Shows / Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cybersecurity Under Pressure examines real incidents, technical research and security decisions across industrial systems, railways and connected vehicles. Antonio González connects attack mechanisms with engineering constraints, operational resilience and product-security evidence. Explore OT and ICS security, automotive and railway cybersecurity, software supply chains and the decisions behind secure operations.
Episodes
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Industrial 5G Security: Protecting the Wireless Conduit | CUP Focus
A wireless conduit cannot be protected like a copper port. This CUP Focus connects 5G device identity, subscriber credentials, edge routing and passive…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Railway Diagnostic Security: Protecting Privileged Access | CUP Micro Brief
A railway diagnostic platform may not execute the safety function, but it can expose topology, privileged sessions and a pivot path toward operational assets…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
How Volt Typhoon Weaponizes Active Directory
Volt Typhoon turns trusted administration into a path toward critical infrastructure. This episode examines how stolen credentials, Active Directory compromise…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Industrial Router Security: When SMS Authentication Fails Open | CUP Micro Brief
An industrial router disables SMS password checks after five failed attempts. This CUP Micro Brief examines the availability logic behind the fail-open design…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
SBOM and VEX: Proving Vulnerability Reachability | CUP Focus
Component presence and practical exposure are different facts. This CUP Focus explains how static and dynamic reachability analysis support VEX decisions…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
A Trusted Engineering Workstation Can Still Deploy a Malicious Flow
An unauthenticated flow editor can turn an industrial gateway into a code-execution platform. This episode examines the Siemens SIMATIC IoT2050 Advanced case…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Connected Vehicle Security: From Cloud API to In-Vehicle Control | CUP Focus
The API gateway may validate a remote command while the internal vehicle network accepts it without equivalent checks. This CUP Focus explains why cloud…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
A Station Identifier Is Not Proof of Station Identity
What happens when an EV charging backend accepts a station identifier without proving which station is actually connecting? This episode examines the Monta…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
BLE Vehicle Security: The Risk of a Shared Authentication Key | CUP Micro Brief
Researchers found two million aftermarket vehicle devices sharing one Bluetooth authentication key. This CUP Micro Brief shows how manufacturing convenience…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Vehicle-to-Grid Security: Coordinated Charging and Grid Risk | CUP Focus
V2G can support the energy system, but aggregated charging and discharging also create a coordinated control surface. This CUP Focus follows the path from…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Clean Code Does Not Prove a Safe Process | CUP Micro Brief
Clean code and verified binaries do not prove that a physical process is safe. This CUP Micro Brief explains how attackers can change parameters and references…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
How Reading PLC Data Crashes Industrial Systems
A monitoring function should observe a PLC, not destabilize it. But when diagnostic access, shared buffers and runtime synchronization interact badly, a read…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Industrial 5G Network Slicing: The Limits of Isolation | CUP Focus
A private 5G slice can separate traffic without creating an independent physical network. This CUP Focus examines the SDN controller, hypervisor and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Security Appliance Risks: The Hardcoded Master Key | CUP Micro Brief
A security appliance can become the weakest trust boundary when its vendor embeds an unchangeable master key. This CUP Micro Brief explains why the resulting…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
When a Vendor Breach Hits Spain’s Railway Network
A supplier compromise can reach rail operations without directly attacking signalling or rolling stock. This episode examines what happens when trust placed in…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Third-Party ICS Access: The VPN Is Not the Trust Boundary | CUP Micro Brief
Remote access for an ICS integrator is not merely a VPN configuration. It is a temporary operational trust boundary. This CUP Micro Brief explains why access…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Industrial Switch Security: Enforcing OT Segmentation | CUP Focus
Zones and conduits remain diagrams until network devices enforce them. This CUP Focus examines how a compromised industrial switch can erase VLAN boundaries…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Why Clean Code Causes Industrial Disasters
Can code be easier to read and still make an industrial process less safe? This episode examines why software refactoring in OT must preserve more than…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
How Zero Trust Can Protect a PLC That Cannot Authenticate | CUP Focus
