Rail is one of the most vital forms of critical infrastructure, carrying millions of passengers and goods every day. But as the industry modernises with automation, big data, and the "Internet of Trains," it is becoming an increasingly attractive target for cyber-attacks. From ransomware to impersonation and denial-of-service, rail systems face threats that could disrupt operations, compromise safety, and damage public trust.