts Tanner and Anthony dive into the top reasons why software projects fail and share practical tips on how to avoid these common pitfalls. They discuss a range of crucial points, including the importance of keeping solutions simple, building strong user rapport, effective communication strategies, comprehensive training, and the value of user input. If you're in the midst of rolling out a new technology project or planning one for the future, this episode is packed with valuable insights to help ensure your project's success. Tune in as they share personal anecdotes, industry best practices, and engage in a thoughtful discussion aimed at improving your project management skills.

00:00 Welcome and Year-End Reflections

00:31 Holiday Chaos and Project Planning

01:20 The Importance of Year-End Reviews

02:10 Discussing Project Failures

02:51 Impact of Failed Projects on Teams

03:29 Balancing Risk and Simplicity in Projects

03:39 Real-Life Example of Project Impact

05:42 Top Five Reasons Projects Fail

06:26 Complicated Solutions and the KISS Method

08:24 Building Rapport and Empathy with Users

10:35 The Final 5%: Completing Projects Fully

13:57 Effective Communication Strategies

17:23 Training and Vendor Reliance

19:27 Quick Response to Issues and Drip Campaigns

21:05 Gathering Feedback and Following Up

21:46 Appreciation and Podcast Growth

23:05 Weak Testing and QA Issues

26:16 Challenges of Rapid Change

29:16 Importance of User Input

32:10 Effective Training Strategies

38:20 Final Thoughts and Community Support

Marketing IT: Making Your Department's Value Known

In this episode, Tanner and Anthony discuss the challenges IT departments face in communicating their value within an organization. They explore methods for showcasing daily work and major projects to both employees and senior leadership. Key topics include effective internal marketing, handling visibility problems, and balancing technology wins with transparency about challenges. The episode also features a fun game where the hosts put each other on the spot to come up with marketing strategies for various IT scenarios. Whether you're struggling with perception issues or looking to improve your communication strategy, this episode offers valuable insights and practical tips.

00:00 Understanding the Importance of Communication in IT

00:48 Common Misconceptions About IT Roles

02:43 The Visibility Problem in IT Departments

03:36 The Impact of Improved IT Systems

05:21 The Role of Security Tools in IT

06:36 The Challenge of IT Perception

10:30 The Importance of Framing Communication

17:30 Sharing Technology Wins and Success Stories

23:25 Celebrating Security Wins

24:18 Importance of Employee Testimonials

26:07 Branding IT Solutions

28:18 Communicating IT's Value to Leadership

30:08 Transparency in IT Struggles

31:26 Effective Metrics and Reporting

33:34 Marketing IT Initiatives

38:10 Interactive Marketing Exercise

45:19 Key Takeaways and Final Thoughts