Cybersecurity Under Pressure. Real Attacks, Real Lessons

Industrial 5G Jamming: Protecting Control When the Radio Fails

Industrial 5G adds a radio-layer attack surface to control systems that depend on predictable timing. Explore jamming research, detection and the operational consequences of degraded connectivity. Learn why recovery logic and physical fallback behaviour belong in the security design. Related CUP episodes: Industrial 5G Security: Designing for Lost Connectivity When 40 Milliseconds Become an OT Incident | CUP Micro Brief Why FRMCS Cannot Trust the Mobile Carrier Industrial Network Security: Designing for Operational Resilience When Physics is the Final Firewall

• Transcript

EV Charging Cybersecurity: How Charger Attacks Could Affect the Grid

Connected EV chargers link vehicle services with cloud platforms and grid coordination. Explore how firmware, payment systems, operator backends and remote maintenance create shared dependencies. The episode examines when a charging-system weakness becomes an energy-infrastructure risk. Related CUP episodes: EV Charging and Grid Security: When Mobility Becomes Infrastructure When EV Charging Becomes a Cyber-Kinetic Risk | CUP Micro Brief Automotive IDPS, VSOC and PSIRT: From Alert to Response Automotive Extortion Goes Upstream: Protecting the New Vehicle Perimeter Your License Plate Is the Password: What the Kia API Hack Revealed

• Transcript

Industrial Network Security: Designing for Operational Resilience

Industrial network protection must account for production, safety and uptime together. Explore legacy assets, network zones, vendor access and constrained patch windows. The episode examines how operational resilience changes the design of IT and OT security controls. Related CUP episodes: Industrial Identity Security: The Risk in Software-Defined Factories OT Supplier Risk: Building Resilience Without Vendor Cooperation Beyond Asset Coverage Zero Trust in Legacy OT: Working With Twenty-Year-Old Systems Exposed Paths in OT Networks When Physics is the Final Firewall Engineer the Path, Not Just the Perimeter

• Transcript

Industrial 5G Security: Designing for Lost Connectivity

Fast wireless connectivity does not guarantee resilient production. Explore the relationship between industrial 5G, legacy systems and operational uptime. The episode examines what happens when networking assumptions meet the physical constraints of a factory. Related CUP episodes: Industrial 5G Jamming: Protecting Control When the Radio Fails Industrial Network Security: Designing for Operational Resilience When 40 Milliseconds Become an OT Incident | CUP Micro Brief Why FRMCS Cannot Trust the Mobile Carrier When Physics is the Final Firewall

• Transcript

EV Charging and Grid Security: When Mobility Becomes Infrastructure

EV charging connects vehicles, payment platforms, cloud backends, energy providers and the grid. Explore how weaknesses in those dependencies can affect charging services and wider operations. The episode examines why charging infrastructure needs a cyber-physical risk model. Related CUP episodes: EV Charging Cybersecurity: How Charger Attacks Could Affect the Grid When EV Charging Becomes a Cyber-Kinetic Risk | CUP Micro Brief Automotive IDPS, VSOC and PSIRT: From Alert to Response Automotive Extortion Goes Upstream: Protecting the New Vehicle Perimeter Your License Plate Is the Password: What the Kia API Hack Revealed

• Transcript

Industrial Identity Security: The Risk in Software-Defined Factories

A factory attack does not always require specialist PLC knowledge. Explore how identity, remote access, engineering workstations and deployment pipelines become part of production risk. The episode examines the security boundary of a software-defined factory. Related CUP episodes: Johnson Controls Airwall: The Risk Behind a Hardcoded Key Invisible Conduits: The Control Plane Siege Ransomware Beyond Encryption How Stolen Credentials Break Industrial Plants Zero Trust in Legacy OT: Working With Twenty-Year-Old Systems Exposed Paths in OT Networks The Token That Bypassed the Jump Host

• Transcript

Automotive Supplier Cybersecurity: When Compliance Drains R&D

Cybersecurity obligations can consume supplier engineering capacity without producing equivalent operational assurance. Explore the tension between compliance evidence, development resources and automotive responsibilities. The episode questions how organizations can remove silos and focus effort on decisions that improve security. Related CUP episodes: NIS2 Supplier Security: When Compliance Costs Become a Risk Cyber Gaps in Automotive Supply When VEX Becomes a Bureaucratic Shield ECU Flashing Security: The Evidence Needed Before Production

