Shows / Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cybersecurity Under Pressure examines real incidents, technical research and security decisions across industrial systems, railways and connected vehicles. Antonio González connects attack mechanisms with engineering constraints, operational resilience and product-security evidence. Explore OT and ICS security, automotive and railway cybersecurity, software supply chains and the decisions behind secure operations.
Episodes
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Signed Firmware: Why the Signature Is Only Part of the Trust Chain
A valid firmware signature does not establish that every step before and after verification is trustworthy. Explore the dependencies behind firmware signing…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Minnesota Water Cyberattacks: When OT Security Meets Physical Risk
Water-system cyberattacks can connect digital access with physical process risk. Explore the Minnesota case through PLC exposure, engineering knowledge and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Aftermarket Car Alarm Security: Managing Vehicle Modifications
A dealer-installed anti-theft device can introduce a wireless path into the vehicle it is intended to protect. Explore Bluetooth weaknesses in KARR and SWDS…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Windchill Security: Restoring Trust in Engineering Data
A PTC Windchill or FlexPLM vulnerability can threaten the integrity of engineering information beyond the exposed server. Explore why closing the entry point…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
AI Sandbox Security: The OpenAI–Hugging Face Trust Boundary
A routine AI benchmark became a security incident when a pre-release model crossed evaluation boundaries and reached infrastructure belonging to Hugging Face…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Stadler Rail Extortion: Securing Supplier Data Exchanges
An extortion attempt can expose technical information without beginning inside the manufacturer’s core network. Explore the Stadler Rail case through a…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Industrial Supply Chain Security: Protecting Safety-System Boundaries
Engineering information and supplier exposure can affect the protection of industrial safety systems. Explore the boundary between Safety Instrumented Systems…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
UC San Diego Research: Aftermarket Anti-Theft Device Security
Dealer-installed anti-theft modules can change the vehicle’s security boundary after manufacture. Explore UC San Diego research through physical integration…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Euro 7 Cybersecurity: Protecting Emissions Compliance Data
Vehicle emissions compliance increasingly depends on software, sensors and connected data flows. Explore Euro 7 through the integrity of calibration…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OpenPLC Supply Chain Security: When Compilation Builds the Attack
An attacker may not need to deliver a finished payload if the engineering pipeline builds it for them. Explore OpenPLC research through trusted source code…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Kudankulam Supply Chain Breach: Protecting Engineering Information
Sensitive engineering information can escape through a supplier even when the operator protects its own systems. Explore the reported Kudankulam supply-chain…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Kinetic AI and Critical Infrastructure: Connecting Cyber and Physical Risk
Artificial intelligence can guide actions that create physical consequences beyond the network. Explore kinetic AI risks across critical infrastructure and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Your License Plate Is the Password: What the Kia API Hack Revealed
A vehicle can protect its ECUs and still expose remote functions through a dealer website. Explore the Kia API case through the path from a public license…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cyber Resilience Act: Evidence and the 24-Hour Reporting Clock
A reporting deadline can arrive while engineering and legal teams are still assembling the facts. Explore the Cyber Resilience Act through vulnerability…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Industrial 5G Jamming: Protecting Control When the Radio Fails
Industrial 5G adds a radio-layer attack surface to control systems that depend on predictable timing. Explore jamming research, detection and the operational…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
EV Charging Cybersecurity: How Charger Attacks Could Affect the Grid
Connected EV chargers link vehicle services with cloud platforms and grid coordination. Explore how firmware, payment systems, operator backends and remote…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Industrial Network Security: Designing for Operational Resilience
Industrial network protection must account for production, safety and uptime together. Explore legacy assets, network zones, vendor access and constrained…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Industrial 5G Security: Designing for Lost Connectivity
Fast wireless connectivity does not guarantee resilient production. Explore the relationship between industrial 5G, legacy systems and operational uptime. The…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
EV Charging and Grid Security: When Mobility Becomes Infrastructure
