Pressure Zone a podcast by Hack The Box
Sep 30, 2026 · 34 min · 12 segments
What happens when a cyber incident reaches into the systems that keep patients safe? In Episode 8 of the Pressure Zone podcast, Krista Arndt faces a series of decisions as a shadow vendor…
Christine BartlettHost
Krista ArndtGuestYour regional health network utilizes a centralized cloud-hosted telemetry dashboard to monitor real-time vital signs across multiple regional campuses.
Your enterprise asset management tools and attack surface dashboards report 100% visibility and clean security postures.
However, a third-party clinical vendor trying to speed up a software deployment for a regional clinic quietly spun up an unvetted shadow cloud testing gateway to sync data with a subset of wireless smart infusion pumps.
A threat actor discovers this unmapped testing API gateway and begins flooding it with mal-informed synchronization requests and credential stuffing attempts.
Instead, it backs up the telemetry processing queue, causing a baseline processing delay that forces pumps to intermittently drop their Wi-Fi RF check-ins.
Your central security dashboards show nothing because the traffic originates from a whitelisted vendor tenant using encrypted SaaS endpoints, masking the abuse as legitimate business data while nursing staff grow fatigued by phantom alerts.
Your regional health network utilizes a centralized cloud-hosted telemetry dashboard to monitor real-time vital signs across multiple regional campuses.
Your enterprise asset management tools and attack surface dashboards report 100% visibility and clean security postures.
However, a third-party clinical vendor trying to speed up a software deployment for a regional clinic quietly spun up an unvetted shadow cloud testing gateway to sync data with a subset of wireless smart infusion pumps.
A threat actor discovers this unmapped testing API gateway and begins flooding it with mal-informed synchronization requests and credential stuffing attempts.
Instead, it backs up the telemetry processing queue, causing a baseline processing delay that forces pumps to intermittently drop their Wi-Fi RF check-ins.
Your central security dashboards show nothing because the traffic originates from a whitelisted vendor tenant using encrypted SaaS endpoints, masking the abuse as legitimate business data while nursing staff grow fatigued by phantom alerts.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.
