Phillip Wylie Show

By Phillip WylieTechnology

Phillip Wylie Show episodes

August 07, 2023Product Marketing in the Cybersecurity Industry: A Conversation with Liron Mendel
About The Guest:
Liron Mendel is a product marketing professional with a background in sales and marketing. She has worked in various tech companies, including CYE and Allot, and specializes in bridging the gap between product and marketing.
Summary:
Liron Mendel, a product marketing professional, joins the podcast to discuss the role of product marketing in the cybersecurity industry. She explains that product marketing serves as a bridge between the product and marketing teams, ensuring that the product's messaging accurately defines its value proposition. Liron emphasizes the importance of understanding customers and the market in order to effectively market a product. She also highlights the role of research in product marketing, including competitive analysis. Liron discusses how CYE's platform, Hyver, helps cybersecurity professionals quantify cyber risk and communicate it to the board in a way that resonates with business leaders. She advises aspiring product marketers to start in marketing roles and develop a passion for a specific product or industry. Liron concludes by encouraging listeners to believe in their ability to achieve their career goals.
Key Takeaways:
Product marketing is the bridge between the product and marketing teams, ensuring accurate messaging.

Understanding customers and the market is crucial for effective product marketing.

Research, including competitive analysis, is an important aspect of product marketing.

CYE's platform, Hyver, helps quantify cyber risk and communicate it to the board in a business-focused manner.

Aspiring product marketers should start in marketing roles and develop a passion for a specific product or industry.

Quotes:
"Product marketing is the bridge between product and marketing." - Liron Mendel

"You have to be really eager to learn and understand your customer base." - Liron Mendel

"CYE's platform, Hyver, simplifies cyber risk quantification for the board." - Liron Mendel

"If you're passionate and willing to work at it, anything is possible." - Liron Mendel

https://www.linkedin.com/in/leeron-walter-mendel-%F0%9F%92%A1-96113648/
https://www.linkedin.com/company/cyesec/mycompany/
27 min
August 03, 2023 The Evolution of Active Directory Security: A Conversation with James Potter
About The Guest:
James Potter is the CEO and founder of DSE, a professional services firm specializing in Active Directory security. With over 25 years of experience in Active Directory work, James has a deep understanding of the challenges and vulnerabilities associated with this core piece of software. He is passionate about helping organizations secure their boundaries through Active Directory security.
Summary:
James Potter, CEO and founder of DSE, joins The Phillip Wylie Show to discuss the importance of Active Directory security and the evolving landscape of directory services. James shares his background in Active Directory work and explains how DSE helps organizations secure their Active Directory environments. He highlights the impact of the pandemic on remote work and the challenges faced by companies transitioning to a hybrid or cloud-based environment. James also offers advice for individuals looking to start a career in Active Directory security.
Key Takeaways:
1. The pandemic has accelerated the adoption of remote work and highlighted the importance of nimble and flexible organizations.
2. Moving to the cloud can offer cost savings and scalability, but it requires skilled resources to ensure proper management and security.
3. Legacy accounts and configurations in Active Directory can pose significant security vulnerabilities and should be regularly audited and cleaned up.
4. Cloud environments provide resiliency and global availability, but cost considerations are driving organizations to reevaluate their cloud strategies.
5. Starting a career in Active Directory security requires a baseline understanding of networking and certifications such as Network+ and Security+ can provide a solid foundation.
Quotes:
- "The pandemic allowed us to blossom because we're very nimble. We don't have a lot of overhead office buildings." - James Potter
- "Moving to the cloud doesn't automatically fix Active Directory issues. You still need skilled resources to manage and secure it." - James Potter
- "Legacy accounts and configurations in Active Directory are low-hanging fruit for threat actors." - James Potter
- "The cloud offers maneuverability and speed for startups, but it's important to evaluate cost and long-term scalability." - James Potter
- "Imposter syndrome is huge. Don't give up. If you're motivated and pushing yourself, you deserve to be there." - James Potter

Socials and resources:
https://www.linkedin.com/in/jamesthesecurityguy/
https://www.linkedin.com/company/directoryservicesexpedited/
https://twitter.com/DSEteam
https://www.dse.team/
28 min
August 01, 2023Introducing Amass v4.0 and the OAM: A Conversation with Jeff Foley
About The Guest
Jeff Foley is a security researcher and the Vice President of Research for ZeroFOX. He is also the project leader for OWASP Amass, a project focused on external cybersecurity. Jeff has a strong background in computer science and has been involved in the information security industry for many years.
Summary
In this episode, Jeff Foley discusses the evolution of OWASP Amass, a project he leads that focuses on external cybersecurity. He explains how he got started in information security and coding, and how his passion for automation led him to create Amass. Jeff also introduces the Open Asset Model (OAM), a new data model that allows users to represent and analyze the data collected by Amass. He highlights the importance of having visibility on one's attack surface and the need for a unified format to communicate about exposed assets on the internet. Jeff shares his plans for the future of Amass, including expanding the taxonomy and collection capabilities, and involving the community in the development process.

