Cybersecurity Under Pressure. Real Attacks, Real Lessons

Antonio González

Cybersecurity Under Pressure examines real incidents, technical research and security decisions across industrial systems, railways and connected vehicles. Antonio González connects attack mechanisms with engineering constraints, operational resilience and product-security evidence. Explore OT and ICS security, automotive and railway cybersecurity, software supply chains and the decisions behind secure operations.

Play

Open in

147 episodes
daily
Avg 35 min
English

Episodes 147

Newest Oldest Longest

All20 Unplayed20 In progress0 Played0

Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.

May 21 · 32 min
Automotive Software Releases: When Security Rejects the Code
A signed automotive binary can still reach production after a negative security assessment. Explore software-defined vehicle release gates, provenance and start-of-production pressure. The episode examines how organizations connect security findings to release authority. Related CUP episodes: Software-Defined Vehicles: Securing Factory Cryptographic Provisioning Signed Firmware: Why the Signature Is Only Part of the Trust Chain Espressif Secure Boot: Where Firmware Trust Can Break ECU Flashing Stations: Where Factory and Product Security Meet ECU Flashing Security: The Evidence Needed Before Production Automotive Software Updates: Securing the Firmware Delivery Path The Flashing Station Is a Product Trust Boundary | CUP Focus Windchill Security: Restoring Trust in Engineering Data If the secure reflash takes longer, the shortcut wins Bendix EC80 Recall: Balancing Urgent Repair and Cybersecurity
May 20 · 39 min
Railway Cybersecurity Patches: When the Safety Case Must Be Revisited
A railway security patch can change the assumptions behind the safety case. Explore brownfield constraints, remediation decisions and protocol-aware filtering. The episode examines how to improve security while accounting for validation and continued service. Related CUP episodes: Legacy Railway Security: Patching and Validation Constraints Railway Patch Management: When an Update Stops the Network Railway Cybersecurity: Why Attack Detection Does Not Prove Safety Railway Cybersecurity: Service Risk Beyond the SIL Boundary Railway OT Segmentation: Protecting the Certified Core Railway API Security: When Authenticated Data Contradicts Reality Legacy Railway Cybersecurity: Why Policy Is Not Enough FRMCS Security: Why a Mobile Network SLA Is Not a Safety Case Frauscher FDS102: Securing Railway Diagnostic Access Railway OT Segmentation: When a Network Change Opens the Boundary
May 19 · 52 min
OT Session Hijacking: Revoking Trusted Engineering Access
A trusted engineering session can become an attack path after session hijacking. Explore the limits of VPN authentication, MFA and session monitoring in brownfield OT. The episode examines how operational authority can be withdrawn before access creates a physical consequence. Related CUP episodes: OT Session Theft: When a Token Bypasses the Jump Host AiTM Phishing: Why MFA Does Not Prevent Session Theft OT Remote Access: Closing the Path When the Work Ends Legacy VPNs in OT: Remote Access and the Cost of Disruption OT Remote Access: Securing the Path to Physical Control Oldsmar Incident: When Maintenance Access Becomes the Attack Path Control Plane Security: When Network Segmentation Is Rewritten Zero Trust in OT: Secure Access Beyond the HMI OT Emergency Access: Designing Secure Break-Glass Operations Oldsmar and OT Remote Access: Questioning Standing Trust
May 15 · 30 min
SBOM and VEX: Challenging Supplier Vulnerability Claims
A supplier statement that a vulnerability does not affect a product needs technical support. Explore how SBOM and VEX contribute to vulnerability decisions in software-defined vehicles. Learn why reachability, configuration and supporting evidence matter more than the existence of a document. Related CUP episodes: SBOM and VEX: Turning Vulnerability Data into OT Risk Decisions NIST IR 8536: Verifying the Software Supply Chain Automotive Supply Chains: Who Owns the Cybersecurity Fix? NIS2 Supplier Security: When Compliance Costs Become a Risk OT Supplier Risk: Building Resilience Without Vendor Cooperation Industrial Firewall Security: The Hidden Software Lifecycle ECU Flashing Security: The Evidence Needed Before Production Automotive Supplier Cybersecurity: When Compliance Drains R&D PLCnext Vulnerabilities: Assessing the Real OT Attack Path
May 13 · 35 min
FRMCS Security: Why a Mobile Network SLA Is Not a Safety Case
