Some of the biggest cybersecurity threats to critical infrastructure aren't new - they've simply never gone away.
In this episode of Protect It All, host Aaron Crow welcomes back Lesley Carhart for a fascinating conversation about why decades-old malware like Conficker continues to infect operational technology (OT) environments around the world.
Drawing on nearly two decades of industrial incident response experience, they share real-world stories from the front lines of critical infrastructure, explaining why legacy systems, operational constraints, and workforce shortages continue to make remediation incredibly challenging. The discussion goes far beyond "just patch it," exploring the difficult risk decisions organizations face when uptime, safety, and cybersecurity all compete for priority.
Aaron and Lesley also examine one of the industry's most pressing issues: the growing shortage of OT cybersecurity talent and the need to rebuild foundational technical skills for the next generation of defenders.
Key Learnings:
- Why malware like Conficker still exists in modern OT environments
- The unique challenges of removing malware from industrial control systems
- Why patching isn't always possible in operational technology
- How legacy infrastructure creates long-term cybersecurity risk
- The growing OT cybersecurity skills gap - and how the industry can address it
- Practical lessons from real-world industrial incident response
Key Moments:
05:47 Challenges with Old Industrial Systems
06:58 Struggles with malware cleanup
11:02 Challenges in Cyber Security Careers
16:19 Dealing with malware spread
17:53 Managing infection risk long-term
23:04 Challenges with nuclear hardware upgrades
27:05 Training the Next Tech Generation
29:33 Importance of Computer Basics
34:04 Discovering hidden technical issues
37:01 Troubleshooting in industrial environments
39:10 Malware and botnets era
42:20 Developing low-touch security solutions
Whether you're responsible for manufacturing, utilities, energy, transportation, or any critical infrastructure environment, this episode provides practical insight into one of OT cybersecurity's longest-running challenges.
Tune in to discover why yesterday's malware is still creating today's biggest industrial cybersecurity problems - and what organizations can do about it.
About the guest :
Lesley Carhart is a Principal Industrial Incident Responder at Dragos and a recognized expert in OT and industrial cybersecurity. With nearly two decades of experience in incident response, digital forensics, and threat hunting, they help organizations defend critical infrastructure from cyber threats targeting industrial control systems. Lesley is also a respected speaker, instructor, and advocate for cybersecurity education, regularly sharing their expertise with industry professionals and the next generation of defenders.
How to connect Lesley:
LinkedIn: https://www.linkedin.com/in/lcarhart/
Youtube: https://www.youtube.com/user/hacks4pancakes
Bluesky : https://bsky.app/profile/hacks4pancakes.com
Instagram: https://www.instagram.com/hacks4pancakes/
Website: https://tisiphone.net/
Learn more about PrOTect IT All:
- Email: info@protectitall.co
