Phillip Wylie Show

About The Guest:
Cheryl Biswas is a cybersecurity professional with a background in political science. She currently works in cyber threat intelligence, protecting a big bank against cybercrime and state-sponsored adversaries. Cheryl is passionate about the intersection of politics, economics, and technology in the cybersecurity field.

Summary:
Cheryl Biswas, a cybersecurity professional with a background in political science, shares her journey into the field of cyber threat intelligence. She discusses the importance of curiosity, analysis, and pattern recognition in this field. Cheryl also highlights the need for historical context and an understanding of politics and economics to effectively analyze cyber threats. She emphasizes the value of networking and volunteering at conferences to build connections and gain opportunities in the industry. Cheryl also encourages individuals to take care of their mental health and to have confidence in their abilities.

Key Takeaways:

Quotes:

Socials and Resources
https://www.linkedin.com/in/cherylbiswas/
https://twitter.com/3ncr1pt3d

About The Guest:
Chris Marks is a cybersecurity professional with a background in engineering and architecture. He has worked in various roles in the cybersecurity field, including system engineer, senior analyst, and security manager. Chris is passionate about helping others enter the cybersecurity industry and is involved in mentoring and advising students at community colleges and universities.

Summary:
Chris Marks shares his journey into the cybersecurity field, starting from his interest in hacking and his involvement in the Tiger Trap Group. He discusses his experience applying for jobs and the challenges he faced before finally landing a position in Dallas. Chris emphasizes the importance of passion in cybersecurity and advises aspiring professionals to focus on their interests rather than just the potential for financial gain. He also highlights the significance of certifications and degrees in opening doors and advancing in the field. Chris concludes by discussing his current role in security management and his desire to help others succeed in cybersecurity.

Key Takeaways:

Quotes:

Socials and Resources:

https://twitter.com/DaBootWolverine

https://www.linkedin.com/in/christopher-marks-7357441b/

About The Guest:

Shourya Pratap Singh is a Principal Engineer at SquareX. He is responsible for building SquareX’s secure and privacy-focused extension, and works on researching methods to counteract web security risks.
He has conducted a workshop in Texas Cyber Summit, and his work is being presented at Blackhat Arsenal EU. Before joining SquareX, he worked with FinBox (an Indian fintech) where he led a team of brilliant developers and was responsible for building, and scaling multiple product lines. He has a bachelor’s degree from IIIT Bhubaneswar and holds a patent to his name. His area of interest includes browser extensions and web application security.

Summary:

Shourya Pratap Singh discusses the importance of safely using URLs and introduces Squarex, a product that provides URL protection. He explains that malicious URLs are a significant problem for IT teams worldwide and that it can be challenging to determine if a URL is malicious or not. SquareX offers a solution with its disposable browser feature, which allows users to open suspicious websites or links in a cloud browser. This feature provides a deterministic view of the website's safety and allows users to access it from different geographical locations. Shourya demonstrates how to use Squarex through the browser extension and the web app, highlighting the convenience and privacy it offers. He also mentions that Squarex includes an ad blocker and protects against browser fingerprinting. Overall, SquareX simplifies online safety and protects users from malicious URLs.

Key Takeaways:

Quotes:

Socials and Resources:
Get your free Chrome plugin: ⁠http://sqrx.io/pw_x⁠
⁠https://www.linkedin.com/company/getsquarex/⁠
⁠https://twitter.com/getsquarex⁠
⁠https://www.instagram.com/getsquarex/

About The Guest:
Dakshitaa Babu is a Software Engineer at SquareX, where she is engaged in data engineering and analytics.

She is also the pen behind the engineering blogs written on SquareX's infrastructure and security research. After completing her Bachelor's degree at the National University of Singapore, Dakshitaa joined SquareX, marking her foray into the cybersecurity industry. While new to the field, her enthusiasm for discovering and understanding new concepts has quickly established her as a committed contributor to the evolving sector. Her interests are in Browser Security and consumer education.

Summary:
Dakshitaa Babu discusses the importance of disposable emails in the cybersecurity space. She highlights that emails are a primary mode of communication and are therefore at great risk of threats. More than a quarter of all threats that occur on a daily basis happen through email. Dakshitaa explains that the growing importance of disposable emails is due to the fact that email is the gateway into our personal and professional lives. We often have to use our email addresses to sign up for services or receive important information. However, more than 50% of the emails we receive are spam, which can be a waste of time and affect productivity. Dakshitaa also mentions that legitimate sources sometimes sell our email addresses to spammers. She shares a fun tip of adding a suffix to our email addresses to track who may have leaked our email address. Dakshitaa emphasizes the increasing threat of phishing emails, which are becoming more targeted and difficult to detect. She mentions that phishing emails often contain malicious files or links, and even unsubscribe links within emails can be malicious. Dakshitaa explains that Squarex promotes safe email practices by providing an enhanced privacy mode and opening links and files in a disposable environment. She also mentions that Squarex is working on integrating with social media accounts to make clicking on links safer. Dakshitaa concludes by highlighting the importance of using disposable emails to reduce exposure to threats and maintain privacy online.

Key Takeaways:

Quotes:

Socials and Resources:
Get your free Chrome plugin: ⁠⁠http://sqrx.io/pw_x⁠⁠
⁠⁠https://www.linkedin.com/company/getsquarex/⁠⁠
⁠⁠https://twitter.com/getsquarex⁠⁠
⁠⁠https://www.instagram.com/getsquarex/

Summary:
In this episode of the Phillip Wylie Show, Phillip interviews Justin "Hutch" Hutchens, an offensive security professional and author of "The Language of Deception: Weaponizing Next Generation AI." They discuss the emerging risks and opportunities of artificial intelligence (AI) in the cybersecurity space. Justin shares his experiences with using AI to automate social engineering attacks and highlights the potential dangers of AI-powered conversational agents and technical agents. He also explores the defensive applications of AI, such as using language models for threat intelligence and incident response. The conversation concludes with a discussion on how individuals can leverage AI resources to improve their skills and stay ahead of the curve.