• Transcript

Railway Patch Management: When an Update Stops the Network

An uncoordinated security update can disrupt railway operations even when the safety response remains effective. Explore the tension between RAMS engineering, cybersecurity maintenance and service continuity. The episode examines how validation constraints change the patch decision. Related CUP episodes: Why Rail Operators Fear the Patch When a Patch Reopens the Safety Case Hostile Time: When the Clock Lies in Critical OT Railway Cybersecurity: Why Attack Detection Does Not Prove Safety Rail Service Risk Starts Outside the SIL Boundary The Friday Night Patch & The Illusion of Segmentation Why FRMCS Cannot Trust the Mobile Carrier Railway API Security: When Authenticated Data Contradicts Reality Frauscher FDS102: Securing Railway Diagnostic Access Legacy rail assets do not become secure by policy

• Transcript

Legacy VPNs in OT: Remote Access and the Cost of Disruption

A maintenance VPN can leave a path to industrial control beyond the work it was meant to support. Explore remote-access authorization, legacy infrastructure and the business consequences of disruption. The episode examines why a trusted tunnel is not a sufficient operational boundary. Related CUP episodes: The Token That Bypassed the Jump Host The Trap of the Trusted Engineering Session Engineer the Path, Not Just the Perimeter Exposed Paths in OT Networks When Maintenance Becomes the Weapon: The Oldsmar Incident Invisible Conduits: The Control Plane Siege 02:00 AM Panic: Does "Break-Glass" Mean "Break-Security"? The Illusion of MFA: AiTM Phishing and Session Token Theft Zero Trust in OT does not start at the HMI Oldsmar Was About Standing Trust

• Transcript

ECU Flashing Security: The Evidence Needed Before Production

A flashing station connects factory security to the integrity of the vehicle being produced. Explore the trust chain between production systems, diagnostic tools and ECU firmware. Learn why product-security evidence and ownership must be available before a production decision. Related CUP episodes: The Flashing Station Is a Product Trust Boundary | CUP Focus Signed Firmware: Why the Signature Is Only Part of the Trust Chain Euro 7 Cybersecurity: Protecting Emissions Compliance Data ECU Flashing Stations: Where Factory and Product Security Meet Automotive Software Updates: Securing the Firmware Delivery Path Espressif Secure Boot: Where Firmware Trust Can Break Shipping the Code That Security Rejected Bendix EC80 Recall: Balancing Urgent Repair and Cybersecurity Poisoning the Software Defined Vehicle at Birth Windchill Security: Restoring Trust in Engineering Data

• Transcript

Automotive IDPS, VSOC and PSIRT: From Alert to Response

An automotive detection signal does not decide who investigates, contains or remediates an incident. Explore the responsibilities linking IDPS, VSOC and PSIRT across connected-vehicle systems. The episode examines why response requires evidence, decision authority and coordination beyond the alert. Related CUP episodes: An Automotive Alert Is Not an Incident Response | CUP Focus Automotive Intrusion Detection: When Blocking an Attack Is Unsafe

• Transcript

OT Recovery: Proving a Safe Restart Beyond the Backup

Restoring data is only one part of bringing an industrial process back into service. Explore the evidence and operational decisions needed to justify a safe restart after disruption. The episode examines the gap between technical recovery and confidence in physical production. Related CUP episodes: A Clean Backup Does Not Prove a Safe Restart | CUP Focus Beyond Backup Recovery When Containment Fails Recovery Minnesota Water Cyberattacks: When OT Security Meets Physical Risk When Patches Stop Production Weekly Roundup: State Machine Breakdown & Engineering the Degraded Mode [2026] Critical: Vendor Lock-in - Ransomware

• Transcript

ECU Flashing Stations: Where Factory and Product Security Meet

A compromised ECU flashing station can affect the software identity of the vehicle it produces. Explore the boundary between factory cybersecurity and product cybersecurity. The episode examines why corporate, production and vehicle teams need shared evidence and ownership. Related CUP episodes: The Flashing Station Is a Product Trust Boundary | CUP Focus Signed Firmware: Why the Signature Is Only Part of the Trust Chain ECU Flashing Security: The Evidence Needed Before Production Automotive Software Updates: Securing the Firmware Delivery Path Poisoning the Software Defined Vehicle at Birth Shipping the Code That Security Rejected Espressif Secure Boot: Where Firmware Trust Can Break Bendix EC80 Recall: Balancing Urgent Repair and Cybersecurity Windchill Security: Restoring Trust in Engineering Data Euro 7 Cybersecurity: Protecting Emissions Compliance Data

