Cybersecurity Under Pressure podcast artworkCybersecurity Under PressureReal Attacks. Real Lessons.Weekly Brief
Evidence-led analysisPodcast + written referenceOT · Automotive · Rail · Product · AIMon · Wed · Fri
Industrial · Product · Cyber-physical security

When the incident is real, the decision matters more than the headline.

Cybersecurity Under Pressure examines real attacks, technical failure paths and the evidence needed to make defensible decisions across OT, automotive, railway, product and AI security.

Read the latest analysisListen to the podcast →New here? Start here →
Featured analysisAutomotive · Product Security · 4 min · 3 sources · 1 visual

Aftermarket Security Devices Can Become Part of the Vehicle Attack Surface

Dealer-installed security hardware can cross the vehicle trust boundary without being governed like an OEM security component.

The decision

Treat privileged aftermarket electronics as governed product-security dependencies, not as invisible accessories.

Read analysis →
Latest analysis

Signals worth keeping.

All analysis →
AI Security

When AI Crossed the Trust Boundary

Transitive trust can defeat an apparently isolated evaluation environment.

Read analysis →
Railway · Supply Chain

Stadler Rail: When Supplier Trust Becomes the Attack Surface

Supplier identity compromise without a production outage can still matter.

Read analysis →
OT & ICS

The Restart Bottleneck Is Not the Backup. It Is the Evidence.

Production recovery needs a defensible evidence chain, not only restored systems.

Read analysis →
Automotive

An IDPS Alert Is Not an Incident Response Capability

Detection matters only when the organisation can translate it into an owned product decision.

Read analysis →
Automotive · Supply Chain

The Next Production Delay May Be Missing Cybersecurity Evidence

Supplier evidence becomes part of production resilience during a live decision.

Read analysis →
Railway

When a Security Patch Collides with the Safety Case

Security urgency and safety assurance need a governed interface before the maintenance window opens.

Read analysis →
More analysis

Ideas worth carrying beyond the feed.

Some questions deserve a durable, sourced answer even when there is no companion episode. These analyses keep the engineering argument easy to find and revisit.

OT & ICSThe Restart Bottleneck Is Not the Backup. It Is the Evidence.→RailwayWhen a Security Patch Collides with the Safety Case→OT & ICSThe Remote Access Path Nobody Questions Anymore→
The podcast

One case.
More room
to reason.

Read the evidence and technical implications, or take the same case into the podcast for a deeper discussion of trade-offs and decisions.

Browse episodes
Explore by domain

Cyber risk changes with the system.

Operational context determines consequence, evidence needs and which mitigations are actually viable.

01OT & ICSSecurity decisions where cyber controls can affect process availability, engineering access and physical recovery.02AutomotiveVehicle cybersecurity, production interfaces, supplier evidence and lifecycle decisions under ISO/SAE 21434 and UN R155.03RailwayCybersecurity at the intersection of supplier ecosystems, operational availability and safety assurance.04Product SecurityThe integrity of product artefacts, release evidence, software provenance and lifecycle decisions.05AI SecurityContainment, trust boundaries and infrastructure around increasingly capable AI evaluation workloads.06Supply ChainIdentities, technical data, contractual evidence and the trust relationships that sit outside the enterprise boundary.
Explore all sectors →
The Weekly Brief

Three real incidents. The engineering consequence. The decision that matters.

About five minutes, once a week. For OT, product security, automotive, railway and critical-infrastructure professionals who need evidence and decisions, not another alert stream.

Read Issue 01 →
About the publication

Not another cybersecurity news feed.

Use the format that fits the moment: read the sourced analysis, listen to a deeper discussion, or join the debate with practitioners on LinkedIn.

About Cybersecurity Under Pressure →