A mobile carrier service-level agreement does not establish railway safety. Explore FRMCS, EN 50159 and the consequences of a hostile, degraded or failing transport network. The episode examines which trust assumptions belong in the railway architecture. Related CUP episodes: Legacy Railway Security: Patching and Validation Constraints Industrial 5G Jamming: Protecting Control When the Radio Fails Railway OT Segmentation: Protecting the Certified Core Railway Cybersecurity: Why Attack Detection Does Not Prove Safety Railway Cybersecurity Patches: When the Safety Case Must Be Revisited OT Time Synchronization Security: When the Clock Lies Railway API Security: When Authenticated Data Contradicts Reality Railway Patch Management: When an Update Stops the Network Frauscher FDS102: Securing Railway Diagnostic Access Legacy Railway OT: Reducing Risk When You Cannot Harden the Asset
May 11 · 35 min
OT Session Theft: When a Token Bypasses the Jump Host
A stolen session token can undermine controls built around the jump host. Explore engineering-zone access, NTLM and device-bound session decisions. The episode examines how to prevent compromised corporate identity from becoming controller access. Related CUP episodes: OT Session Hijacking: Revoking Trusted Engineering Access AiTM Phishing: Why MFA Does Not Prevent Session Theft Legacy VPNs in OT: Remote Access and the Cost of Disruption OT Remote Access: Closing the Path When the Work Ends OT Emergency Access: Designing Secure Break-Glass Operations Zero Trust in OT: Secure Access Beyond the HMI Control Plane Security: When Network Segmentation Is Rewritten Oldsmar Incident: When Maintenance Access Becomes the Attack Path OT Remote Access: Securing the Path to Physical Control Oldsmar and OT Remote Access: Questioning Standing Trust
May 8 · 33 min
Software-Defined Vehicles: Securing Factory Cryptographic Provisioning
Cryptographic provisioning connects the manufacturing environment to the trustworthiness of a software-defined vehicle. Explore plant-floor security, supplier evidence and fleet monitoring. The episode examines why product protection depends on the network that provisions it. Related CUP episodes: Automotive Software Releases: When Security Rejects the Code The Flashing Station Is a Product Trust Boundary | CUP Focus Automotive Software Updates: Securing the Firmware Delivery Path ECU Flashing Stations: Where Factory and Product Security Meet Signed Firmware: Why the Signature Is Only Part of the Trust Chain ECU Flashing Security: The Evidence Needed Before Production Espressif Secure Boot: Where Firmware Trust Can Break Windchill Security: Restoring Trust in Engineering Data Euro 7 Cybersecurity: Protecting Emissions Compliance Data Secure ECU Reflashing: When Workshop Pressure Creates Shortcuts
May 6 · 41 min
Legacy Railway Security: Patching and Validation Constraints
Legacy railway patching requires more than installing an update. Explore TS 50701, validation constraints, data diodes and segregation around interlocking systems. The episode examines security options when an update can affect operational confidence. Related CUP episodes: Railway Cybersecurity Patches: When the Safety Case Must Be Revisited Railway Patch Management: When an Update Stops the Network Railway OT Segmentation: Protecting the Certified Core Railway Cybersecurity: Why Attack Detection Does Not Prove Safety Railway Cybersecurity: Service Risk Beyond the SIL Boundary FRMCS Security: Why a Mobile Network SLA Is Not a Safety Case Legacy Railway Cybersecurity: Why Policy Is Not Enough Railway OT Segmentation: When a Network Change Opens the Boundary Legacy Railway OT: Reducing Risk When You Cannot Harden the Asset OT Time Synchronization Security: When the Clock Lies
May 4 · 39 min
Legacy PLC Security: Where Digital Controls Meet Physical Limits
Legacy PLCs impose limits on cryptography and inline security inspection. Explore how defense in depth connects network controls with mechanical interlocks. The episode examines where security design must account for the timing and capacity of the physical process. Related CUP episodes: Siemens S7 PLC Security: How AI Changes Attack Feasibility AI Quality Inspection in OT: When a Bad Weld Passes Prompt Injection and Agentic AI Security: Executive Brief AI Welding Inspection: Why Software Integrity Is Not Process Integrity Kinetic AI and Critical Infrastructure: Connecting Cyber and Physical Risk Railway API Security: When Authenticated Data Contradicts Reality When Digital Actions Create Physical Impact | CUP Micro Brief Railway AI Supply Chains: Managing Subcontractor Data Leaks AI Sandbox Security: The OpenAI–Hugging Face Trust Boundary Indirect Prompt Injection: How Hidden Text Targets Enterprise AI
May 1 · 34 min
Railway OT Segmentation: Protecting the Certified Core
