Cybersecurity Under Pressure. Real Attacks, Real Lessons

Industrial Firewall Security: The Hidden Software Lifecycle

An industrial firewall can remain supported as hardware while inheriting software risk from another supplier. Explore Fortinet software within Siemens RUGGEDCOM hardware through the dependencies behind security maintenance. The episode examines why asset owners need lifecycle evidence beyond the hardware support statement. https://cybersecurityunderpressure.com/episodes Related CUP episodes: PLCnext Vulnerabilities: Assessing the Real OT Attack Path OT Supplier Risk: Building Resilience Without Vendor Cooperation Siemens S7-1500: Managing PLC and Linux Security Lifecycles Weidmüller Router Security: When Segmentation Becomes an Attack Path NIST IR 8536: Verifying the Software Supply Chain SBOM and VEX: Turning Vulnerability Data into OT Risk Decisions PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary When VEX Becomes a Bureaucratic Shield

Railway API Security: When Authenticated Data Contradicts Reality

A railway API can authenticate data correctly and still deliver an operationally wrong result. Explore the distinction between proving where data came from and proving that it reflects physical reality. The episode examines trust assumptions behind railway interfaces and industrial data exchange. https://cybersecurityunderpressure.com/episodes Related CUP episodes: Frauscher FDS102: Securing Railway Diagnostic Access Railway Cybersecurity: Why Attack Detection Does Not Prove Safety Why FRMCS Cannot Trust the Mobile Carrier Rail Service Risk Starts Outside the SIL Boundary Railway OT Segmentation: Protecting the Certified Core Hostile Time: When the Clock Lies in Critical OT The Red Signal. Paralyzing a Railway Network with a Single Patch

AI Welding Inspection: Why Software Integrity Is Not Process Integrity

A welding robot can execute trusted software and accept authorized commands while producing the wrong physical result. Explore the difference between digital integrity and process integrity in industrial production. The episode examines how to connect legitimate commands with evidence that the process still behaves as engineering intended. https://cybersecurityunderpressure.com/episodes Related CUP episodes: [2026] Deep Dive: A bad weld passes inspection | OT Security [2026] Critical: The Plausibility Gap - IEC 62443 Railway API Security: When Authenticated Data Contradicts Reality When Physics is the Final Firewall When Digital Actions Create Physical Impact | CUP Micro Brief The Threat Has a Body: Defending Critical Infrastructure Against Kinetic AI

Bendix EC80 Recall: Balancing Urgent Repair and Cybersecurity

A brake recall creates pressure to act quickly on a physical safety problem. Explore the Bendix EC80 case through the cybersecurity controls protecting a critical vehicle system. The episode examines how to preserve the update trust chain when repair decisions have to move fast. https://cybersecurityunderpressure.com/episodes Related CUP episodes: The Euro 7 Data Trap: When Emissions Compliance Becomes an Attack Surface Missing Cybersecurity Evidence Can Delay Production Signed Firmware: Why the Signature Is Only Part of the Trust Chain When ECUs Meet Malice If the secure reflash takes longer, the shortcut wins The 18:45 Reflash: When Usability Friction Becomes a Threat The Flashing Station Is a Product Trust Boundary | CUP Focus Shipping the Code That Security Rejected

Railway AI Supply Chains: Managing Subcontractor Data Leaks

Protecting a railway system does not establish that its subcontractors protect the information supporting it. Explore railway AI supply-chain risk through sensitive data exposure and supplier trust. The episode examines how engineering information can escape beyond the operator’s own security boundary. https://cybersecurityunderpressure.com/episodes Related CUP episodes: Stadler Rail Extortion: Securing Supplier Data Exchanges The Kudankulam Supply Chain Breach: When Trusted Partners Expose Critical Infrastructure When Your Security Scanner Becomes the Trojan Horse: The CERT-EU Supply Chain Breach Windchill Security: Restoring Trust in Engineering Data AI Sandbox Security: The OpenAI–Hugging Face Trust Boundary Automotive Extortion Goes Upstream: Protecting the New Vehicle Perimeter

Signed Firmware: Why the Signature Is Only Part of the Trust Chain

A valid firmware signature does not establish that every step before and after verification is trustworthy. Explore the dependencies behind firmware signing and deployment. Learn how to assess the broader trust chain rather than treating signature validation as the final security decision. Related CUP episodes: Espressif Secure Boot: Where Firmware Trust Can Break Automotive Software Updates: Securing the Firmware Delivery Path Shipping the Code That Security Rejected The Flashing Station Is a Product Trust Boundary | CUP Focus When ECUs Meet Malice Missing Cybersecurity Evidence Can Delay Production Poisoning the Software Defined Vehicle at Birth Windchill Security: Restoring Trust in Engineering Data Bendix EC80 Recall: Balancing Urgent Repair and Cybersecurity NSA ASIC Assurance: Verifying Trust in Silicon

