Cybersecurity Under Pressure. Real Attacks, Real Lessons

Antonio González
  • 0,0 (0)
  • Technologie
  • Wöchentlich

This podcast breaks down real cybersecurity incidents to understand what actually went wrong, not in theory, but in practice. Each episode analyzes a recent attack, explains the technical mechanics in clear language, and translates them into concrete lessons for security, engineering, and business teams. Topics covered: OT security, ICS cybersecurity, industrial control systems, critical infrastructure protection, NIS2 compliance, Zero Trust architecture, operational technology resilience, railway cybersecurity, automotive security, and cyber-physical systems.

  1. vor 1 Tag

    Industrial 5G and the Uptime Trap: When Connectivity Becomes a Production Risk

    In this episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons, we explore the hidden risk behind industrial 5G: the belief that better connectivity automatically means stronger resilience. Private 5G, edge computing and connected industrial assets can improve flexibility, latency and operational visibility. But they also change the risk model of the plant. The production environment becomes more dependent on identity, network slicing, SIM/eSIM management, radio coverage, edge platforms, vendor access, cloud integration and telecom operational processes. The real issue is not whether industrial 5G is secure or insecure by design. The issue is whether organisations understand what they are becoming dependent on. A factory may gain uptime, but also create new failure modes if segmentation, monitoring, access control, fallback procedures and supplier responsibilities are not clearly defined. The key lesson is clear: industrial 5G should not be treated only as a connectivity project. It must be handled as an OT resilience project, where cybersecurity, safety, operations and business continuity are designed together before the plant becomes dependent on it.

    44 Min.

  2. vor 3 Tagen

    Hacking EV Chargers to Stress the Grid: When Mobility Becomes Critical Infrastructure

    n this episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons, we explore why EV chargers should no longer be treated as simple connected devices. As electric mobility scales, charging infrastructure becomes part of a wider cyber-physical system that connects vehicles, users, payment platforms, operators, cloud backends, energy providers and the grid. A weakness in one layer may not only expose data or interrupt charging. Under the right conditions, it can create operational stress, coordinated load manipulation, service disruption or loss of trust in critical infrastructure. The episode looks at the real attack paths behind this risk: weak charger authentication, vulnerable backend platforms, insecure maintenance access, poor segmentation, exposed APIs and insufficient monitoring between the charging network and the energy ecosystem. The key lesson is clear: EV charging cybersecurity is not only a mobility issue. It is also an energy resilience issue. Security needs to cover the charger, the backend, the operator, the supplier chain and the grid interface before attackers turn convenience into pressure.

    38 Min.

  3. vor 5 Tagen

    Teenage Hackers and Software-Defined Factories: When Industrial Risk Starts with Identity

    In this episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons, we look at a uncomfortable shift in industrial cybersecurity: the attacker does not always need deep OT knowledge to create operational impact. As factories become more software-defined, the attack surface moves beyond PLCs, HMIs and plant networks. Identity, remote access, cloud services, engineering workstations, supplier connections and software deployment pipelines become part of the production risk model. The episode explores how young, highly organised attackers can use social engineering, credential theft and weak access paths to move from IT compromise toward factory disruption, data exposure or loss of trust in the software loaded into industrial systems and vehicles. The key lesson is clear: protecting the plant now means protecting the full chain of trust. Identity controls, supplier access governance, OT segmentation, engineering station hardening, change monitoring, CSMS, PSIRT and incident response must work together before the pressure arrives.

    39 Min.

  4. 26. Juni

    The Compliance Theater. Draining Supplier R&D and Breaking Automotive Silos.

    our Tier-2 supplier just spent 80,000 euros on compliance. Their product cybersecurity did not improve by a single cent. In this episode of "Cybersecurity Under Pressure: Real Attacks, Real Lessons," we look at the compliance trap the automotive industry has built for its own supply chain. A single electronic component supplier must now navigate the overlapping demands of UNR 155, TISAX, and ISO 21434, and potentially the EU Cyber Resilience Act (CRA). The consequence? One exhausted engineering team building parallel "compliance theaters" to satisfy different auditors instead of building one secure product. We discuss the fatal flaw of managing requirements in silos and move beyond the sales pitch of PLM automation tools. Instead, we analyze the real engineering challenge: process convergence. Discover how to integrate Information Security Management Systems (ISMS) with Cybersecurity Management Systems (CSMS), using TISAX corporate controls as the baseline for ISO 21434 organizational requirements. We challenge OEMs and Tier-1s to stop outsourcing their compliance anxiety. Residual risk in the automotive supply chain isn't solved by adding more audit cycles. We explore practical strategies to optimize the audit burden and ensure supplier budgets are invested in actual product resilience, not just bureaucratic overhead. Listen now and subscribe to "Cybersecurity Under Pressure" for practical lessons on supply chain risk, process convergence, and real-world automotive cybersecurity defense.

