Cybersecurity Under Pressure. Real Attacks, Real Lessons

Antonio González
  • 0.0 (0)
  • Technology
  • Updated Weekly

This podcast breaks down real cybersecurity incidents to understand what actually went wrong, not in theory, but in practice. Each episode analyzes a recent attack, explains the technical mechanics in clear language, and translates them into concrete lessons for security, engineering, and business teams. Topics covered: OT security, ICS cybersecurity, industrial control systems, critical infrastructure protection, NIS2 compliance, Zero Trust architecture, operational technology resilience, railway cybersecurity, automotive security, and cyber-physical systems.

  1. 8h ago

    Stopping Stealthy Radio Jamming in Industrial 5G: When the Air Interface Becomes the Attack Surface

    In this episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons, we explore a risk that is often underestimated in industrial 5G environments: stealthy radio jamming. Industrial 5G is usually presented as a driver for uptime, low latency, automation and flexible production. But once wireless connectivity supports mobile robots, AGVs, sensors, remote operations or safety-relevant workflows, the radio layer becomes part of the industrial risk model. The episode looks at how attackers may not need to fully disconnect a factory to create impact. Subtle interference, selective jamming, signal degradation or disruption of specific cells can create intermittent failures, delayed commands, false troubleshooting paths and operational uncertainty. The key lesson is clear: industrial 5G resilience cannot rely only on encryption, authentication or core network security. Organisations need spectrum monitoring, anomaly detection, coverage planning, fallback procedures, supplier accountability and incident response playbooks that treat radio interference as a real OT security scenario.

    33 min

  2. 2d ago

    How EV Chargers Could Crash the Grid: The Cyber Risk Behind Mass Electrification

    In this episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons, we explore how electric vehicle chargers could become more than a mobility cybersecurity problem. As EV charging infrastructure grows, thousands of connected chargers start acting like distributed energy assets. Each charger depends on firmware, cloud platforms, payment systems, operator backends, remote maintenance, APIs and grid coordination mechanisms. If attackers compromise enough of this ecosystem, the impact may move beyond data theft or local service disruption. The episode looks at how weak authentication, exposed management interfaces, insecure backend platforms, poor supplier access control and lack of grid-aware monitoring could allow attackers to manipulate charging behaviour at scale. The risk is not that one charger fails. The real concern is coordinated load manipulation, demand spikes, service instability and loss of trust in critical infrastructure. The key lesson is clear: EV charging security must be treated as energy resilience. The charger, the backend, the operator, the supplier chain and the grid interface must be governed together before mass electrification turns a convenience layer into a systemic risk.

    49 min

  3. 4d ago

    Defending Industrial Networks from Cyber Attacks: Why Resilience Beats Perimeter Security

    In this episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons, we look at what it really means to defend an industrial network when production, safety and uptime are part of the equation. Industrial environments are not protected by applying standard IT controls in isolation. Many plants still depend on legacy assets, flat network zones, fragile protocols, shared vendor access, engineering workstations, limited patch windows and systems that cannot simply be restarted during an incident. The episode explores why effective OT defense starts with visibility, asset ownership and network segmentation, but cannot stop there. Real resilience requires secure remote access, hardened engineering stations, controlled change management, passive monitoring, tested incident response, recovery procedures and clear coordination between OT, IT, suppliers and business leadership. The key lesson is clear: defending industrial networks is not about building a perfect perimeter. It is about reducing propagation, detecting abnormal behaviour early and keeping the physical process safe when something goes wrong.

    43 min

  4. Jul 3

    Industrial 5G and the Uptime Trap: When Connectivity Becomes a Production Risk

    In this episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons, we explore the hidden risk behind industrial 5G: the belief that better connectivity automatically means stronger resilience. Private 5G, edge computing and connected industrial assets can improve flexibility, latency and operational visibility. But they also change the risk model of the plant. The production environment becomes more dependent on identity, network slicing, SIM/eSIM management, radio coverage, edge platforms, vendor access, cloud integration and telecom operational processes. The real issue is not whether industrial 5G is secure or insecure by design. The issue is whether organisations understand what they are becoming dependent on. A factory may gain uptime, but also create new failure modes if segmentation, monitoring, access control, fallback procedures and supplier responsibilities are not clearly defined. The key lesson is clear: industrial 5G should not be treated only as a connectivity project. It must be handled as an OT resilience project, where cybersecurity, safety, operations and business continuity are designed together before the plant becomes dependent on it.

