Skip to content
Sign in
Artwork for Cybersecurity Under Pressure. Real Attacks, Real Lessons
Technology

Cybersecurity Under Pressure. Real Attacks, Real Lessons

Antonio González

Cybersecurity Under Pressure examines real incidents, technical research and security decisions across industrial systems, railways and connected vehicles. Antonio González connects attack mechanisms with engineering constraints, operational resilience and product-security evidence. Explore OT and ICS security, automotive and railway cybersecurity, software supply chains and the decisions behind secure operations.

Play
Open in
  • 148 episodes
  • daily
  • Avg 35 min
  • English

Episodes 148

NewestOldestLongest
All8Unplayed8In progress0Played0
Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.
  • S1 · E7
    February 27 · 46 min

    OT Time Synchronization Security: When the Clock Lies

    Manipulated time can make operational alarms and event sequences unreliable. Explore time synchronization as a security dependency in critical OT and railway systems. The episode examines how a compromised clock affects investigation, control decisions and confidence in the evidence. Related CUP episodes: Railway Patch Management: When an Update Stops the Network FRMCS Security: Why a Mobile Network SLA Is Not a Safety Case Legacy Railway Cybersecurity: Why Policy Is Not Enough Railway API Security: When Authenticated Data Contradicts Reality Legacy Railway Security: Patching and Validation Constraints Railway OT Segmentation: When a Network Change Opens the Boundary Railway Cybersecurity: Why Attack Detection Does Not Prove Safety Railway Cybersecurity: Service Risk Beyond the SIL Boundary Legacy Railway OT: Reducing Risk When You Cannot Harden the Asset Railway OT Segmentation: Protecting the Certified Core

  • S1 · E6
    February 25 · 23 min

    DoIP Reflashing: Securing the Workshop Without Creating Shortcuts

    Workshop pressure can encourage technicians to bypass a slow or unreliable authentication workflow during DoIP reflashing. Explore shared sessions, update provenance and the practical conditions of vehicle maintenance. The episode examines how usable controls protect the reflash trust chain. Related CUP episodes: Secure ECU Reflashing: When Workshop Pressure Creates Shortcuts Bendix EC80 Recall: Balancing Urgent Repair and Cybersecurity ECU Flashing Security: The Evidence Needed Before Production ECU Flashing Stations: Where Factory and Product Security Meet Signed Firmware: Why the Signature Is Only Part of the Trust Chain Euro 7 Cybersecurity: Protecting Emissions Compliance Data The Flashing Station Is a Product Trust Boundary | CUP Focus Automotive Software Releases: When Security Rejects the Code Software-Defined Vehicles: Securing Factory Cryptographic Provisioning Espressif Secure Boot: Where Firmware Trust Can Break

  • S1 · E5
    February 23 · 29 min

    Railway OT Segmentation: When a Network Change Opens the Boundary

    A small network change can leave a railway engineering link functional while weakening its security boundary. Explore configuration drift, segmentation and the limitations of periodic audits in OT. The episode examines how teams can verify the intended boundary after maintenance. Related CUP episodes: Railway Patch Management: When an Update Stops the Network Railway Cybersecurity Patches: When the Safety Case Must Be Revisited Legacy Railway Security: Patching and Validation Constraints OT Time Synchronization Security: When the Clock Lies Railway Cybersecurity: Why Attack Detection Does Not Prove Safety Railway API Security: When Authenticated Data Contradicts Reality Legacy Railway OT: Reducing Risk When You Cannot Harden the Asset Legacy Railway Cybersecurity: Why Policy Is Not Enough Frauscher FDS102: Securing Railway Diagnostic Access FRMCS Security: Why a Mobile Network SLA Is Not a Safety Case

  • February 21 · 40 min

    Cyber Incident Roundup: Designing Degraded Operations

    Cyber incidents across railways, healthcare, banking and semiconductor supply chains expose a shared operational problem: what happens when core services degrade. This roundup examines recovery, manual workarounds and the engineering of degraded operations. Explore why continuity depends on workflows that remain reliable under pressure. Related CUP episodes: OT Vendor Ransomware: Managing Lock-In and Recovery Risk Minnesota Water Cyberattacks: When OT Security Meets Physical Risk OT Recovery: Proving a Safe Restart Beyond the Backup OT Patch Management: Protecting Security and Production OT Incident Recovery: Restoring Trust Beyond the Backup A Clean Backup Does Not Prove a Safe Restart | CUP Focus NIS2 Incident Recovery: Aligning IT and Engineering Decisions