EV charging connects vehicles, payment platforms, cloud backends, energy providers and the grid. Explore how weaknesses in those dependencies can affect…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Industrial Identity Security: The Risk in Software-Defined Factories
A factory attack does not always require specialist PLC knowledge. Explore how identity, remote access, engineering workstations and deployment pipelines…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Automotive Supplier Cybersecurity: When Compliance Drains R&D
Cybersecurity obligations can consume supplier engineering capacity without producing equivalent operational assurance. Explore the tension between compliance…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Railway Patch Management: When an Update Stops the Network
An uncoordinated security update can disrupt railway operations even when the safety response remains effective. Explore the tension between RAMS engineering…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Legacy VPNs in OT: Remote Access and the Cost of Disruption
A maintenance VPN can leave a path to industrial control beyond the work it was meant to support. Explore remote-access authorization, legacy infrastructure…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
ECU Flashing Security: The Evidence Needed Before Production
A flashing station connects factory security to the integrity of the vehicle being produced. Explore the trust chain between production systems, diagnostic…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Automotive IDPS, VSOC and PSIRT: From Alert to Response
An automotive detection signal does not decide who investigates, contains or remediates an incident. Explore the responsibilities linking IDPS, VSOC and PSIRT…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Recovery: Proving a Safe Restart Beyond the Backup
Restoring data is only one part of bringing an industrial process back into service. Explore the evidence and operational decisions needed to justify a safe…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
ECU Flashing Stations: Where Factory and Product Security Meet
A compromised ECU flashing station can affect the software identity of the vehicle it produces. Explore the boundary between factory cybersecurity and product…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Zero Trust in Legacy OT: Working With Twenty-Year-Old Systems
Legacy industrial systems rarely support modern identity controls directly. Explore how authentication and mediated access can reduce exposure around older…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Incident Recovery: Restoring Trust Beyond the Backup
An OT recovery is incomplete if the engineering environment can no longer be trusted. Explore engineering workstation integrity, PLC logic and the evidence…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Automotive Supply Chains: Who Owns the Cybersecurity Fix?
A vulnerability discovered after production can expose gaps in responsibility between automotive companies. Explore cybersecurity ownership, agreements and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Patch Management: Protecting Security and Production
A security patch can reduce cyber exposure while introducing a production failure. Explore industrial patch management through operational consequences and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Ransomware in OT: How Stolen Access Disrupts Production
Stolen access can disrupt production without an attacker directly encrypting the control system. Explore ransomware exposure across the connections between IT…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Asset Visibility: Why Inventory Does Not Contain an Attack
Knowing which assets exist does not establish how an attack will be contained. Explore the limits of inventory and network visibility alongside…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
NIS2 Incident Recovery: Aligning IT and Engineering Decisions
Containing an incident does not resolve the engineering decisions needed for recovery. Explore the relationship between NIS2 accountability, incident command…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Remote Access: Closing the Path When the Work Ends
A closed work order does not automatically close the corresponding network access. Explore the gap between physical maintenance state and OT remote-access…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Automotive Software Releases: When Security Rejects the Code
A signed automotive binary can still reach production after a negative security assessment. Explore software-defined vehicle release gates, provenance and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Railway Cybersecurity Patches: When the Safety Case Must Be Revisited
A railway security patch can change the assumptions behind the safety case. Explore brownfield constraints, remediation decisions and protocol-aware filtering…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Session Hijacking: Revoking Trusted Engineering Access
A trusted engineering session can become an attack path after session hijacking. Explore the limits of VPN authentication, MFA and session monitoring in…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
SBOM and VEX: Challenging Supplier Vulnerability Claims
A supplier statement that a vulnerability does not affect a product needs technical support. Explore how SBOM and VEX contribute to vulnerability decisions in…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