How can railway teams reduce cyber risk when modifying a certified signalling component is difficult? Explore segmentation, controlled access and protocol-aware inspection around CBTC environments. The episode focuses on controls that account for the constraints of the certified core. Related CUP episodes: Legacy Railway OT: Reducing Risk When You Cannot Harden the Asset Legacy rail assets do not become secure by policy Why Rail Operators Fear the Patch Detecting the Attack Is Not Proving Safety: IAM4RAIL and Railway Cybersecurity When a Patch Reopens the Safety Case Rail Service Risk Starts Outside the SIL Boundary Why FRMCS Cannot Trust the Mobile Carrier Authenticated but Wrong: When Railway APIs Contradict Physical Reality Frauscher FDS102: Why Railway Diagnostics Belong Inside the Security Boundary The Red Signal. Paralyzing a Railway Network with a Single Patch
April 29 · 33 min
OT Supplier Risk: Building Resilience Without Vendor Cooperation
Supplier restrictions can block SBOM requests, monitoring agents and changes to remote access. Explore how plant teams can respond when vendor cooperation cannot be assumed. The episode examines practical resilience decisions under warranty, latency and system-integrity constraints. Related CUP episodes: Supported Hardware, Vulnerable Software: The Hidden Lifecycle Risk in Industrial Firewalls [2026] Critical: Vendor Lock-in - Ransomware A Supplier List Is Not a Trust Chain: NIST IR 8536 and Verifiable Supply-Chain Traceability When VEX Becomes a Bureaucratic Shield NIS2 Supplier Security: When Compliance Costs Become a Risk SBOM: From Inventory to Decision Cyber Gaps in Automotive Supply A Critical CVE Is Not an Attack Path: Assessing PLCnext Risk in the Plant
April 27 · 29 min
Zero Trust in OT: Secure Access Beyond the HMI
OT Zero Trust must account for devices and workflows that cannot support modern identity controls directly. Explore how to place authorization around the access path rather than assuming the HMI or final device can enforce it. The focus is reducing exposure within legacy operational constraints. Related CUP episodes: OT Remote Access: Securing the Path to Physical Control OT Session Theft: When a Token Bypasses the Jump Host Oldsmar Incident: When Maintenance Access Becomes the Attack Path OT Remote Access: Closing the Path When the Work Ends OT Session Hijacking: Revoking Trusted Engineering Access Legacy VPNs in OT: Remote Access and the Cost of Disruption AiTM Phishing: Why MFA Does Not Prevent Session Theft Control Plane Security: When Network Segmentation Is Rewritten OT Emergency Access: Designing Secure Break-Glass Operations Railway Identity Security: When Attackers Use Valid Access
April 24 · 41 min
NIS2 Supplier Security: When Compliance Costs Become a Risk
A supplier can understand a cybersecurity requirement and still lack the resources to sustain it. Explore how compliance costs create pressure in industrial supply chains. The episode examines the gap between contractual obligations and the capacity to deliver reliable security. Related CUP episodes: The Compliance Theater. Draining Supplier R&D and Breaking Automotive Silos. Cyber Gaps in Automotive Supply A Supplier List Is Not a Trust Chain: NIST IR 8536 and Verifiable Supply-Chain Traceability When VEX Becomes a Bureaucratic Shield SBOM: From Inventory to Decision OT Supplier Risk: Building Resilience Without Vendor Cooperation Supported Hardware, Vulnerable Software: The Hidden Lifecycle Risk in Industrial Firewalls A Critical CVE Is Not an Attack Path: Assessing PLCnext Risk in the Plant
April 22 · 35 min
Legacy Railway OT: Reducing Risk When You Cannot Harden the Asset
Some railway assets remain in service while direct hardening is constrained. Explore segmentation for signalling cells, brokered remote access and inspection that understands the relevant protocols. The episode examines how to reduce exposure around a system that cannot readily be changed. Related CUP episodes: Railway OT Segmentation: Protecting the Certified Core Legacy rail assets do not become secure by policy Why FRMCS Cannot Trust the Mobile Carrier Why Rail Operators Fear the Patch Frauscher FDS102: Why Railway Diagnostics Belong Inside the Security Boundary The Friday Night Patch & The Illusion of Segmentation Detecting the Attack Is Not Proving Safety: IAM4RAIL and Railway Cybersecurity Hostile Time: When the Clock Lies in Critical OT The Red Signal. Paralyzing a Railway Network with a Single Patch When a Patch Reopens the Safety Case
April 20 · 47 min
AI Quality Inspection in OT: When a Bad Weld Passes