Key Takeaway
OWASP Amass is a project focused on external cybersecurity and provides visibility on exposed assets on the internet.

The Open Asset Model (OAM) is a new data model introduced in Amass version 4.0, which allows users to represent and analyze the collected data in a unified format.

The OAM aims to create a standard and unified way of communicating about attack surfaces and to make it easier for users to understand and analyze the data.

Amass is evolving to include more asset types and relationships, and the team is developing a collection engine to keep up with the expanding taxonomy.

The project welcomes contributions from the community and encourages users to get involved and provide feedback.

Quotes
"You can't be protecting things if you don't know they're there." - Jeff Foley

"The Open Asset Model is about creating a standard and unified way of communicating about exposed assets on the internet." - Jeff Foley

Socials and resources
- Twitter: @jeff_foley
- Amass Twitter: @owaspamass
- GitHub: https://github.com/caffix
- Amass GitHub: https://github.com/owasp-amass
- Mastodon: @[email protected]
- Amass Mastodon: @[email protected]
- LinkedIn: https://www.linkedin.com/in/caffix/
- OWASP Amass: https://owasp.org/www-project-amass/
- Amass Discord: https://discord.gg/HNePVyX3cp
51 min
July 27, 2023 Cloud-Centric Permission Management: A Conversation with Ron Nissim
About The Guest:
Ron Nissim is the CEO of Entitle, a company that focuses on permission management and access control. He has a background in cybersecurity and intelligence, having served in the Israel Defense Forces in a cybersecurity role. Ron and his co-founder, Avi, started Entitle to address the need for better permission management in cloud environments.

Summary:
Ron Nissim, CEO of Entitle, joins Phillip Wylie on The Phillip Wylie Show to discuss the importance of permission management and access control in cybersecurity. Ron shares his background in cybersecurity and intelligence and how he and his co-founder started Entitle to address the gaps in permission management in cloud environments. They discuss the challenges of manual permission management, the need for automation, and the evolving landscape of authentication and access control. Ron also emphasizes the importance of networking and collaboration in the industry.

Key Takeaways:
1. Permission management is a critical aspect of cybersecurity, and the challenges in this area are vast and complex.
2. The traditional approach to permission management is often manual and time-consuming, leading to delays and inefficiencies.
3. Cloud-centric solutions like Entitle offer quick implementation and value, making permission management more accessible and cost-effective.
4. The industry is experiencing a shift in the access management landscape, with a focus on automation and simplification.
5. Collaboration and networking with industry leaders are essential for learning and staying on the cutting edge of permission management.

Quotes:
- "Everyone was starting companies around all this next-gen AI stuff, and the most basic stuff of an admin having too much access is still uncovered." - Ron Nissim
- "The more people have access to more resources, the bigger the risk." - Ron Nissim
- "The tolerance for manual work has gone down significantly. People are always looking to automate themselves out of the manual work." - Ron Nissim
- "The thirst or hunger for companies to be more efficient, especially in these days, to be more efficient, to utilize their manpower in the right way, puts their chips on the right areas, again, just emphasizes the importance of automation." - Ron Nissim
- "The fact that I still have to remember passwords is so 1997." - Ron Nissim

Ron and Entitle resources:
https://www.linkedin.com/in/ron-nissim/
https://www.linkedin.com/company/entitle/
https://twitter.com/EntitleIO

29 min
July 25, 2023A Conversation with Chloé Messdaghi
About The Guest:
Chloé Messdaghi is a prominent figure in the cybersecurity industry, known for her work in promoting inclusiveness and diversity. She has been a speaker at various conferences and is the host of the podcast "The Change Making Podcast" and "Secure Your Strategy." Chloé is passionate about raising awareness about hacker rights and supporting security researchers and bug bounty hunters.
Summary:
Chloé Messdaghi joins Phillip Wylie in this episode to discuss the importance of inclusiveness and diversity in the cybersecurity industry. Chloé shares her experiences as a woman in the industry and how it initially made her want to leave, but also motivated her to stay and make a difference. They discuss the need for leaders in the industry to be more inclusive and the impact of gender bias in language. Chloé also talks about the importance of addressing burnout and mental health in the industry, especially in the context of the pandemic. She shares tips for avoiding burnout and emphasizes the need for self-care and seeking therapy when needed. The conversation also touches on the topic of climate change and its potential impact on the cybersecurity industry.
Key Takeaways:
Inclusiveness and diversity are crucial for the cybersecurity industry to thrive and make a positive impact.