Zero Trust in Legacy OT: Working With Twenty-Year-Old Systems

Legacy industrial systems rarely support modern identity controls directly. Explore how authentication and mediated access can reduce exposure around older devices. The episode focuses on Zero Trust decisions that respect production constraints. Related CUP episodes: Stolen Credentials and Machine Identities in OT: Executive Brief Ransomware Beyond Encryption Zero Trust in OT does not start at the HMI [2026] Critical: Zero Trust for Brownfield OT - IEC 62443 When Physics is the Final Firewall Exposed Paths in OT Networks The Trap of the Trusted Engineering Session

OT Incident Recovery: Restoring Trust Beyond the Backup

An OT recovery is incomplete if the engineering environment can no longer be trusted. Explore engineering workstation integrity, PLC logic and the evidence needed to return a process to service. The central question is how to justify recovery beyond restoring a backup. Related CUP episodes: NIS2 Incident Recovery: Aligning IT and Engineering Decisions OT Recovery: Proving a Safe Restart Beyond the Backup OT Patch Management: Protecting Security and Production Minnesota Water Cyberattacks: When OT Security Meets Physical Risk A Clean Backup Does Not Prove a Safe Restart | CUP Focus Weekly Roundup: State Machine Breakdown & Engineering the Degraded Mode [2026] Critical: Vendor Lock-in - Ransomware

Automotive Supply Chains: Who Owns the Cybersecurity Fix?

A vulnerability discovered after production can expose gaps in responsibility between automotive companies. Explore cybersecurity ownership, agreements and supplier coordination. The episode examines who should act when remediation spans organizational boundaries. Related CUP episodes: SBOM and VEX: Challenging Supplier Vulnerability Claims NIST IR 8536: Verifying the Software Supply Chain SBOM and VEX: Turning Vulnerability Data into OT Risk Decisions NIS2 Supplier Security: When Compliance Costs Become a Risk Industrial Firewall Security: The Hidden Software Lifecycle OT Supplier Risk: Building Resilience Without Vendor Cooperation Automotive Supplier Cybersecurity: When Compliance Drains R&D ECU Flashing Security: The Evidence Needed Before Production PLCnext Vulnerabilities: Assessing the Real OT Attack Path

OT Patch Management: Protecting Security and Production

A security patch can reduce cyber exposure while introducing a production failure. Explore industrial patch management through operational consequences and continuity constraints. The episode examines why remediation decisions need system-specific evidence. Related CUP episodes: OT Incident Recovery: Restoring Trust Beyond the Backup Railway Cybersecurity Patches: When the Safety Case Must Be Revisited NIS2 Incident Recovery: Aligning IT and Engineering Decisions Legacy Railway Security: Patching and Validation Constraints Minnesota Water Cyberattacks: When OT Security Meets Physical Risk OT Recovery: Proving a Safe Restart Beyond the Backup Weekly Roundup: State Machine Breakdown & Engineering the Degraded Mode A Clean Backup Does Not Prove a Safe Restart | CUP Focus [2026] Critical: Vendor Lock-in - Ransomware Railway Patch Management: When an Update Stops the Network

Ransomware in OT: How Stolen Access Disrupts Production

Stolen access can disrupt production without an attacker directly encrypting the control system. Explore ransomware exposure across the connections between IT and OT. The episode examines trust, asset function and the paths that allow a compromise to propagate. Related CUP episodes: OT Remote Access: Closing the Path When the Work Ends How Stolen Credentials Break Industrial Plants Zero Trust in Legacy OT: Working With Twenty-Year-Old Systems

OT Asset Visibility: Why Inventory Does Not Contain an Attack

Knowing which assets exist does not establish how an attack will be contained. Explore the limits of inventory and network visibility alongside microsegmentation. The episode examines IT dependencies, vendor access and the operational function of exposed assets. Related CUP episodes: Ransomware in OT: How Stolen Access Disrupts Production OT Remote Access: Closing the Path When the Work Ends Legacy PLC Security: Where Digital Controls Meet Physical Limits

NIS2 Incident Recovery: Aligning IT and Engineering Decisions

Containing an incident does not resolve the engineering decisions needed for recovery. Explore the relationship between NIS2 accountability, incident command and operational continuity. The episode examines how IT and engineering teams can coordinate their different timelines. Related CUP episodes: OT Incident Recovery: Restoring Trust Beyond the Backup OT Patch Management: Protecting Security and Production OT Recovery: Proving a Safe Restart Beyond the Backup Minnesota Water Cyberattacks: When OT Security Meets Physical Risk A Clean Backup Does Not Prove a Safe Restart | CUP Focus [2026] Critical: Vendor Lock-in - Ransomware Weekly Roundup: State Machine Breakdown & Engineering the Degraded Mode