Shows / Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cybersecurity Under Pressure examines real incidents, technical research and security decisions across industrial systems, railways and connected vehicles. Antonio González connects attack mechanisms with engineering constraints, operational resilience and product-security evidence. Explore OT and ICS security, automotive and railway cybersecurity, software supply chains and the decisions behind secure operations.
Episodes
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Railway Cybersecurity: Service Risk Beyond the SIL Boundary
Railway service can be disrupted through systems outside the safety integrity boundary. Explore interconnected operational technology and the wider rail attack…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Oldsmar and OT Remote Access: Questioning Standing Trust
Persistent maintenance trust can become a route to physical consequences in OT. Explore the Oldsmar case and the wider exposure created by IT/OT convergence…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Post-Quantum Security in OT: Planning for Long-Lived Infrastructure
Industrial information can retain strategic value long after it has been collected. Explore harvest-now-decrypt-later risks and the transition to post-quantum…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Stolen Credentials and Machine Identities in OT: Executive Brief
Stolen credentials and third-party exposure create operational risk beyond the human user account. This executive brief connects findings from the Verizon 2025…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Verizon DBIR: Stolen Credentials and Industrial Plant Security
Stolen credentials and supplier exposure connect enterprise incidents to plant risk. Explore the Verizon 2025 DBIR alongside industrial access paths. The…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Prompt Injection and Agentic AI Security: Executive Brief
Documents and web pages can carry instructions that undermine enterprise AI workflows. This executive brief explores indirect prompt injection, adversarial…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Indirect Prompt Injection: How Hidden Text Targets Enterprise AI
Indirect prompt injection can hide instructions in material an enterprise AI system is expected to read. Explore how agentic AI expands the consequences of…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
DDoS and Hacktivism: Operational Disruption as a Business Risk
DDoS and hacktivism can turn digital disruption into a business and operational problem. Explore the effect of unavailable customer services and the decisions…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Agentic AI Security: Controlling Autonomous System Access
An AI agent with system access can act beyond the role of a conversational assistant. This episode examines agentic AI and autonomous access as an identity and…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Railway Identity Security: When Attackers Use Valid Access
An intrusion can begin with valid access rather than a visible malware payload. This railway episode frames identity as an operational security boundary…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
KEV-First Patching: Prioritizing the Exposed Control Plane
Actively exploited edge vulnerabilities can require decisions outside the monthly patching cycle. Explore KEV-first prioritization, emergency change windows…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
AiTM Phishing: Why MFA Does Not Prevent Session Theft
Adversary-in-the-Middle phishing can steal session tokens even after a user completes MFA. Explore the attack mechanism, session binding and revocation…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Automotive Extortion: Protecting Cloud, APIs and the Update Chain
Automotive extortion can target cloud services, APIs and software delivery pipelines beyond the vehicle itself. Explore update-chain protection, signing keys…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Control Plane Security: When Network Segmentation Is Rewritten
Control-plane compromise can change the network boundaries on which segmentation depends. Explore network-management trust, remote maintenance paths and the…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Time Synchronization Security: When the Clock Lies
Manipulated time can make operational alarms and event sequences unreliable. Explore time synchronization as a security dependency in critical OT and railway…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
DoIP Reflashing: Securing the Workshop Without Creating Shortcuts
Workshop pressure can encourage technicians to bypass a slow or unreliable authentication workflow during DoIP reflashing. Explore shared sessions, update…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Railway OT Segmentation: When a Network Change Opens the Boundary
A small network change can leave a railway engineering link functional while weakening its security boundary. Explore configuration drift, segmentation and the…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Cyber Incident Roundup: Designing Degraded Operations
Cyber incidents across railways, healthcare, banking and semiconductor supply chains expose a shared operational problem: what happens when core services…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Remote Access: Securing the Path to Physical Control
The same remote maintenance path can support a repair and later permit an unsafe control action. Explore vendor access, authorization and the path from an…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
OT Emergency Access: Designing Secure Break-Glass Operations
An industrial emergency can coincide with an unavailable identity service. Explore break-glass access, production pressure and the security decisions needed to…
- Cybersecurity Under Pressure. Real Attacks, Real Lessons
Oldsmar Incident: When Maintenance Access Becomes the Attack Path
The reported Oldsmar incident brought remote maintenance access and water-treatment control into the same security discussion. Explore how standing trust…
Cybersecurity Under Pressure. Real Attacks, Real LessonsOT Hypervisor Security: Protecting HMIs, Historians and Jump Servers
A compromise of the virtualization layer can affect several OT dependencies at once. Explore the hypervisor as an attack surface around HMIs, historians and…