    44 min

  5. Jul 1

    Hacking EV Chargers to Stress the Grid: When Mobility Becomes Critical Infrastructure

    n this episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons, we explore why EV chargers should no longer be treated as simple connected devices. As electric mobility scales, charging infrastructure becomes part of a wider cyber-physical system that connects vehicles, users, payment platforms, operators, cloud backends, energy providers and the grid. A weakness in one layer may not only expose data or interrupt charging. Under the right conditions, it can create operational stress, coordinated load manipulation, service disruption or loss of trust in critical infrastructure. The episode looks at the real attack paths behind this risk: weak charger authentication, vulnerable backend platforms, insecure maintenance access, poor segmentation, exposed APIs and insufficient monitoring between the charging network and the energy ecosystem. The key lesson is clear: EV charging cybersecurity is not only a mobility issue. It is also an energy resilience issue. Security needs to cover the charger, the backend, the operator, the supplier chain and the grid interface before attackers turn convenience into pressure.

    38 min

  6. Jun 29

    Teenage Hackers and Software-Defined Factories: When Industrial Risk Starts with Identity

    In this episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons, we look at a uncomfortable shift in industrial cybersecurity: the attacker does not always need deep OT knowledge to create operational impact. As factories become more software-defined, the attack surface moves beyond PLCs, HMIs and plant networks. Identity, remote access, cloud services, engineering workstations, supplier connections and software deployment pipelines become part of the production risk model. The episode explores how young, highly organised attackers can use social engineering, credential theft and weak access paths to move from IT compromise toward factory disruption, data exposure or loss of trust in the software loaded into industrial systems and vehicles. The key lesson is clear: protecting the plant now means protecting the full chain of trust. Identity controls, supplier access governance, OT segmentation, engineering station hardening, change monitoring, CSMS, PSIRT and incident response must work together before the pressure arrives.

    39 min

  7. Jun 26

    The Compliance Theater. Draining Supplier R&D and Breaking Automotive Silos.

    our Tier-2 supplier just spent 80,000 euros on compliance. Their product cybersecurity did not improve by a single cent. In this episode of "Cybersecurity Under Pressure: Real Attacks, Real Lessons," we look at the compliance trap the automotive industry has built for its own supply chain. A single electronic component supplier must now navigate the overlapping demands of UNR 155, TISAX, and ISO 21434, and potentially the EU Cyber Resilience Act (CRA). The consequence? One exhausted engineering team building parallel "compliance theaters" to satisfy different auditors instead of building one secure product. We discuss the fatal flaw of managing requirements in silos and move beyond the sales pitch of PLM automation tools. Instead, we analyze the real engineering challenge: process convergence. Discover how to integrate Information Security Management Systems (ISMS) with Cybersecurity Management Systems (CSMS), using TISAX corporate controls as the baseline for ISO 21434 organizational requirements. We challenge OEMs and Tier-1s to stop outsourcing their compliance anxiety. Residual risk in the automotive supply chain isn't solved by adding more audit cycles. We explore practical strategies to optimize the audit burden and ensure supplier budgets are invested in actual product resilience, not just bureaucratic overhead. Listen now and subscribe to "Cybersecurity Under Pressure" for practical lessons on supply chain risk, process convergence, and real-world automotive cybersecurity defense.

    30 min

  8. Jun 24

    The Red Signal. Paralyzing a Railway Network with a Single Patch

    In railway signaling, an uncoordinated security patch rarely causes a fatal accident. But it can paralyze an entire network. In this episode of Cybersecurity Under Pressure Real Attacks Real Lessons, we explore the structural tension between RAMS engineering and cybersecurity in critical railway infrastructure. We operate under EN 50129, where fail-safe guarantees that an interlocking system degrades into a restrictive state to protect human life. But the incoming prEN 50701 demands continuous patching, active monitoring, and rapid response. One patch. Two masters. Zero margin for error. We discuss what happens when you install a security update on a SIL 4 system without Assessment Body approval. The patch might close a CVE, but it triggers an unexpected system halt. The signals turn red, and the timetable collapses. We analyze safety and security co-engineering. It is not just about passing documents across a hallway. It is about defining a rigorous Safety Security Interface where your Threat Analysis and Risk Assessment maps mathematically to your System Hazard Analysis. Listen now to understand why residual risk in this sector is measured in infrastructure unavailability, and how to articulate hardware modifications when a cyber mitigation requires full CAB recertification.

    36 min
See All (68)

About

This podcast breaks down real cybersecurity incidents to understand what actually went wrong, not in theory, but in practice. Each episode analyzes a recent attack, explains the technical mechanics in clear language, and translates them into concrete lessons for security, engineering, and business teams. Topics covered: OT security, ICS cybersecurity, industrial control systems, critical infrastructure protection, NIS2 compliance, Zero Trust architecture, operational technology resilience, railway cybersecurity, automotive security, and cyber-physical systems.

Information

You Might Also Like