Your New Equipment Just Shipped With Security Risks & Why Your OEM Won't Fix Them

Your New Equipment Just Shipped With Security Risks & Why Your OEM Won't Fix Them

by Dino Busalaki and Craig Duckworth

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 Dino Busalaki and Craig Duckworth 👥 192 📅 January 13, 2026 ⏱ 26 min 👁 253 📄 expert opinion 🧭 2026-08-16
Available in: English (current) Français

Keywords

OT securityOEMICSvulnerabilitiesmanufacturing

Summary

In this episode, Dino Busalaki and Craig Duckworth discuss the security risks associated with new industrial equipment and the challenges of getting OEMs to address them. They introduce the concept of ‘OEM blockade,’ where manufacturers are often prevented from patching or modifying equipment due to warranty concerns. The hosts highlight that new machines frequently ship with numerous unpatched vulnerabilities, often running outdated operating systems like Windows 7. They emphasize the disconnect between IT and OT teams, noting that traditional IT security measures are not always applicable to operational technology environments. The conversation covers the impact of the CrowdStrike incident on plant floors, the lack of due diligence in M&A, and the importance of process integrity. They argue that OT teams must take ownership of their cybersecurity and work with specialized partners who understand the plant floor. The episode concludes with a call for better collaboration between IT, OT, and OEMs to improve security and operational resilience.

156 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable insights into the often-overlooked security challenges in industrial environments. The hosts draw on their extensive experience to illustrate real-world scenarios, such as the prevalence of unpatched vulnerabilities and the difficulties in coordinating between IT and OT. Their argumentation is coherent, emphasizing that OT teams must take proactive steps to secure their systems. However, the discussion is largely anecdotal, lacking empirical data or case studies to strengthen the claims. The hosts also make broad generalizations about IT and OT roles, which may oversimplify the complexities of convergence.

Scientific Rigor, Source Quality, Title Accuracy

The hosts do not cite specific sources, but their credibility stems from their professional backgrounds in industrial cybersecurity. The title accurately reflects the content, focusing on the security risks of new equipment and OEM reluctance to fix them. The discussion is practical and grounded in field experience, though it would benefit from referencing industry reports or standards to enhance its scientific rigor. The video does not include any sponsored content.

175 words

Title / Content Match

The title accurately reflects the core topic: the security risks in new equipment and OEM reluctance to fix them.

Quality & Reliability

7/10

The hosts are experienced OT cybersecurity practitioners, providing practical insights and real-world examples. However, the discussion is largely anecdotal and lacks specific data or references to independent studies, limiting its scientific rigor.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Contribution & Novelties

The video offers a practitioner’s perspective on the ‘OEM blockade’ phenomenon, highlighting the challenges of securing industrial equipment that is often locked down by manufacturers. It emphasizes the need for OT teams to take ownership of cybersecurity and to engage with specialized partners. The discussion on the CrowdStrike incident’s impact on plant floors provides a concrete example of IT/OT convergence risks.

Pour aller plus loin :

  • IEC 62443 — International standards for industrial cybersecurity, relevant for understanding best practices.
  • Virtual patching — A compensating control mentioned in the video to mitigate vulnerabilities without direct patching.
  • IT/OT convergence — The integration of information technology and operational technology, central to the discussion.

110 words

Radar Profile

The radar profile shows a balanced but moderate performance across all dimensions, with slightly higher scores in information quantity and quality. The video is informative and practical, but lacks rigorous sourcing and technical depth, resulting in a moderate overall rating.

Reliability 7/10

💬 No comments were provided for analysis.