A legacy PLC cannot suddenly gain modern identity controls. This CUP Focus explains how identity-aware proxies can mediate access, translate trusted sessions…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
PLC Patch Management: Why IT Update Cycles Do Not Fit | CUP Micro Brief
Standard IT patch cycles do not map cleanly to deterministic industrial control. This CUP Micro Brief connects real-time constraints, jitter and IEC 62443…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Third-party ICS Access Is an Operational Trust Boundary, Not a VPN Problem
A vendor VPN can establish connectivity, but it does not define what a third party may change inside an industrial control system. This episode examines the…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Automotive Attack Paths: Why Local Does Not Mean Physical | CUP Micro Brief
In automotive cybersecurity, a local attack vector does not necessarily require physical access. This CUP Micro Brief follows a low-privilege infotainment…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Automotive Compliance: Reusing Cybersecurity Evidence | CUP Focus
Parallel compliance programmes drain supplier engineering without necessarily reducing product risk. This CUP Focus explains how one governed evidence chain…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
BYD Shark 6: Remote Access Is Not the Same as Remote Authority
The BYD Shark 6 cybersecurity demonstration raised an important question: when someone gains access to a connected vehicle, how much authority can that access…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Railway Patch Management: Connecting Cybersecurity and RAMS | CUP Focus
In signalling, a technically correct security change can invalidate an established safety case or trigger a fail-safe operational stop. This CUP Focus examines…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Automotive Cybersecurity Evidence: Maintaining Vehicle Type Approval
Cybersecurity evidence cannot stop at the supplier handoff. This episode examines how threat analysis, risk treatment, validation results, configuration…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Vendor VPN Security: Closing Hidden Maintenance Paths | CUP Focus
A VPN can authenticate a supplier while still bypassing the architecture intended to protect production. This CUP Focus shows how flat VLANs, direct Level 1…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Software Supply Chain Provenance: Beyond the Version Number | CUP Micro Brief
A component name and version do not prove provenance. This CUP Micro Brief explains how pedigree, cryptographic hashes and a verifiable chain of custody can…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
SBOM and VEX: Turning Vulnerability Data into OT Risk Decisions
A software inventory cannot tell you which vulnerability threatens production. Explore how SBOM, VEX, exploitability and deployment context support defensible…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
When 40 Milliseconds Become an OT Incident | CUP Micro Brief
Forty milliseconds can turn a wireless disruption into a physical process failure. This CUP Micro Brief connects industrial 5G latency, device isolation and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
The Flashing Station Is a Product Trust Boundary | CUP Focus
A compromised flashing station can turn a factory incident into a fleet-wide product integrity problem. This CUP Focus follows the trust chain from plant…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cyber Resilience Act: Making the 24-Hour Reporting Decision
How do manufacturers make a defensible reporting decision while the technical evidence is still incomplete? Explore decision authority, supplier escalation and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
An Automotive Alert Is Not an Incident Response | CUP Focus
Detection creates a signal, not a decision. This CUP Focus separates the responsibilities of the VSOC and PSIRT, from initial fleet triage and first-mile…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
When Digital Actions Create Physical Impact | CUP Micro Brief
In OT, a digital action can move machinery, interrupt fabrication or weaken detection without obvious warning. This CUP Micro Brief links active scanning risk…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary
An authenticated account can still cross an unsafe privilege boundary. This episode examines SSH exposure, account governance and command injection in the…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
When EV Charging Becomes a Cyber-Kinetic Risk | CUP Micro Brief
An EV charging cable initiates a cloud-connected transaction with physical consequences. This CUP Micro Brief follows the path from complex connectivity…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
A Clean Backup Does Not Prove a Safe Restart | CUP Focus
Restoring files is not the same as restoring operational confidence. This CUP Focus explains why an OT restart requires trusted control logic, known-good…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Railway Cybersecurity: Why Attack Detection Does Not Prove Safety
Detecting a railway cyberattack does not establish that the physical system remains safe. Explore IAM4RAIL and the evidence needed to connect detection…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
What Actually Starts the CRA 24-Hour Clock? | CUP Micro Brief
Not every vulnerability starts the Cyber Resilience Act reporting clock. This CUP Micro Brief explains the two triggers, why reachability and VEX matter, and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Espressif Secure Boot: Where Firmware Trust Can Break
