Hacker in the Loop (formerly Simply Offensive)

Summary

In this episode of Simply Offensive, Phillip Wylie interviews Mike Bell, CEO of Suzu Labs, discussing the intersection of cybersecurity and AI. They explore the OWASP Top 10 vulnerabilities, focusing on prompt injection attacks and their implications. Mike demonstrates real-world attack scenarios, emphasizing the importance of input sanitization and risk mitigation in AI systems. The conversation concludes with resources for learning AI security and best practices for pen testing.

Takeaways

• Accurate asset inventory is crucial for security.
• AI and cybersecurity are converging fields.
• Prompt injection can manipulate AI responses.
• Indirect prompt injection is a hidden threat.
• Training data quality affects AI performance.
• Input sanitization is essential for AI systems.
• AI can inadvertently expose sensitive information.
• Defense in depth is a best practice for AI security.
• Pen testing should go beyond happy path testing.
• Resources for learning AI security are widely available.

Chapters

00:00 Introduction to Cybersecurity and AI

03:25 The Importance of Asset Inventory in Security

04:51 Understanding OWASP Top 10 for LLMs

07:25 Exploring Prompt Injection Attacks

10:01 Demonstrating RAG and Its Vulnerabilities

12:18 Real-World Implications of AI Attacks

18:38 Mitigation Strategies for AI Security

24:34 Getting Started with AI Pen Testing

28:50 Conclusion and Resources for Further Learning

30:31 Outro

In this episode of Simply Offensive, Phillip Wylie sits down with Len Noe (HaCkEr_213) — the world’s first recognized augmented ethical hacker. From microchip implants and implantable terabyte drives to a past life in outlaw motorcycle clubs, Len’s story sits at the collision point of human and machine identity.

Connect with Len:
https://www.linkedin.com/in/len-noe/
https://i-am-machine.com/
=========================
Connect with your host, Phillip Wylie:
LinkedIn: https://linkedin.com/in/phillipwylie
YouTube: https://youtube.com/@PhillipWylie
=========================

Presented by Suzu Labs

=========================

All the ways to connect with @Suzulabs

https://suzulabs.com

https://x.com/suzulabs

https://www.linkedin.com/company/suzu-labs/

In this episode of Simply Offensive, Phillip Wylie interviews Shubham Khichi, an offensive security professional and founder of CyberAGI. We explore Shubham's journey in cybersecurity, the challenges faced by security engineers, and the innovative solutions offered by CyberAGI.

We also discuss the role of AI in penetration testing, the importance of human involvement in automation, and how professionals can future-proof their careers in an evolving landscape.

Shubham shares the need for trust in technology and the value of making cybersecurity tools accessible and effective for engineers.

Connect with Shubham:
https://www.linkedin.com/in/shubhamkhichi

=========================
Connect with your host, Phillip Wylie:
LinkedIn: https://linkedin.com/in/phillipwylie
YouTube: https://youtube.com/@PhillipWylie
=========================

Presented by Suzu Labs

=========================

All the ways to connect with @Suzulabs

https://suzulabs.com

https://x.com/suzulabs

https://www.linkedin.com/company/suzu-labs/

In this episode of Simply Offensive, Phillip Wylie interviews Daniel Lowrie, who shares his extensive background in IT and cybersecurity, particularly in penetration testing and education.

Daniel discusses his journey from IT to teaching, effective learning strategies for aspiring pen testers, the importance of hands-on experience, and engaging teaching techniques.

He emphasizes the need for personal branding in cybersecurity and offers advice for those starting their careers in this field. Tune in now to learn more!

Connect with Daniel:
https://www.linkedin.com/in/daniellowrie
https://www.youtube.com/@daniellowrie
https://academy.simplycyber.io/l/pdp/the-complete-pentest-course-pt0-003

=========================
Connect with your host, Phillip Wylie:
LinkedIn: https://linkedin.com/in/phillipwylie
YouTube: https://youtube.com/@PhillipWylie
=========================

Presented by Suzu Labs

=========================

All the ways to connect with @Suzulabs

https://suzulabs.com

https://x.com/suzulabs

https://www.linkedin.com/company/suzu-labs/

In this episode of Simply Offensive, Phillip Wylie interviews Mike Holcomb, an expert in Operational Technology (OT) and Industrial Control Systems (ICS) cybersecurity.

Mike discusses the importance of OT security, the types of attacks that have targeted critical infrastructure, and the evolving landscape of cybersecurity threats. He shares insights on the significance of safety in OT environments, the challenges of pentesting in these settings, and the tools and techniques used for effective security assessments.

We also touch on the role of AI in enhancing OT security and the resources available for those looking to enter the field.

Connect with Mike:
https://linkedin.com/in/mikeholcomb
https://mikeholcomb.com
[email protected]
https://youtube.com/@utilsec 
https://github.com/utilsec

=========================
Connect with your host, Phillip Wylie:
LinkedIn: https://linkedin.com/in/phillipwylie
YouTube: https://youtube.com/@PhillipWylie
=========================

Presented by Suzu Labs

=========================

All the ways to connect with @Suzulabs

https://suzulabs.com

https://x.com/suzulabs

https://www.linkedin.com/company/suzu-labs/

In this episode of Simply Offensive, Phillip Wylie interviews Danny Jenkins, CEO and founder of ThreatLocker.