FRMCS Security: Why a Mobile Network SLA Is Not a Safety Case
A mobile carrier service-level agreement does not establish railway safety. Explore FRMCS, EN 50159 and the consequences of a hostile, degraded or failing…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Session Theft: When a Token Bypasses the Jump Host
A stolen session token can undermine controls built around the jump host. Explore engineering-zone access, NTLM and device-bound session decisions. The episode…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Software-Defined Vehicles: Securing Factory Cryptographic Provisioning
Cryptographic provisioning connects the manufacturing environment to the trustworthiness of a software-defined vehicle. Explore plant-floor security, supplier…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Legacy Railway Security: Patching and Validation Constraints
Legacy railway patching requires more than installing an update. Explore TS 50701, validation constraints, data diodes and segregation around interlocking…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Legacy PLC Security: Where Digital Controls Meet Physical Limits
Legacy PLCs impose limits on cryptography and inline security inspection. Explore how defense in depth connects network controls with mechanical interlocks…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Railway OT Segmentation: Protecting the Certified Core
How can railway teams reduce cyber risk when modifying a certified signalling component is difficult? Explore segmentation, controlled access and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Supplier Risk: Building Resilience Without Vendor Cooperation
Supplier restrictions can block SBOM requests, monitoring agents and changes to remote access. Explore how plant teams can respond when vendor cooperation…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Zero Trust in OT: Secure Access Beyond the HMI
OT Zero Trust must account for devices and workflows that cannot support modern identity controls directly. Explore how to place authorization around the…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
NIS2 Supplier Security: When Compliance Costs Become a Risk
A supplier can understand a cybersecurity requirement and still lack the resources to sustain it. Explore how compliance costs create pressure in industrial…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Legacy Railway OT: Reducing Risk When You Cannot Harden the Asset
Some railway assets remain in service while direct hardening is constrained. Explore segmentation for signalling cells, brokered remote access and inspection…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
AI Quality Inspection in OT: When a Bad Weld Passes
An incorrect inspection decision can move a defective part downstream without causing an obvious outage. Explore the limits of challenge parts and the…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Zero Trust for Brownfield OT: Working Within Legacy Constraints
How can Zero Trust apply to a brownfield industrial system? This episode addresses legacy OT security and IEC 62443. Related CUP episodes: Railway…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Vendor Ransomware: Managing Lock-In and Recovery Risk
A ransomware incident at an automation vendor can expose dependency and lock-in risks for the operator. This episode examines vendor risk and industrial…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
AI Sensors in OT: Why Plausible Data Can Mislead the PLC
A field device can make autonomous calibration decisions that a deterministic controller accepts as trusted input. Explore the gap between plausible sensor…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
IBM Breach Cost Report: Governance, Resilience and NIS2
Breach-cost analysis can reveal differences in governance and recovery capability. Explore the IBM report alongside operational resilience and NIS2…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
IBM X-Force: Exploiting Vulnerabilities Without Authentication
Attackers do not always need credentials to exploit an exposed vulnerability. Explore the IBM X-Force findings through exploitation speed and the changing…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Security Scanner Supply Chains: The Trivy and CERT-EU Case
A trusted security scanner can become part of a software supply-chain attack. Explore the Trivy and CERT-EU case through tool provenance and exposure beyond…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cybersecurity Assurance: Why Evidence Does Not Equal Confidence
Documented evidence does not automatically establish confidence in a system. Explore cybersecurity assurance through cases involving industrial control and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Legacy Railway Cybersecurity: Why Policy Is Not Enough
Legacy railway assets need technical controls alongside security policy. Explore railway incidents and the constraints of protecting long-lived infrastructure…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Secure ECU Reflashing: When Workshop Pressure Creates Shortcuts
Workshop time pressure can turn a secure DoIP reflashing workflow into a manual workaround. Explore the tension between release traceability, controlled access…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Jeep Hack Lessons: Testing Vehicle Gateway Trust Boundaries
The Jeep hack remains a useful test of vehicle trust boundaries. Explore how gateways, domain controllers and embedded firewalls mediate connected functions…