Cybersecurity Under Pressure. Real Attacks, Real Lessons

Antonio González

Cybersecurity Under Pressure examines real incidents, technical research and security decisions across industrial systems, railways and connected vehicles. Antonio González connects attack mechanisms with engineering constraints, operational resilience and product-security evidence. Explore OT and ICS security, automotive and railway cybersecurity, software supply chains and the decisions behind secure operations.

  1. 1d ago ·  Bonus

    Connected Vehicle Security: From Cloud API to In-Vehicle Control | CUP Focus

    The API gateway may validate a remote command while the internal vehicle network accepts it without equivalent checks. This CUP Focus explains why cloud authorization, telematics and in-vehicle trust must be assessed as one attack path. Format: CUP Focus, a self-contained section from the Cybersecurity Under Pressure archive. Related CUP episodes: Your License Plate Is the Password: What the Kia API Hack RevealedWhen a License Plate Becomes a Password | CUP Micro BriefJeep Hack Lessons: Testing Vehicle Gateway Trust BoundariesAutomotive Extortion: Protecting Cloud, APIs and the Update Chain

  2. 2d ago

    A Station Identifier Is Not Proof of Station Identity

    What happens when an EV charging backend accepts a station identifier without proving which station is actually connecting? This episode examines the Monta OCPP authentication weakness described in CVE-2026-95102 and CISA ICSA-26-274-02. We break down how identifier-based trust can enable station impersonation, why possession of an ID is not authentication, and what operators should enforce at the WebSocket and deployment layers. We also separate demonstrated impact from broader speculation: the issue supports unauthorized station identity claims, but it does not by itself prove widespread exploitation or direct compromise of vehicles or the power grid. Key lessons: • Treat station identity as an authenticated claim • Enforce credentials or certificates at connection time • Bind provisioning, authorization, and revocation to each charger • Monitor duplicate or anomalous station connections • Validate deployment controls, not only protocol support

  3. 3d ago

    BLE Vehicle Security: The Risk of a Shared Authentication Key | CUP Micro Brief

    Researchers found two million aftermarket vehicle devices sharing one Bluetooth authentication key. This CUP Micro Brief shows how manufacturing convenience became a scalable path to vehicle functions. Related CUP episodes: BLE Theft Auto: How Aftermarket Devices Bypass Vehicle SecurityAftermarket Car Alarm Security: Managing Vehicle ModificationsUC San Diego Research: Aftermarket Anti-Theft Device SecurityYour License Plate Is the Password: What the Kia API Hack Revealed

  4. 3d ago ·  Bonus

    Vehicle-to-Grid Security: Coordinated Charging and Grid Risk | CUP Focus

    V2G can support the energy system, but aggregated charging and discharging also create a coordinated control surface. This CUP Focus follows the path from distributed vehicle batteries to frequency disturbance, demand spikes and cascading grid protection events. Format: CUP Focus, a self-contained section from the Cybersecurity Under Pressure archive. Related CUP episodes: EV Charging Cybersecurity: How Charger Attacks Could Affect the GridEV Charging and Grid Security: When Mobility Becomes InfrastructureAutomotive IDPS, VSOC and PSIRT: From Alert to ResponseWhen EV Charging Becomes a Cyber-Kinetic Risk | CUP Micro Brief

  5. 4d ago ·  Bonus

    Clean Code Does Not Prove a Safe Process | CUP Micro Brief

    Clean code and verified binaries do not prove that a physical process is safe. This CUP Micro Brief explains how attackers can change parameters and references without changing the software, and why independent production evidence matters. Related CUP episode: Why Clean Code Causes Industrial Disasters

  6. 4d ago

    How Reading PLC Data Crashes Industrial Systems

    A monitoring function should observe a PLC, not destabilize it. But when diagnostic access, shared buffers and runtime synchronization interact badly, a read operation can become an availability event. This episode examines how an improper synchronization flaw in a CODESYS runtime can turn routine PLC monitoring into a denial-of-service path. We follow the chain from memory handling and race conditions to plant-level consequences, then test the usual responses: patch immediately, isolate the engineering path, restrict monitoring access, or compensate until a controlled maintenance window is available. The central lesson is operational: read-only intent does not guarantee read-only impact. Asset owners need to treat engineering and monitoring services as active trust boundaries, validate vendor fixes against the real process, and detect abnormal diagnostic behavior before it becomes loss of control or loss of visibility. Chapters 00:00 Context and Central Question 09:44 The Technical Breakdown 19:20 The Operational Decisions 26:41 The Pressure Test 34:01 The Key Takeaways Cybersecurity Under Pressure: Real Attacks, Real Lessons. https://cybersecurityunderpressure.com/

  7. 5d ago ·  Bonus

    Industrial 5G Network Slicing: The Limits of Isolation | CUP Focus

    A private 5G slice can separate traffic without creating an independent physical network. This CUP Focus examines the SDN controller, hypervisor and cross-slice paths that can turn software-defined isolation into a shared point of failure. Format: CUP Focus, a self-contained section from the Cybersecurity Under Pressure archive. Related CUP episodes: Industrial 5G Security: Designing for Lost ConnectivityIndustrial 5G Jamming: Protecting Control When the Radio FailsWhen 40 Milliseconds Become an OT Incident | CUP Micro BriefFRMCS Security: Why a Mobile Network SLA Is Not a Safety Case

  8. 5d ago

    Security Appliance Risks: The Hardcoded Master Key | CUP Micro Brief

    A security appliance can become the weakest trust boundary when its vendor embeds an unchangeable master key. This CUP Micro Brief explains why the resulting blast radius extends far beyond one device. Related CUP episodes: Johnson Controls Airwall: The Risk Behind a Hardcoded KeyIndustrial Firewall Security: The Hidden Software LifecycleWindchill Security: Restoring Trust in Engineering DataIndustrial Network Security: Designing for Operational Resilience

See All (136)

About

Cybersecurity Under Pressure examines real incidents, technical research and security decisions across industrial systems, railways and connected vehicles. Antonio González connects attack mechanisms with engineering constraints, operational resilience and product-security evidence. Explore OT and ICS security, automotive and railway cybersecurity, software supply chains and the decisions behind secure operations.

Information