Danny shares his unique journey from corporate IT to ethical hacking, discussing his innovative approach to penetration testing and cybersecurity. He emphasizes the importance of understanding technology and security configurations, the role of living off the land binaries in modern attacks, and how ThreatLocker implements a zero trust model to enhance security.

This episode also covers community engagement through events and the significance of hands-on learning in cybersecurity. Join us to learn more!

Connect with Danny Jenkins on LinkedIn:
https://www.linkedin.com/in/dannyjenkinscyber

=========================
Connect with your host, Phillip Wylie:
LinkedIn: https://linkedin.com/in/phillipwylie
YouTube: https://youtube.com/@PhillipWylie
=========================

Presented by Suzu Labs

=========================

All the ways to connect with @Suzulabs

https://suzulabs.com

https://x.com/suzulabs

https://www.linkedin.com/company/suzu-labs/

In this episode of Simply Offensive, Phillip Wylie is joined by Greg Hatcher and John Stigerwalt from White Knight Labs.

They discuss their backgrounds in cybersecurity, the importance of advanced penetration testing, and the unique offerings of their training courses. The conversation covers various aspects of cybersecurity, including ransomware simulations, compliance, physical pen testing, and how to become an advanced pen tester.

Greg and John share insights into their methodologies and the gaps they see in current security practices, emphasizing the need for companies to adopt more robust security measures.

Connect with Greg and John:
https://www.linkedin.com/in/gregoryhatcher2/
https://www.linkedin.com/in/john-stigerwalt-90a9b4110/
https://whiteknightlabs.com/
https://training.whiteknightlabs.com/

=========================
Connect with your host, Phillip Wylie:
LinkedIn: https://linkedin.com/in/phillipwylie
YouTube: https://youtube.com/@PhillipWylie
=========================

Presented by Suzu Labs

=========================

All the ways to connect with @Suzulabs

https://suzulabs.com

https://x.com/suzulabs

https://www.linkedin.com/company/suzu-labs/

In this episode of Simply Offensive, Phillip Wylie is joined by Jacob Krell, a cybersecurity professional with a wealth of certifications and experience.

Jacob shares his journey into the world of hacking, the importance of personal branding, and how to avoid burnout while pursuing certifications.

He discusses the significance of CVEs, the role of platforms like Hack The Box in skill development, and the integration of AI in cybersecurity. Jacob emphasizes the need for discipline and continuous learning in achieving success in the field.

Connect with Jacob:
https://www.linkedin.com/in/jacob-krell/
https://x.com/hackerfren

=========================
Connect with your host, Phillip Wylie:
LinkedIn: https://linkedin.com/in/phillipwylie
YouTube: https://youtube.com/@PhillipWylie
=========================

Presented by Suzu Labs

=========================

All the ways to connect with @Suzulabs

https://suzulabs.com

https://x.com/suzulabs

https://www.linkedin.com/company/suzu-labs/

Welcome to the Season 2 premiere of Simply Offensive.

In this episode of Simply Offensive, Phillip Wylie is joined by Corey LeBleu, a cybersecurity professional with over 20 years of experience in penetration testing.

Tune in to learn about Corey's background - and his experience being arrested while on a pentest.

Corey has expertise across multiple domains including network pentesting, social engineering, physical security assessments, and web application security. He discovered CVEs for major vendors including Apple and Citrix, and currently runs his own consulting firm, Relix Security.

Connect with Corey:
https://www.linkedin.com/in/coreylebleu/
https://www.relixsecurity.com/

=========================
Connect with your host, Phillip Wylie:
LinkedIn: https://linkedin.com/in/phillipwylie
YouTube: https://youtube.com/@PhillipWylie
=========================

Presented by Suzu Labs

=========================

All the ways to connect with @Suzulabs

https://suzulabs.com

https://x.com/suzulabs

https://www.linkedin.com/company/suzu-labs/

In this episode of Simply Offensive, Phillip Wylie is joined by Tyler Ramsbey, a penetration tester and content creator.

Learn about Tyler's unique journey into cybersecurity, the importance of soft skills, and the value of teaching and content creation.

Tyler shares insights on maintaining mental health, balancing family life, and his upcoming venture into entrepreneurship with a focus on quality pen testing services.

The conversation emphasizes the significance of personal branding, effective communication, and the need for emotional intelligence in the tech industry.

You do not want to miss this Season 1 finale episode!

Connect with Tyler:
https://www.linkedin.com/in/tyler-ramsbey-86221643
https://hacksmarter.org/
YouTube: ⁨@TylerRamsbey⁩

=========================

Connect with your host, Phillip Wylie:

LinkedIn: https://linkedin.com/in/phillipwylie

YouTube: https://youtube.com/@PhillipWylie

=========================

Presented by Suzu Labs

=========================

All the ways to connect with @Suzulabs

https://suzulabs.com

https://x.com/suzulabs

https://www.linkedin.com/company/suzu-labs/

=========================
Sponsored by @ThreatLocker
Allow what you need, block everything else... Including ransomware. Zero trust Endpoint Protection Platform at https://threatlocker.com/simplyoffensive