PODCAST · technology
Cybersecurity Under Pressure. Real Attacks, Real Lessons
by Antonio Gonzalez
This podcast breaks down real cybersecurity incidents to understand what actually went wrong, not in theory, but in practice. Each episode analyzes a recent attack, explains the technical mechanics in clear language, and translates them into concrete lessons for security, engineering, and business teams. The focus is on operational reality, decision making under pressure, and the controls that truly reduce risk in production environments.
-
47
Why Rail Operators Fear the Patch
Most people think rail cybersecurity is a patching problem, but it is actually a validation nightmare that can stop your entire network in its tracks.In this episode, we break down why the standard patch or perish mindset fails when a single software update becomes an operational gamble with safety and timetables. We walk through the reality of TS 50701 and explore how data diodes and strict physical segregation provide a path forward for legacy interlockings.If you are securing critical rail assets, you need to stop chasing the perfect patch and start building resilience that does not require a return route into your train control domain.Subscribe to the show and share this with the engineer who is tired of being told to just update their firmware.#railsecurity #cybersecurity #criticalinfrastructure #otsecurity #ts50701
-
46
When Physics is the Final Firewall
If you think your OT security problem is a lack of awareness, you’re missing the fact that your hardware literally cannot handle the solution. 🔌In this episode, we’re getting real about why legacy PLCs were never meant for modern crypto and how forcing it can actually tank your process. We walk through why deep packet inspection is often a trap and how to build a defense-in-depth strategy that moves from the network all the way down to the laws of physics. 🏗️You need to know where the digital controls end and the mechanical interlocks begin before a "security" update shuts down your entire line. 📉Hit subscribe to stay ahead of the curve, and drop your take on out-of-band vs. inline in the comments.#OTSecurity #IndustrialCyber #CyberPhysics #ICS
-
45
That is the part many cybersecurity plans still miss, OT controls under revision
The smartest OT control in rail is often the one that leaves the certified core untouched#RailCybersecurity #CBTC #EN50129 #TS50701 #IEC62443 #DPI #OTSecurity #Railway🎯 IN THIS EPISODE:• Railway and transportation cybersecurity• AI and machine learning security risks📋 KEY TOPICS COVERED:• Railway Cybersecurity• AI Security🔑 KEY INSIGHTS:1. The smartest OT control in rail is often the one that leaves the certified core untouched2. That is the part many cybersecurity plans still miss3. In a CBTC or signalling environment, segmentation is not just a network design exercise🔧 TECHNOLOGIES & STANDARDS:CERT • IEC • CAN Bus • ECU • CBTC👥 WHO SHOULD LISTEN:This episode is perfect for CISOs, OT security engineers, infrastructure operators, compliance officers, cybersecurity consultants, and anyone responsible for protecting critical systems.💡 WHAT YOU WILL LEARN:• How real attacks unfold in OT/ICS environments• Practical defense strategies you can implement today• Compliance considerations (NIS2, IEC 62443, NIST)• Lessons from recent high-profile incidents🎧 SUBSCRIBE & CONNECT:Subscribe for weekly deep dives into real cybersecurity incidents affecting OT, ICS, and critical infrastructure. New episodes every week.💬 ENGAGE WITH US:Have questions or topics you'd like us to cover? Reach out! We love hearing from our community.#OTSecurity #OperationalTechnology #RailwaySecurity #TransportSecurity #AISecurity #MachineLearning #ThreatIntel #CyberThreats #CyberSecurity #InfoSec #CybersecurityUnderPressure
-
44
Supply Chain: When the supplier will not cooperate resilience must become
When the supplier will not cooperate, resilience must become hostileToo many OT risk programs still assume the vendor will help when it matters. In real plants, that assumption breaks fast. Large integrators often resist SBOM requests, reject monitoring agents, and defend remote access as if it were untouchable because of warranty, latency or system integrity.🎯 IN THIS EPISODE:• Regulatory compliance frameworks (NIS2, IEC 62443)• NIST cybersecurity framework implementation• AI and machine learning security risks• Supply chain security and third-party risk📋 KEY TOPICS COVERED:• Supply Chain Security• AI Security🔑 KEY INSIGHTS:1. When the supplier will not cooperate, resilience must become hostile2. Too many OT risk programs still assume the vendor will help when it matters3. In real plants, that assumption breaks fast🔧 TECHNOLOGIES & STANDARDS:NIST • ISO • IEC • PLC • CAN Bus • ECU👥 WHO SHOULD LISTEN:This episode is perfect for CISOs, OT security engineers, infrastructure operators, compliance officers, cybersecurity consultants, and anyone responsible for protecting critical systems.💡 WHAT YOU WILL LEARN:• How real attacks unfold in OT/ICS environments• Practical defense strategies you can implement today• Compliance considerations (NIS2, IEC 62443, NIST)• Lessons from recent high-profile incidents🎧 SUBSCRIBE & CONNECT:Subscribe for weekly deep dives into real cybersecurity incidents affecting OT, ICS, and critical infrastructure. New episodes every week.💬 ENGAGE WITH US:Have questions or topics you'd like us to cover? Reach out! We love hearing from our community.#OTSecurity #OperationalTechnology #AISecurity #MachineLearning #SupplyChain #ThirdPartyRisk #Compliance #CyberSecurity #InfoSec #CybersecurityUnderPressure
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
This podcast breaks down real cybersecurity incidents to understand what actually went wrong, not in theory, but in practice. Each episode analyzes a recent attack, explains the technical mechanics in clear language, and translates them into concrete lessons for security, engineering, and business teams. The focus is on operational reality, decision making under pressure, and the controls that truly reduce risk in production environments.
HOSTED BY
Antonio Gonzalez
CATEGORIES
Loading similar podcasts...