Secure boot validates part of a trust chain, not every condition that makes a device trustworthy. Explore Espressif AR2026-006 and the boundaries of firmware…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
When a License Plate Becomes a Password | CUP Micro Brief
A public vehicle identifier became the starting point for a remote attack chain. This CUP Micro Brief connects the Kia API flaw, the disappearance of the…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
NIST IR 8536: Verifying the Software Supply Chain
A supplier register identifies companies but does not prove the provenance of the software they deliver. Explore NIST IR 8536 and the evidence needed to trace…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Automotive Cybersecurity: Why Local Access Can Have High Impact
A local attack vector does not establish low impact, but it also does not prove remote access to safety-relevant vehicle functions. Explore Qualcomm Snapdragon…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Siemens S7-1500: Managing PLC and Linux Security Lifecycles
One PLC can contain software components with different security lifecycles. Explore the SIMATIC S7-1500 Linux subsystem and the operational consequences of…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Chip Security Assurance: Making Silicon Security a Design Gate
Semiconductor development uses formal gates for functionality, timing, power and physical implementation. Explore security sign-off as another condition to…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Johnson Controls Airwall: The Risk Behind a Hardcoded Key
A hardcoded cryptographic key can undermine the trust assumptions of an embedded security architecture. Explore the Johnson Controls Airwall case through key…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
NSA ASIC Assurance: Verifying Trust in Silicon
Software provenance is only part of supply-chain assurance. Explore NSA guidance for Application Specific Integrated Circuits and the evidence needed to…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
BLE Theft Auto: How Aftermarket Devices Bypass Vehicle Security
A vehicle can acquire a new attack surface after it leaves the factory. Explore BLE Theft Auto research into aftermarket Bluetooth Low Energy remote-control…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Weidmüller Router Security: When Segmentation Becomes an Attack Path
What happens when the device enforcing industrial segmentation becomes part of the attack path? Explore the Weidmüller case through trust boundaries…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Frauscher FDS102: Securing Railway Diagnostic Access
Railway diagnostics can reach assets and functions that deserve explicit security boundaries. Explore the Frauscher FDS102 case and the role of maintenance…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Siemens Siveillance: When Edit Access Enables Code Execution
Edit permissions inside an application can become code execution at the service layer. Explore Siemens Siveillance Video through Management Server API access…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
PLCnext Vulnerabilities: Assessing the Real OT Attack Path
A critical vulnerability rating does not explain whether an attacker can reach the affected function in your plant. Explore PLCnext risk through deployment…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Automotive Intrusion Detection: When Blocking an Attack Is Unsafe
Detecting a cyberattack inside a moving vehicle is only the beginning. The harder question is what the vehicle should do once malicious traffic has been…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Automotive Software Updates: Securing the Firmware Delivery Path
Automotive malware does not always begin with an unknown vulnerability. Explore an infection chain targeting Android-based automotive head units and software…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Siemens S7 PLC Security: How AI Changes Attack Feasibility
Artificial intelligence is changing the economics of industrial cyberattacks. Explore how AI coding assistants and Python-Snap7 can reduce the expertise needed…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Industrial Firewall Security: The Hidden Software Lifecycle
An industrial firewall can remain supported as hardware while inheriting software risk from another supplier. Explore Fortinet software within Siemens…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Railway API Security: When Authenticated Data Contradicts Reality
A railway API can authenticate data correctly and still deliver an operationally wrong result. Explore the distinction between proving where data came from and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
AI Welding Inspection: Why Software Integrity Is Not Process Integrity
A welding robot can execute trusted software and accept authorized commands while producing the wrong physical result. Explore the difference between digital…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Bendix EC80 Recall: Balancing Urgent Repair and Cybersecurity
A brake recall creates pressure to act quickly on a physical safety problem. Explore the Bendix EC80 case through the cybersecurity controls protecting a…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Railway AI Supply Chains: Managing Subcontractor Data Leaks
Protecting a railway system does not establish that its subcontractors protect the information supporting it. Explore railway AI supply-chain risk through…