  • S1 · E4
    February 20 · 32 min

    OT Remote Access: Securing the Path to Physical Control

    The same remote maintenance path can support a repair and later permit an unsafe control action. Explore vendor access, authorization and the path from an enterprise account to physical control. The episode examines how to constrain access according to the operational task. Related CUP episodes: Oldsmar Incident: When Maintenance Access Becomes the Attack Path Legacy VPNs in OT: Remote Access and the Cost of Disruption OT Emergency Access: Designing Secure Break-Glass Operations OT Session Hijacking: Revoking Trusted Engineering Access Zero Trust in OT: Secure Access Beyond the HMI OT Remote Access: Closing the Path When the Work Ends OT Session Theft: When a Token Bypasses the Jump Host AiTM Phishing: Why MFA Does Not Prevent Session Theft Control Plane Security: When Network Segmentation Is Rewritten Railway OT Segmentation: When a Network Change Opens the Boundary

  • S1 · E3
    February 18 · 27 min

    OT Emergency Access: Designing Secure Break-Glass Operations

    An industrial emergency can coincide with an unavailable identity service. Explore break-glass access, production pressure and the security decisions needed to support urgent maintenance. The episode examines how emergency workflows can preserve accountability and operational boundaries. Related CUP episodes: OT Remote Access: Securing the Path to Physical Control OT Session Theft: When a Token Bypasses the Jump Host OT Remote Access: Closing the Path When the Work Ends Control Plane Security: When Network Segmentation Is Rewritten Oldsmar Incident: When Maintenance Access Becomes the Attack Path Legacy VPNs in OT: Remote Access and the Cost of Disruption OT Session Hijacking: Revoking Trusted Engineering Access AiTM Phishing: Why MFA Does Not Prevent Session Theft Zero Trust in OT: Secure Access Beyond the HMI Oldsmar and OT Remote Access: Questioning Standing Trust

  • S1 · E2
    February 16 · 28 min

    Oldsmar Incident: When Maintenance Access Becomes the Attack Path

    The reported Oldsmar incident brought remote maintenance access and water-treatment control into the same security discussion. Explore how standing trust, operator access and IT/OT convergence create an operational attack path. The episode examines the controls around maintenance authority. Related CUP episodes: OT Remote Access: Securing the Path to Physical Control OT Session Hijacking: Revoking Trusted Engineering Access Control Plane Security: When Network Segmentation Is Rewritten Legacy VPNs in OT: Remote Access and the Cost of Disruption OT Remote Access: Closing the Path When the Work Ends OT Session Theft: When a Token Bypasses the Jump Host OT Emergency Access: Designing Secure Break-Glass Operations Zero Trust in OT: Secure Access Beyond the HMI AiTM Phishing: Why MFA Does Not Prevent Session Theft Oldsmar and OT Remote Access: Questioning Standing Trust

  • S1 · E1
    February 7 · 31 min

    OT Hypervisor Security: Protecting HMIs, Historians and Jump Servers

    A compromise of the virtualization layer can affect several OT dependencies at once. Explore the hypervisor as an attack surface around HMIs, historians and jump servers. Related CUP episodes: PowerLogic T300 Security: When SSH Access Crosses the Trust Boundary KEV-First Patching: Prioritizing the Exposed Control Plane Siemens S7-1500: Managing PLC and Linux Security Lifecycles Weidmüller Router Security: When Segmentation Becomes an Attack Path PLCnext Vulnerabilities: Assessing the Real OT Attack Path Industrial Firewall Security: The Hidden Software Lifecycle Zero Trust for Brownfield OT: Working Within Legacy Constraints OT Patch Management: Protecting Security and Production Railway Patch Management: When an Update Stops the Network Windchill Security: Restoring Trust in Engineering Data

Showing 141–148 of 148 episodes