As modern connected vehicles become increasingly integrated with cloud architectures, enterprise servers, and backend infrastructure, securing the broader automotive ecosystem requires robust penetration testing across both IT and embedded domains.
In this episode, host Zachariah (Zane) Pelletier from ETAS is joined by enterprise security expert Michael Charl for an in-depth look at Enterprise Pen Testing. Michael shares his perspective as an active penetration tester, breaking down evolving attack surfaces, emerging vulnerability trends, and how security teams can bridge the gap between enterprise IT environments and embedded vehicle systems. Together, they discuss strategies for staying ahead of new attack scenarios and why cross-discipline collaboration is essential for safeguarding next-generation automotive platforms.
Whether you are an enterprise security analyst, automotive penetration tester, or embedded security engineer, this episode highlights practical approaches to finding and fixing critical vulnerabilities before attackers exploit them.
In this episode:
00:00 - Introduction: Enterprise Pen Testing in the Automotive Ecosystem
03:30 - Expanding Attack Surfaces: Bridging Enterprise IT and Embedded Vehicle Systems
08:45 - Evolving Pen Testing Methodologies for Connected Infrastructures
14:20 - Uncovering Vulnerabilities Across Cloud and ECU Interfaces
19:50 - Cross-Discipline Collaboration: Bringing IT and Embedded Security Teams Together
25:15 - Key Takeaways: Staying Ahead of Emerging Security Trends
During the discussion Zane and Michael reference an article by Sam Curry; you can find it here.
Thanks for listening!