Key Takeaways:

Quotes:

Socials and Resources:

https://www.linkedin.com/in/justinhutchens/

https://twitter.com/sociosploit

https://www.wiley.com/en-cn/The+Language+of+Deception%3A+Weaponizing+Next+Generation+AI-p-9781394222544

About The Guest:

Summary:
In this episode, Shourya Pratap Singh from Squarex discusses how to deal with files securely online. He highlights the dangers of malicious files and the importance of protecting ourselves, especially during the holiday season when cyberattacks are more prevalent. Shourya demonstrates how traditional antivirus software and endpoint security systems work in a probabilistic way, making it difficult to determine if a file is truly safe. He then introduces SquareX's disposable file viewer, which allows users to open files in a cloud-based sandbox, eliminating the risk of executing malicious code on their own machines. Shourya also explains how the disposable file viewer integrates with other SquareX features, such as the privacy mode and download interceptor, to enhance security measures. He concludes by introducing SquareX's progressive web app, which enables users to open local files securely and conveniently.

Key Takeaways:

Quotes:

Socials and Resources:

About The Guest:
Andy Robbins is the Principal Product Architect at SpecterOps and one of the original 13 founding members of the company. He has a background in pen testing and red teaming and is the co-creator of Bloodhound, a popular open-source tool for attack path mapping in Active Directory environments.

Summary:
Andy Robbins, the Principal Product Architect at SpecterOps, joins host Phillip Wylie to discuss the evolution of Bloodhound, a tool for attack path mapping in Active Directory environments. Andy shares the origin story of Bloodhound and how it was developed to solve the problem of finding attack paths in complex environments. He explains the graph theory behind Bloodhound and how it visualizes data to help practitioners and defenders understand and mitigate security risks. Andy also discusses the recent release of Bloodhound Community Edition (CE) and the improvements it brings, including faster data ingest, query times, and a friendlier user experience. He highlights the focus on practical attack primitives and abuse primitives in Bloodhound and the goal of making attack paths a non-issue for organizations. Andy concludes by sharing valuable advice for those looking to advance in the industry, emphasizing the importance of understanding and solving real problems and being loyal to people rather than companies.

Key Takeaways:

Quotes:

Socials and Resources:

https://twitter.com/_wald0

https://twitter.com/SpecterOps

https://specterops.io/

https://bloodhoundenterprise.io/

https://github.com/SpecterOps/BloodHound

About The Guest:

Summary:

Key Takeaways:

Quotes:

Socials and Resources:

https://twitter.com/hackandbackpack

About The Guest:
Jesse Bolton is the founder of Bolt Resources, a cyber staffing and recruiting firm that focuses on workforce development and coaching. She is also involved in the North Texas ISSA and is passionate about advocating for the cybersecurity workforce.

Summary:
Jesse Bolton, founder of Bolt Resources, joins Phillip Wylie on the Phillip Wylie Show to discuss the importance of building a personal brand and networking in the cybersecurity industry. Jesse emphasizes the need for recruiters to go beyond simply matching candidates with job descriptions and instead focus on understanding the individual and their career goals. She also highlights the prevalence of ghost job postings and the importance of transparency in the hiring process. Jesse shares tips for avoiding burnout and retaining employees, including building authentic relationships and providing opportunities for growth.

Key Takeaways:

Quotes:

Socials and Resources:

https://www.linkedin.com/in/cybertalentadvisor/

https://boltresources.net/

https://www.youtube.com/@CyberCareersCoffee

About The Guest:
Jeswin Mathai is the Chief Architect at SquareX. He leads the team responsible for designing and implementing the Infrastructure. Prior to joining SquareX, He was working as the chief architect at INE. He has published his work at DEFCON China, RootCon, Blackhat Arsenal, and Demo Labs (DEFCON). He has also been a co-trainer in-classroom training conducted at Black Hat Asia, HITB, RootCon, and OWASP NZ Day. He has a Bachelor's degree from IIIT Bhubaneswar. He was the team lead at InfoSec Society IIIT Bhubaneswar in association with CDAC and ISEA, which performed security auditing of government portals and conducted awareness workshops for government institutions. His area of interest includes Cloud Security, Container Security, and Web Application Security.

Summary:
Jeswin Mathai joins Phillip Wylie in this episode of the "Stay Fearless Online" series to discuss email safety and how SquareX can protect users from being tracked or hacked. They highlight the challenges individuals face in staying safe online, especially those who are not tech-savvy. Jeswin explains that SquareX's browser extension is designed to provide a better way to protect users by sitting on the browser and ensuring secure browsing. They demonstrate how email tracking works and how SquareX's Enhanced Privacy Mode can prevent tracking by blocking third-party images. The extension also offers a secure disposable file viewing environment for opening attachments safely. Jeswin emphasizes the importance of email security as an entry point for attackers and how SquareX aims to provide a user-friendly solution.

Key Takeaways:

Quotes:

Socials and Resources:

Get your free Chrome plugin: http://sqrx.io/pw_x

https://www.linkedin.com/company/getsquarex/

https://twitter.com/getsquarex

https://www.instagram.com/getsquarex/