Cybersecurity Under Pressure. Real Attacks, Real Lessons

Antonio González

Cybersecurity Under Pressure examines real incidents, technical research and security decisions across industrial systems, railways and connected vehicles. Antonio González connects attack mechanisms with engineering constraints, operational resilience and product-security evidence. Explore OT and ICS security, automotive and railway cybersecurity, software supply chains and the decisions behind secure operations.

Play

Open in

147 episodes
daily
Avg 35 min
English

Episodes 147

Newest Oldest Longest

All20 Unplayed20 In progress0 Played0

Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.

October 1 · 1 min
When EV Charging Becomes a Cyber-Kinetic Risk | CUP Micro Brief
An EV charging cable initiates a cloud-connected transaction with physical consequences. This CUP Micro Brief follows the path from complex connectivity, through unsafe input validation, to cyber-kinetic manipulation of electrical limits. Related CUP episodes: How EV Chargers Could Crash the Grid: The Cyber Risk Behind Mass Electrification Hacking EV Chargers to Stress the Grid: When Mobility Becomes Critical Infrastructure An IDPS Alert Is Not an Incident Response Capability Automotive Extortion Goes Upstream: Protecting the New Vehicle Perimeter
October 1 · 4 min
A Clean Backup Does Not Prove a Safe Restart | CUP Focus
Restoring files is not the same as restoring operational confidence. This CUP Focus explains why an OT restart requires trusted control logic, known-good engineering baselines and a defensible go/no-go decision before physical production resumes. Related CUP episodes: The Restart Bottleneck Is Not the Backup. It Is the Evidence. Beyond Backup Recovery Minnesota Water Cyberattacks: When OT Security Meets Physical Risk When Containment Fails Recovery When Patches Stop Production Weekly Roundup: State Machine Breakdown & Engineering the Degraded Mode [2026] Critical: Vendor Lock-in - Ransomware
September 30 · 1 hr 20 min
Railway Cybersecurity: Why Attack Detection Does Not Prove Safety
Detecting a railway cyberattack does not establish that the physical system remains safe. Explore IAM4RAIL and the evidence needed to connect detection, operational response and safety assurance. The central question is what an operator can justify after the alert, rather than whether an alert exists. https://cybersecurityunderpressure.com/episodes Related CUP episodes: Frauscher FDS102: Why Railway Diagnostics Belong Inside the Security Boundary Authenticated but Wrong: When Railway APIs Contradict Physical Reality Why Rail Operators Fear the Patch When a Patch Reopens the Safety Case Rail Service Risk Starts Outside the SIL Boundary Railway OT Segmentation: Protecting the Certified Core Why FRMCS Cannot Trust the Mobile Carrier The Red Signal. Paralyzing a Railway Network with a Single Patch Legacy rail assets do not become secure by policy The Friday Night Patch & The Illusion of Segmentation
September 29 · 1 min
What Actually Starts the CRA 24-Hour Clock? | CUP Micro Brief
Not every vulnerability starts the Cyber Resilience Act reporting clock. This CUP Micro Brief explains the two triggers, why reachability and VEX matter, and how CRA product obligations differ from NIS2 operator duties. Related CUP episodes: The 24-Hour Trap: Defensible Decisions Under the Cyber Resilience Act Cyber Resilience Act: Making the 24-Hour Reporting Decision
September 28 · 1 hr 30 min
Espressif Secure Boot: Where Firmware Trust Can Break
Secure boot validates part of a trust chain, not every condition that makes a device trustworthy. Explore Espressif AR2026-006 and the boundaries of firmware assurance. Learn why implementation, configuration and supporting evidence matter when assessing what a successful verification actually proves. https://cybersecurityunderpressure.com/episodes Related CUP episodes: Why Signed Firmware Is Still Vulnerable: The Trust Chain Behind the Signature When the Automotive Update Path Becomes the Attack Path The Flashing Station Is a Product Trust Boundary | CUP Focus Shipping the Code That Security Rejected Missing Cybersecurity Evidence Can Delay Production When ECUs Meet Malice Poisoning the Software Defined Vehicle at Birth Automotive Cybersecurity: Why Local Access Can Have High Impact NSA ASIC Assurance: Verifying Trust in Silicon
