Episode
Critical Infrastructure Risks
- Podcast
- Easy Prey
- Published
- Feb 11, 2026
- Duration seconds
- 2321
- Processing state
not_requested- Canonical source
- https://www.easyprey.com/310
Actions
POST https://stenobird.com/v1/public/podcasts/easy-prey-456730/episodes/critical-infrastructure-risks/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/easy-prey-456730/critical-infrastructure-risks.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
Most cybersecurity conversations focus on stolen data, breached accounts, and attacks that live entirely on screens. This episode looks at a far more consequential threat: what happens when cyberattacks target the physical systems that keep society running. Power, water, transportation, and manufacturing. When those systems fail, the consequences aren't just digital. They're immediate, visible, and sometimes dangerous. My guest is Lesley Carhart, Technical Director of Incident Response at Dragos, a cybersecurity firm focused exclusively on protecting critical infrastructure. Lesley specializes in industrial control systems and operational technology, investigating real-world attacks against power plants, water systems, transportation networks, and industrial facilities built on aging, irreplaceable technology. We talk about why these environments are uniquely vulnerable, how ransomware groups and nation-state actors quietly gain long-term access, and why many compromises go undetected for years. The conversation also explores the limits of traditional cybersecurity thinking, the real-world constraints operators face, and what organizations can realistically do to improve security when failure isn't an option. Show Notes: [01:30] Lesley Carhart is here and explains what operational technology is and why industrial systems are uniquely vulnerable [03:40] How decades-old computers still run power plants, water systems, and transportation infrastructure [06:10] Why industrial environments can't simply patch, upgrade, or shut systems down [08:25] The mindset shift required when safety and continuity matter more than stopping an intrusion [10:40] Why air-gapped systems are mostly a myth in modern critical infrastructure [13:15] How remote access became unavoidable—and one of…