Cybersecurity Under Pressure. Real Attacks, Real Lessons

In this episode, we dive deep into the escalating threat landscape facing both enterprise IT and Operational Technology (OT) environments. Drawing from the eye-opening 2025 Verizon Data Breach Investigations Report, we unpack why stolen credentials and third-party vulnerabilities remain the top initial access vectors for ransomware and other devastating attacks. We move beyond theory to analyze re...

Short on time? Join hosts Marcus Webb and Riley Park for a fast-paced executive summary of the critical threats facing AI systems today. In this bite-sized episode of "Cybersecurity Under Pressure," Marcus and Riley distill the most important lessons from real-world AI vulnerabilities into actionable insights. We quickly break down why stealthy "black-box" TAP attacks are outpacing complex "white-...

In this episode of "Cybersecurity Under Pressure", we dive deep into the complex and rapidly evolving world of Artificial Intelligence cybersecurity. As Large Language Models (LLMs) evolve into autonomous "Agentic AI" capable of interacting with environments and executing real-world actions, the attack surface—and the pressure on security teams—has never been greater. Join us as we unpack critical...

Not every damaging cyberattack needs sophistication. Sometimes, sustained disruption is enough. A slow customer portal. Unstable supplier access. Degraded telemetry. In highly automated environments, these aren't just IT headaches—they're strategic pressure points that simultaneously hit operations, communications, and the C-suite. The real danger isn't downtime; it's the loss of visibility when l...

AI agents are no longer just assistants—they're autonomous operators with system access. This creates a new breed of insider threat that traditional security models can't detect or contain. In this episode, we break down why "least privilege" collapses when AI makes real-time decisions in physical environments like rail systems, automotive factories, and critical infrastructure. What you'll learn:...

Modern intrusions don't start with cinematic malware. They start with a login. When compromised accounts meet exposed gateways, attackers gain trusted paths deep into critical environments—no alarms triggered, no malware needed. The reality is that identity abuse and edge exploitation are no longer separate threats; attackers chain them into a unified intrusion model. In this episode, we dissect e...

In this brand new episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons, Alex and Sarah tackle why traditional monthly patching cycles are failing modern enterprises. Prompted by actively exploited edge vulnerabilities, they argue for a radical shift toward a KEV-first operations strategy. This episode covers how to prioritize external exploitation signals over CVSS scores, enforce e...

Welcome to a new episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons. If your security dashboard shows complete MFA adoption, you might still be compromised. Sarah and Alex break down the mechanics of Adversary-in-the-Middle (AiTM) attacks targeting the banking and insurance sectors. Discover why attackers are bypassing traditional authentication to steal session tokens, and learn...

In this new episode of Cybersecurity Under Pressure: Real Attacks, Real Lessons, hosts Sarah and Alex dissect the structural shift in automotive cyber threats. Moving past the outdated CAN bus hacking narrative, they explore how extortion crews are now targeting cloud services, APIs, and CI/CD pipelines to hold fleets hostage. Listen in for a rigorous breakdown of how to secure the update chain wi...

This episode dissects the strategic shift toward control plane exploitation, using the recent Cisco SD-WAN bypass (CVE-2026-20127) to illustrate how attackers are rewriting network segmentation in real-time. We analyze the fallout of the Odido leak and why "availability" has become the primary risk factor for industrial and automotive supply chains. We wrap up with a "Tier 0" roadmap for hardening...

We are back with another episode of Cybersecurity Under Pressure. Real Attacks, Real Lessons, diving into one of the most insidious vectors in operational technology: hostile time. At 06:05, a rail control room gets a burst of alarms, but the chronological sequence is physically impossible. The interlocking system reports an input changing after the command that supposedly triggered it. Time synch...

In this new chapter of Cybersecurity Under Pressure. Real Attacks, Real Lessons, we tackle the dangerous intersection of operational friction and systems engineering. A dealership laptop starts a DoIP reflash at 18:45. The authentication portal lags, the technician forces a shared session to stay alive, and suddenly the trust chain is compromised by a manual workaround. This episode challenges the...

Welcome to a new episode of Cybersecurity Under Pressure. Real Attacks, Real Lessons. It is Friday at 22:30, and a rail depot applies a minor network change to fix a flaky engineering link. By Monday morning, everything looks functional, but the security boundary has silently drifted. In this chapter, we break down why probabilistic defense and manual audits fundamentally fail in OT environments....

Welcome to a new weekly roundup episode of Cybersecurity Under Pressure. Real Attacks, Real Lessons. This week, we examine a cascade of high-impact events across multiple critical sectors: a massive DDoS wave knocking Deutsche Bahn’s passenger systems offline, ransomware forcing the University of Mississippi Medical Center to revert to manual workflows, a major data breach of France's FICOBA bank...

A vendor fixes an alarm at 4 PM. At midnight, that same remote tunnel is used to push an unsafe setpoint. Different intent, identical path. How does your network know the difference? Spoiler: It doesn't. This is the synthesis. We connect the dots from the previous episodes, the Oldsmar attack and the break-glass dilemma, to deliver a final verdict: You cannot patch your way to safety. You have to...

The packaging line stalls at 01:40 AM. Scrap is rising. The IAM server is down. Do you wait for IT to wake up, or do you reach for the "emergency" admin password kept in a drawer? That split-second decision is where security dies. In this episode, we tackle the uncomfortable friction between production pressure and cybersecurity. We explain why "temporary" bypasses often become permanent backdoors...

February 2021. An operator in Florida watches his cursor move across the screen on its own. It wasn’t a glitch; it was an active attempt to poison the water supply by changing sodium hydroxide levels. But here is the terrifying part: The attackers didn’t use a zero-day exploit. They used the plant’s own maintenance tools. In this episode, we dissect the Oldsmar incident to uncover a harsh reality:...

Picture a control room where HMIs work, but historians freeze and jump servers vanish. Nothing “OT” was hacked, but the digital floor beneath them just crumbled. This article analyzes why CVE-2025-22225 in VMware ESXi is not just another IT vulnerability, but a systemic risk to industrial safety. We explore the mechanics of the “Guest-to-Host” escape, why the hypervisor must now be treated with th...