September 27 · 1 min
When a License Plate Becomes a Password | CUP Micro Brief
A public vehicle identifier became the starting point for a remote attack chain. This CUP Micro Brief connects the Kia API flaw, the disappearance of the traditional vehicle perimeter and the need for blind exploit validation. Related CUP episodes: Your License Plate Is the Password: What the Kia API Hack Revealed Authenticated but Wrong: When Railway APIs Contradict Physical Reality Jeep, Gateways and the Myth of Clean Isolation Automotive Extortion Goes Upstream: Protecting the New Vehicle Perimeter BLE Theft Auto: How Aftermarket Devices Bypass Vehicle Security
September 25 · 1 hr 2 min
NIST IR 8536: Verifying the Software Supply Chain
A supplier register identifies companies but does not prove the provenance of the software they deliver. Explore NIST IR 8536 and the evidence needed to trace dependencies and responsibilities across a supply chain. The episode examines how to turn supplier declarations into verifiable trust relationships. https://cybersecurityunderpressure.com/episodes Related CUP episodes: Railway AI at Risk: When Subcontractor Leaks Break the Trust Chain Stadler Rail Extortion: When Supplier Trust Becomes the Attack Surface SBOM and VEX: Turning Vulnerability Data into OT Risk Decisions When VEX Becomes a Bureaucratic Shield NIS2 Supplier Security: When Compliance Costs Become a Risk Cyber Gaps in Automotive Supply Supported Hardware, Vulnerable Software: The Hidden Lifecycle Risk in Industrial Firewalls OT Supplier Risk: Building Resilience Without Vendor Cooperation A Critical CVE Is Not an Attack Path: Assessing PLCnext Risk in the Plant
September 23 · 1 hr 3 min
Automotive Cybersecurity: Why Local Access Can Have High Impact
A local attack vector does not establish low impact, but it also does not prove remote access to safety-relevant vehicle functions. Explore Qualcomm Snapdragon Auto vulnerability assessment through exposure, prerequisites and automotive attack feasibility. The episode examines which evidence connects a component vulnerability to a deployed vehicle risk. https://cybersecurityunderpressure.com/episodes Related CUP episodes: Espressif Secure Boot: Where Firmware Trust Can Break Why Signed Firmware Is Still Vulnerable: The Trust Chain Behind the Signature NSA ASIC Assurance: Verifying Trust in Silicon Chip Security Assurance: Making Silicon Security a Design Gate Why Quantum Security Paralyzes Industrial Infrastructure
September 21 · 1 hr 15 min
Siemens S7-1500: Managing PLC and Linux Security Lifecycles
One PLC can contain software components with different security lifecycles. Explore the SIMATIC S7-1500 Linux subsystem and the operational consequences of those overlapping dependencies. Learn which lifecycle questions asset owners should ask before treating hardware support as evidence of software security. https://cybersecurityunderpressure.com/episodes Related CUP episodes: Supported Hardware, Vulnerable Software: The Hidden Lifecycle Risk in Industrial Firewalls A Critical CVE Is Not an Attack Path: Assessing PLCnext Risk in the Plant When the Security Router Becomes the Attack Path: Weidmüller and the Fragility of Industrial Segmentation PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary KEV-First Patch Ops: Defending the Exposed Control Plane [2026] Critical: When the Hypervisor Becomes the Attack Surface - Patching [2026] Critical: Zero Trust for Brownfield OT - IEC 62443
September 18 · 1 hr 13 min
Chip Security Assurance: Making Silicon Security a Design Gate
Semiconductor development uses formal gates for functionality, timing, power and physical implementation. Explore security sign-off as another condition to demonstrate before a chip design is ready. The episode examines how hardware assurance connects design evidence to product trust. https://cybersecurityunderpressure.com/episodes Related CUP episodes: NSA ASIC Assurance: Verifying Trust in Silicon Espressif Secure Boot: Where Firmware Trust Can Break Why Signed Firmware Is Still Vulnerable: The Trust Chain Behind the Signature Why Quantum Security Paralyzes Industrial Infrastructure Automotive Cybersecurity: Why Local Access Can Have High Impact
