Oct 20, 2026 · 3 min · 7 segments
Attackers are turning trusted channels into attack paths: a genuine, signed Siemens Software Center delivers a RAT, and ConnectWise suspends Cloud Backup after a supply chain attack. Plus new ATT&CK…
Not a fake installer, not a lookalike.
The real signed tool.
That matters because allowlisting and signature-based trust, the controls many industrial shops lean on, will wave it right through.
The lure is the familiar one.
A victim is talked into pasting and running a command themselves, and the trusted software does the rest.
The natural target is the engineering workstation, the machine with deep reach into industrial environments.
So restrict who can run that tool and make sure your engineers know what a paste-and-run lure looks like.
If a webpage or prompt ever asks someone to copy a command into a terminal, that is the moment to stop.
Not a fake installer, not a lookalike.
The real signed tool.
That matters because allowlisting and signature-based trust, the controls many industrial shops lean on, will wave it right through.
The lure is the familiar one.
A victim is talked into pasting and running a command themselves, and the trusted software does the rest.
The natural target is the engineering workstation, the machine with deep reach into industrial environments.
So restrict who can run that tool and make sure your engineers know what a paste-and-run lure looks like.
If a webpage or prompt ever asks someone to copy a command into a terminal, that is the moment to stop.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.
