What Makes a Cybersecurity Vulnerability Dangerous?
Get insights from penetration testers on risk context, AI use, and OT defense.
In this episode of Energy Talks, host Simon Rommer, OT Cybersecurity Consultant at OMICRON, is joined by Benjamin Floriani and Patrick Pongratz, founders of SecCore GmbH, an Austria-based company specializing in penetration testing, red teaming, and offensive cybersecurity. Together, they explore how security researchers and penetration testers identify cybersecurity vulnerabilities, assess their real-world impact, and develop exploits.
The discussion highlights why context is often more important than vulnerability scores when evaluating cybersecurity risks and how attack surfaces, system architecture, and business requirements influence risk assessments. Benjamin and Patrick also share insights into modern exploit development, including the growing role of AI-assisted tools in vulnerability research and offensive security.
The conversation also covers practical measures for improving cyber resilience, including network segmentation, least-privilege principles, asset inventories, and regular penetration testing to identify weaknesses before attackers do.
Get more information about OT Cybersecurity for the Power Grid.
“What we have seen, especially in the last years and also with AI assistant coding, is that developing exploits have become much easier than ever before.”
Patrick Pongratz
CEO & Co-Founder, SecCore GmbH