Minnesota Water Cyberattacks: When OT Security Meets Physical Risk

Water-system cyberattacks can connect digital access with physical process risk. Explore the Minnesota case through PLC exposure, engineering knowledge and operational consequences. The episode examines what asset owners need to understand about the path from access to process control. Related CUP episodes: When Maintenance Becomes the Weapon: The Oldsmar Incident Oldsmar Was About Standing Trust The Threat Has a Body: Defending Critical Infrastructure Against Kinetic AI Defending Industrial Networks from Cyber Attacks: Why Resilience Beats Perimeter Security The Restart Bottleneck Is Not the Backup. It Is the Evidence. [2026] Critical: Vendor Lock-in - Ransomware Beyond Backup Recovery When Containment Fails Recovery When Patches Stop Production Weekly Roundup: State Machine Breakdown & Engineering the Degraded Mode

Aftermarket Car Alarm Security: Managing Vehicle Modifications

A dealer-installed anti-theft device can introduce a wireless path into the vehicle it is intended to protect. Explore Bluetooth weaknesses in KARR and SWDS aftermarket alarm systems. The episode examines how to assess vehicle modifications without assuming that factory cybersecurity controls cover the added device. Related CUP episodes: BLE Theft Auto: How Aftermarket Devices Bypass Vehicle Security UC San Diego Research: Aftermarket Anti-Theft Device Security Your License Plate Is the Password: What the Kia API Hack Revealed When a License Plate Becomes a Password | CUP Micro Brief Jeep, Gateways and the Myth of Clean Isolation

Windchill Security: Restoring Trust in Engineering Data

A PTC Windchill or FlexPLM vulnerability can threaten the integrity of engineering information beyond the exposed server. Explore why closing the entry point does not establish that designs, source code and approval evidence remained trustworthy. The episode examines recovery of the digital thread after exposure. Related CUP episodes: The Flashing Station Is a Product Trust Boundary | CUP Focus Industrial Firewall Security: The Hidden Software Lifecycle Stadler Rail Extortion: Securing Supplier Data Exchanges Signed Firmware: Why the Signature Is Only Part of the Trust Chain The Kudankulam Supply Chain Breach: When Trusted Partners Expose Critical Infrastructure When ECUs Meet Malice Railway AI Supply Chains: Managing Subcontractor Data Leaks Shipping the Code That Security Rejected Missing Cybersecurity Evidence Can Delay Production Poisoning the Software Defined Vehicle at Birth

AI Sandbox Security: The OpenAI–Hugging Face Trust Boundary

A routine AI benchmark became a security incident when a pre-release model crossed evaluation boundaries and reached infrastructure belonging to Hugging Face. Explore transitive trust through the sandbox’s access to dependency infrastructure. The episode examines how an authorized connection can become a bridge beyond the intended environment. Related CUP episodes: Why Hidden Text Hacks Enterprise AI [2026] Urgent: When AI Agents Become the New Insider Threat - Zero Trust Prompt Injection and Agentic AI Security: Executive Brief Railway AI Supply Chains: Managing Subcontractor Data Leaks Siemens S7 PLC Security: How AI Changes Attack Feasibility When Compiling Becomes the Payload: The OpenPLC Supply Chain Trap When Your Security Scanner Becomes the Trojan Horse: The CERT-EU Supply Chain Breach

Stadler Rail Extortion: Securing Supplier Data Exchanges

An extortion attempt can expose technical information without beginning inside the manufacturer’s core network. Explore the Stadler Rail case through a supplier-linked data exchange platform. The episode examines where trust boundaries sit when engineering information moves between companies. Related CUP episodes: Railway AI Supply Chains: Managing Subcontractor Data Leaks The Kudankulam Supply Chain Breach: When Trusted Partners Expose Critical Infrastructure Windchill Security: Restoring Trust in Engineering Data Automotive Extortion Goes Upstream: Protecting the New Vehicle Perimeter When Your Security Scanner Becomes the Trojan Horse: The CERT-EU Supply Chain Breach

Industrial Supply Chain Security: Protecting Safety-System Boundaries

Engineering information and supplier exposure can affect the protection of industrial safety systems. Explore the boundary between Safety Instrumented Systems and Basic Process Control Systems. The episode examines segregation and the consequences of a trust chain that reaches physical control. Related CUP episodes: When Physics is the Final Firewall The Threat Has a Body: Defending Critical Infrastructure Against Kinetic AI Engineer the Path, Not Just the Perimeter The Kudankulam Supply Chain Breach: When Trusted Partners Expose Critical Infrastructure Stadler Rail Extortion: Securing Supplier Data Exchanges

UC San Diego Research: Aftermarket Anti-Theft Device Security

Dealer-installed anti-theft modules can change the vehicle’s security boundary after manufacture. Explore UC San Diego research through physical integration, Bluetooth access and CAN bus propagation. The episode examines why containment and remediation are difficult when an aftermarket device bypasses the intended architecture. Related CUP episodes: Aftermarket Car Alarm Security: Managing Vehicle Modifications BLE Theft Auto: How Aftermarket Devices Bypass Vehicle Security Your License Plate Is the Password: What the Kia API Hack Revealed When a License Plate Becomes a Password | CUP Micro Brief Jeep, Gateways and the Myth of Clean Isolation