    30 Min.

  5. 24. Juni

    The Red Signal. Paralyzing a Railway Network with a Single Patch

    In railway signaling, an uncoordinated security patch rarely causes a fatal accident. But it can paralyze an entire network. In this episode of Cybersecurity Under Pressure Real Attacks Real Lessons, we explore the structural tension between RAMS engineering and cybersecurity in critical railway infrastructure. We operate under EN 50129, where fail-safe guarantees that an interlocking system degrades into a restrictive state to protect human life. But the incoming prEN 50701 demands continuous patching, active monitoring, and rapid response. One patch. Two masters. Zero margin for error. We discuss what happens when you install a security update on a SIL 4 system without Assessment Body approval. The patch might close a CVE, but it triggers an unexpected system halt. The signals turn red, and the timetable collapses. We analyze safety and security co-engineering. It is not just about passing documents across a hallway. It is about defining a rigorous Safety Security Interface where your Threat Analysis and Risk Assessment maps mathematically to your System Hazard Analysis. Listen now to understand why residual risk in this sector is measured in infrastructure unavailability, and how to articulate hardware modifications when a cyber mitigation requires full CAB recertification.

    36 Min.

  6. 22. Juni

    The Shadow Corridor. Legacy VPNs and the Financial Blast Radius in OT

    Last month, a maintenance technician connected to a Level 1 PLC via VPN to fix a sensor. He did not know he had just opened the only door an attacker needed. In this episode of Cybersecurity Under Pressure Real Attacks Real Lessons, we look at a quiet failure in industrial architecture. The Purdue Model is not dead, but it is being bypassed from the inside. A direct VPN tunnel to OT infrastructure grants broad network access. It wraps lateral movement in implicit trust, delaying IDS correlation until the attacker already has command execution. Suddenly, the problem is not a broken sensor. It is a compromised plant floor. We discuss why classical VPN access for third party vendors is no longer just technical debt. Under NIS2 and the principles of IEC 62443, it is board level negligence with a compliance countdown attached. We analyze the transition to ZTNA architected for OT, focusing on continuous identity verification and forensic session recording to turn a vendor intervention into a strictly audited, least privilege transaction. But deploying ZTNA in legacy railway and automotive networks can become an operational trap. Without accounting for strict machinery manufacturer support contracts and industrial protocols, security teams face severe friction. It requires engineering redesign, not just a software patch. Because unmanaged remote access is no longer just an IT concern. It is a direct threat to the OPEX forecast, driving downtime costs, regulatory fines, and insurance premium hikes. Listen now and subscribe to Cybersecurity Under Pressure for practical lessons on OT cybersecurity, industrial resilience and real world network defense.

    51 Min.

  7. 19. Juni

    Missing Cybersecurity Evidence Can Delay Production

    The next production delay may not come from a missing component. It may come from missing cybersecurity evidence. In this episode of Cybersecurity Under Pressure: real attacks, real lessons, we look at a growing risk in automotive supply chains: suppliers may deliver the ECU, the software may work, and the release plan may look under control. Then a vulnerability appears, a VSOC event raises questions, or the OEM asks whether a specific component, diagnostic function, OTA path, certificate or backend dependency is affected. Suddenly, the blocking item is not hardware. It is evidence. We discuss why generic documentation is not enough during a real incident. Automotive teams need decision-grade evidence: affected-version mapping, VEX-enriched SBOMs, vulnerability impact analysis, TARA delta, V&V evidence, mitigation status, incident timelines, escalation contacts and cybersecurity case support. A raw SBOM can become a trap. Without exploitability justification, engineering teams may waste critical time chasing theoretical CVEs that are not reachable in the actual ECU architecture. The supplier must own the first exploitability assessment, while the OEM or Tier 1 still owns the final risk decision. Because supplier governance is no longer just a purchasing annex. It is a production resilience control. Listen now and subscribe to Cybersecurity Under Pressure for practical lessons on automotive cybersecurity, supply chain risk and real-world product incident response.

    39 Min.

  8. 17. Juni

    An IDPS Alert Is Not an Incident Response Capability

    Detecting a suspicious event in a vehicle is not the same as knowing what to do next. In this episode of Cybersecurity Under Pressure: real attacks, real lessons, we look at one of the weakest points in automotive cybersecurity: the gap between detection and decision-making. A vehicle may report suspicious diagnostic behaviour. A backend may receive telemetry. A VSOC may flag an anomaly linked to connectivity, certificates, OTA, CAN traffic or unexpected service requests. The alert exists. But the real problem starts after that. Who owns the next action? Is it a cyber incident, a vulnerability, a supplier software defect, a quality issue or a false positive? Which ECU, software version, backend service, vehicle programme or aftersales process is affected? Can the evidence be trusted enough to support a product decision? We discuss why IDPS and VSOC tooling are not enough without pre-agreed triage criteria, trusted evidence sources, supplier forensic agreements, TARA impact rules, cybersecurity case update triggers and clear containment decision rights. Because in automotive cybersecurity, the real capability is not the alert. It is the ability to turn that alert into a defensible product decision before the incident becomes a governance problem. Listen now and subscribe to Cybersecurity Under Pressure for practical lessons on automotive cybersecurity, product risk and real-world incident response.

    39 Min.
Alle anzeigen (65)

Info

This podcast breaks down real cybersecurity incidents to understand what actually went wrong, not in theory, but in practice. Each episode analyzes a recent attack, explains the technical mechanics in clear language, and translates them into concrete lessons for security, engineering, and business teams. Topics covered: OT security, ICS cybersecurity, industrial control systems, critical infrastructure protection, NIS2 compliance, Zero Trust architecture, operational technology resilience, railway cybersecurity, automotive security, and cyber-physical systems.

Informationen