September 16 · 1 hr 19 min
Johnson Controls Airwall: The Risk Behind a Hardcoded Key
A hardcoded cryptographic key can undermine the trust assumptions of an embedded security architecture. Explore the Johnson Controls Airwall case through key management, deployment exposure and the boundaries of product trust. The episode examines why a permanently embedded secret creates risk beyond a single implementation defect. https://cybersecurityunderpressure.com/episodes Related CUP episodes: BLE Theft Auto: How Aftermarket Devices Bypass Vehicle Security Automotive Cybersecurity: Why Local Access Can Have High Impact PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary Espressif Secure Boot: Where Firmware Trust Can Break
September 14 · 1 hr 34 min
NSA ASIC Assurance: Verifying Trust in Silicon
Software provenance is only part of supply-chain assurance. Explore NSA guidance for Application Specific Integrated Circuits and the evidence needed to establish trust in custom microelectronics. The episode examines security decisions across hardware design and manufacturing. https://cybersecurityunderpressure.com/episodes Related CUP episodes: Chip Security Assurance: Making Silicon Security a Design Gate Why Signed Firmware Is Still Vulnerable: The Trust Chain Behind the Signature Espressif Secure Boot: Where Firmware Trust Can Break Why Quantum Security Paralyzes Industrial Infrastructure Automotive Cybersecurity: Why Local Access Can Have High Impact
September 11 · 1 hr 33 min
BLE Theft Auto: How Aftermarket Devices Bypass Vehicle Security
A vehicle can acquire a new attack surface after it leaves the factory. Explore BLE Theft Auto research into aftermarket Bluetooth Low Energy remote-control and anti-theft systems. The episode examines how dealer-installed devices connect mobile applications to sensitive vehicle functions. https://cybersecurityunderpressure.com/episodes Related CUP episodes: Aftermarket Car Alarms: The Answer Is Not to Make Vehicles Impossible to Modify The Device Meant to Secure Your Car Is the Exact Thing Exposing It: The UC San Diego Disclosure Your License Plate Is the Password: What the Kia API Hack Revealed When a License Plate Becomes a Password | CUP Micro Brief Jeep, Gateways and the Myth of Clean Isolation
September 9 · 1 hr 36 min
Weidmüller Router Security: When Segmentation Becomes an Attack Path
What happens when the device enforcing industrial segmentation becomes part of the attack path? Explore the Weidmüller case through trust boundaries, maintenance access and operational exposure. The episode examines how to assess segmentation beyond the existence of a firewall rule set. https://cybersecurityunderpressure.com/episodes Related CUP episodes: Industrial Firewall Security: The Hidden Software Lifecycle Exposed Paths in OT Networks Siemens S7-1500: Managing PLC and Linux Security Lifecycles PLCnext Vulnerabilities: Assessing the Real OT Attack Path PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary KEV-First Patch Ops: Defending the Exposed Control Plane
September 7 · 1 hr 17 min
Frauscher FDS102: Securing Railway Diagnostic Access
Railway diagnostics can reach assets and functions that deserve explicit security boundaries. Explore the Frauscher FDS102 case and the role of maintenance connectivity in operational risk. Learn why diagnostic access must be assessed alongside the signalling environment it supports. https://cybersecurityunderpressure.com/episodes Related CUP episodes: Railway Cybersecurity: Why Attack Detection Does Not Prove Safety Legacy Railway OT: Reducing Risk When You Cannot Harden the Asset Railway API Security: When Authenticated Data Contradicts Reality When a Patch Reopens the Safety Case The Red Signal. Paralyzing a Railway Network with a Single Patch Why FRMCS Cannot Trust the Mobile Carrier Legacy rail assets do not become secure by policy Railway OT Segmentation: Protecting the Certified Core Rail Service Risk Starts Outside the SIL Boundary The Friday Night Patch & The Illusion of Segmentation