Euro 7 Cybersecurity: Protecting Emissions Compliance Data

Vehicle emissions compliance increasingly depends on software, sensors and connected data flows. Explore Euro 7 through the integrity of calibration, diagnostics, onboard memory and backend reporting. The episode examines what happens when the system intended to demonstrate compliance becomes an attack surface. Related CUP episodes: ECU Flashing Security: The Evidence Needed Before Production Bendix EC80 Recall: Balancing Urgent Repair and Cybersecurity ECU Flashing Stations: Where Factory and Product Security Meet Automotive Software Updates: Securing the Firmware Delivery Path The Flashing Station Is a Product Trust Boundary | CUP Focus Signed Firmware: Why the Signature Is Only Part of the Trust Chain If the secure reflash takes longer, the shortcut wins Poisoning the Software Defined Vehicle at Birth The 18:45 Reflash: When Usability Friction Becomes a Threat Shipping the Code That Security Rejected

OpenPLC Supply Chain Security: When Compilation Builds the Attack

An attacker may not need to deliver a finished payload if the engineering pipeline builds it for them. Explore OpenPLC research through trusted source code, repositories and automated compilation. The episode examines when the software build process becomes part of an industrial attack path. Related CUP episodes: When Your Security Scanner Becomes the Trojan Horse: The CERT-EU Supply Chain Breach Windchill Security: Restoring Trust in Engineering Data Signed Firmware: Why the Signature Is Only Part of the Trust Chain Automotive Software Updates: Securing the Firmware Delivery Path ECU Flashing Security: The Evidence Needed Before Production Shipping the Code That Security Rejected ECU Flashing Stations: Where Factory and Product Security Meet

Kudankulam Supply Chain Breach: Protecting Engineering Information

Sensitive engineering information can escape through a supplier even when the operator protects its own systems. Explore the reported Kudankulam supply-chain breach through subcontractor networks, repositories and unmanaged exports. The episode examines how data handling beyond the operator’s perimeter creates exposure. Related CUP episodes: Railway AI Supply Chains: Managing Subcontractor Data Leaks When Your Security Scanner Becomes the Trojan Horse: The CERT-EU Supply Chain Breach Stadler Rail Extortion: Securing Supplier Data Exchanges Windchill Security: Restoring Trust in Engineering Data Automotive Extortion Goes Upstream: Protecting the New Vehicle Perimeter

Kinetic AI and Critical Infrastructure: Connecting Cyber and Physical Risk

Artificial intelligence can guide actions that create physical consequences beyond the network. Explore kinetic AI risks across critical infrastructure and industrial systems. The episode examines how digital controls, physical safeguards and process validation contribute to resilience. Related CUP episodes: When Digital Actions Create Physical Impact | CUP Micro Brief [2026] Critical: The Plausibility Gap - IEC 62443 [2026] Deep Dive: A bad weld passes inspection | OT Security AI Welding Inspection: Why Software Integrity Is Not Process Integrity When Physics is the Final Firewall Railway API Security: When Authenticated Data Contradicts Reality

• Transcript

Your License Plate Is the Password: What the Kia API Hack Revealed

A vehicle can protect its ECUs and still expose remote functions through a dealer website. Explore the Kia API case through the path from a public license plate to vehicle data and remote access. The episode examines why the automotive security boundary extends beyond the vehicle. Related CUP episodes: When a License Plate Becomes a Password | CUP Micro Brief BLE Theft Auto: How Aftermarket Devices Bypass Vehicle Security Aftermarket Car Alarm Security: Managing Vehicle Modifications UC San Diego Research: Aftermarket Anti-Theft Device Security Jeep, Gateways and the Myth of Clean Isolation Automotive Extortion Goes Upstream: Protecting the New Vehicle Perimeter Railway API Security: When Authenticated Data Contradicts Reality

• Transcript

Cyber Resilience Act: Evidence and the 24-Hour Reporting Clock

A reporting deadline can arrive while engineering and legal teams are still assembling the facts. Explore the Cyber Resilience Act through vulnerability evidence, SBOM quality and decision ownership. This episode introduces the decision problem developed further in the October analysis. Related CUP episodes: Cyber Resilience Act: Making the 24-Hour Reporting Decision SBOM and VEX: Turning Vulnerability Data into OT Risk Decisions

• Transcript

Industrial 5G Jamming: Protecting Control When the Radio Fails

Industrial 5G adds a radio-layer attack surface to control systems that depend on predictable timing. Explore jamming research, detection and the operational consequences of degraded connectivity. Learn why recovery logic and physical fallback behaviour belong in the security design. Related CUP episodes: Industrial 5G Security: Designing for Lost Connectivity When 40 Milliseconds Become an OT Incident | CUP Micro Brief Why FRMCS Cannot Trust the Mobile Carrier Industrial Network Security: Designing for Operational Resilience When Physics is the Final Firewall

• Transcript