An incorrect inspection decision can move a defective part downstream without causing an obvious outage. Explore the limits of challenge parts and the difference between model validation and cybersecurity visibility. The episode examines how AI decisions connect to physical production. Related CUP episodes: AI Welding Inspection: Why Software Integrity Is Not Process Integrity AI Sensors in OT: Why Plausible Data Can Mislead the PLC When Digital Actions Create Physical Impact | CUP Micro Brief Legacy PLC Security: Where Digital Controls Meet Physical Limits Railway API Security: When Authenticated Data Contradicts Reality Agentic AI Security: Controlling Autonomous System Access Kinetic AI and Critical Infrastructure: Connecting Cyber and Physical Risk AI Sandbox Security: The OpenAI–Hugging Face Trust Boundary Railway AI Supply Chains: Managing Subcontractor Data Leaks Indirect Prompt Injection: How Hidden Text Targets Enterprise AI
April 17 · 38 min
Zero Trust for Brownfield OT: Working Within Legacy Constraints
How can Zero Trust apply to a brownfield industrial system? This episode addresses legacy OT security and IEC 62443. Related CUP episodes: Railway Cybersecurity Patches: When the Safety Case Must Be Revisited Weidmüller Router Security: When Segmentation Becomes an Attack Path PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary Siemens S7-1500: Managing PLC and Linux Security Lifecycles PLCnext Vulnerabilities: Assessing the Real OT Attack Path Industrial Firewall Security: The Hidden Software Lifecycle Legacy Railway Security: Patching and Validation Constraints KEV-First Patching: Prioritizing the Exposed Control Plane OT Hypervisor Security: Protecting HMIs, Historians and Jump Servers IBM X-Force: Exploiting Vulnerabilities Without Authentication
April 15 · 43 min
OT Vendor Ransomware: Managing Lock-In and Recovery Risk
A ransomware incident at an automation vendor can expose dependency and lock-in risks for the operator. This episode examines vendor risk and industrial recovery. Related CUP episodes: Minnesota Water Cyberattacks: When OT Security Meets Physical Risk Cyber Incident Roundup: Designing Degraded Operations NIS2 Incident Recovery: Aligning IT and Engineering Decisions OT Incident Recovery: Restoring Trust Beyond the Backup A Clean Backup Does Not Prove a Safe Restart | CUP Focus OT Recovery: Proving a Safe Restart Beyond the Backup OT Patch Management: Protecting Security and Production
April 13 · 39 min
AI Sensors in OT: Why Plausible Data Can Mislead the PLC
A field device can make autonomous calibration decisions that a deterministic controller accepts as trusted input. Explore the gap between plausible sensor data and physical reality. The episode examines why sensor validation and AI assurance need to reach beyond conventional network controls. Related CUP episodes: AI Quality Inspection in OT: When a Bad Weld Passes AI Welding Inspection: Why Software Integrity Is Not Process Integrity Siemens S7 PLC Security: How AI Changes Attack Feasibility Agentic AI Security: Controlling Autonomous System Access Kinetic AI and Critical Infrastructure: Connecting Cyber and Physical Risk When Digital Actions Create Physical Impact | CUP Micro Brief Indirect Prompt Injection: How Hidden Text Targets Enterprise AI Railway API Security: When Authenticated Data Contradicts Reality Railway AI Supply Chains: Managing Subcontractor Data Leaks AI Sandbox Security: The OpenAI–Hugging Face Trust Boundary
April 10 · 37 min
IBM Breach Cost Report: Governance, Resilience and NIS2
Breach-cost analysis can reveal differences in governance and recovery capability. Explore the IBM report alongside operational resilience and NIS2 responsibilities. The episode examines how security decisions translate into business consequences. Related CUP episodes: NIS2 Incident Recovery: Aligning IT and Engineering Decisions NIS2 Supplier Security: When Compliance Costs Become a Risk Automotive Supplier Cybersecurity: When Compliance Drains R&D
April 8 · 34 min
IBM X-Force: Exploiting Vulnerabilities Without Authentication
Attackers do not always need credentials to exploit an exposed vulnerability. Explore the IBM X-Force findings through exploitation speed and the changing barrier to initial access. The episode examines what those patterns mean for defensive priorities. Related CUP episodes: KEV-First Patching: Prioritizing the Exposed Control Plane PLCnext Vulnerabilities: Assessing the Real OT Attack Path PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary OT Patch Management: Protecting Security and Production Windchill Security: Restoring Trust in Engineering Data Zero Trust for Brownfield OT: Working Within Legacy Constraints Siemens Siveillance: When Edit Access Enables Code Execution Legacy Railway Security: Patching and Validation Constraints Industrial Firewall Security: The Hidden Software Lifecycle Weidmüller Router Security: When Segmentation Becomes an Attack Path

Showing 101–120 of 147 episodes