September 4 · 1 hr 20 min
Siemens Siveillance: When Edit Access Enables Code Execution
Edit permissions inside an application can become code execution at the service layer. Explore Siemens Siveillance Video through Management Server API access and privilege boundaries. The episode examines why application roles must be assessed against the authority of the underlying service. https://cybersecurityunderpressure.com https://t.me/cybersecurityunderpressure Related CUP episodes: PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary Weidmüller Router Security: When Segmentation Becomes an Attack Path Johnson Controls Airwall: The Risk Behind a Hardcoded Key PLCnext Vulnerabilities: Assessing the Real OT Attack Path Windchill Security: Restoring Trust in Engineering Data
September 2 · 1 hr 30 min
PLCnext Vulnerabilities: Assessing the Real OT Attack Path
A critical vulnerability rating does not explain whether an attacker can reach the affected function in your plant. Explore PLCnext risk through deployment, access and operational context. The episode examines the evidence needed to prioritize remediation and compensating controls. https://cybersecurityunderpressure.com https://t.me/cybersecurityunderpressure Related CUP episodes: Siemens S7-1500: Managing PLC and Linux Security Lifecycles Siemens S7 PLC Security: How AI Changes Attack Feasibility Industrial Firewall Security: The Hidden Software Lifecycle PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary Weidmüller Router Security: When Segmentation Becomes an Attack Path KEV-First Patch Ops: Defending the Exposed Control Plane OT Supplier Risk: Building Resilience Without Vendor Cooperation
August 31 · 1 hr 16 min
Automotive Intrusion Detection: When Blocking an Attack Is Unsafe
Detecting a cyberattack inside a moving vehicle is only the beginning. The harder question is what the vehicle should do once malicious traffic has been identified. Explore the AutoHack dataset and anomalies across vehicle CAN networks through the decisions required for safe response. https://cybersecurityunderpressure.com https://t.me/cybersecurityunderpressure Related CUP episodes: An IDPS Alert Is Not an Incident Response Capability An Automotive Alert Is Not an Incident Response | CUP Focus Jeep, Gateways and the Myth of Clean Isolation
August 28 · 50 min
Automotive Software Updates: Securing the Firmware Delivery Path
Automotive malware does not always begin with an unknown vulnerability. Explore an infection chain targeting Android-based automotive head units and software the vehicle already trusts. The episode examines how update delivery and firmware provenance become part of the attack path. https://cybersecurityunderpressure.com https://t.me/cybersecurityunderpressure Related CUP episodes: Signed Firmware: Why the Signature Is Only Part of the Trust Chain When ECUs Meet Malice Poisoning the Software Defined Vehicle at Birth Espressif Secure Boot: Where Firmware Trust Can Break Missing Cybersecurity Evidence Can Delay Production Shipping the Code That Security Rejected The Flashing Station Is a Product Trust Boundary | CUP Focus
August 26 · 33 min
Siemens S7 PLC Security: How AI Changes Attack Feasibility
Artificial intelligence is changing the economics of industrial cyberattacks. Explore how AI coding assistants and Python-Snap7 can reduce the expertise needed to interact with Siemens S7 controllers. The episode examines when legitimate engineering functionality becomes an operational attack path. Website https://cybersecurityunderpressure.com Telegram https://t.me/cybersecurityunderpressure Related CUP episodes: Siemens S7-1500: Managing PLC and Linux Security Lifecycles PLCnext Vulnerabilities: Assessing the Real OT Attack Path When Physics is the Final Firewall [2026] Critical: The Plausibility Gap - IEC 62443 AI Welding Inspection: Why Software Integrity Is Not Process Integrity [2026] Urgent: When AI Agents Become the New Insider Threat - Zero Trust

Showing 41–60 of 147 episodes