Gender bias in language can perpetuate stereotypes and exclude certain groups from leadership roles.

Burnout and mental health issues are prevalent in the industry, and it is important to seek therapy and practice self-care.

The cybersecurity industry needs to address the impact of climate change and prepare for potential security threats arising from it.

Quotes:
"If you really want change to occur in an industry, you have to get the people at the top to get on board." - Chloé Messdaghi

"Seeing a therapist is not taboo. It is trendy. So go see a therapist." - Chloé Messdaghi

Chloé's socials and resources:
https://twitter.com/ChloeMessdaghi
https://www.linkedin.com/in/chloemessdaghi/
https://www.securebychloe.com/
https://www.youtube.com/@ChloeMessdaghi
27 min
July 20, 2023The Evolution of Pen Testing: A Conversation with Tim Medin
About The Guest:
Tim Medin is the CEO and founder of Red Siege, a pen testing firm that specializes in offensive security. With over 15 years of experience in the field, Tim is also a lead author of the enterprise penetration testing course for the SANS Institute. He is known for his expertise in kerberoasting and has a background in electrical engineering.
Summary:
Tim Medin, CEO and founder of Red Siege, joins the podcast to discuss his background in pen testing and the evolution of the industry. He shares his experience with the Dallas Hackers Association and talks about his infamous talk on IoT hacking using a Bluetooth-enabled doll. Tim emphasizes the importance of pursuing what interests you in the field of cybersecurity and offers advice for aspiring offensive security professionals. He also addresses the question of whether AI will replace pen testers and highlights the value of manual testing in identifying complex security issues. The episode concludes with a discussion on Red Siege's recent acquisition of 40 North and the expansion of their services and training offerings.
Key Takeaways:
Tim Medin emphasizes the importance of pursuing what interests you in the field of cybersecurity.

Offensive security professionals should focus on specific areas of interest and seek out resources and communities to learn and grow.

AI is not yet capable of replacing pen testers, as manual testing is still necessary to identify complex security issues.

Red Siege's acquisition of 40 North expands their services and training offerings, providing additional expertise and resources to their clients.

Quotes:
"Pick the thing that's interesting to you. Pick the technology that you've got some experience with at work, with test systems, whatever it might be, and dig into that." - Tim Medin

"The more specific the question, the better answer you're going to get and the more likely you are to get an answer." - Tim Medin

"AI is great at processing large quantities of data, and if you can get that across many different organizations, we can really start to build some of these better profiles." - Tim Medin

Tim and Red Siege social media and website:
https://www.linkedin.com/in/timmedin/
https://twitter.com/TimMedin
https://redsiege.com/
https://www.linkedin.com/company/redsiege/
https://twitter.com/RedSiege
31 min
July 18, 2023The Future of Cybersecurity: A Conversation with Julien Richard
About The Guest:
Julien Richard is a cybersecurity professional with a background in system administration and network administration. He is the founder of a cybersecurity collective and has extensive experience in penetration testing. Julien is passionate about sharing his knowledge and helping others succeed in the industry.
Summary:
Julien Richard joins Phillip Wylie on the podcast to discuss their journeys into the cybersecurity industry. They emphasize the importance of diversity in the field and the value of sharing different paths to success. They also discuss the role of certifications and the need for continuous learning in the ever-evolving cybersecurity landscape. Julien shares his thoughts on the future of offensive security and the potential impact of AI tools like ChatGPT.
Key Takeaways:
Diversity of stories and paths to success is important in the cybersecurity industry.

Continuous learning and curiosity are essential for success in offensive security.

AI tools like ChatGPT can be valuable for writing and research, but caution is needed to ensure accurate data sources.

Understanding the fundamentals of networking, systems, and Linux is crucial for offensive security professionals.

Quotes:
"Everybody has a different way of getting into the industry." - Julien Richard

"Don't just run something without understanding what's going on." - Julien Richard

"The more you're exposed to it, the better you'll become." - Julien Richard

"Continuous learning and curiosity are the most important qualities in this field." - Julien Richard

Julien's social media:
https://www.linkedin.com/in/julien-richard
https://bsky.app/profile/julien.bcksec.com
41 min
July 17, 2023Discovering the Power of Mindfulness and Self-Awareness with Shawn Alexander
About The Guest:
Shawn Alexander is a personal trainer and meditation practitioner with over 20 years of experience. He has a background in competitive bodybuilding and powerlifting and has studied meditation and mindfulness extensively.

Summary:
Shawn Alexander shares his personal journey of self-discovery and mindfulness through meditation. He discusses how his upbringing and experiences led him to seek validation through physical accomplishments, such as bodybuilding. However, he eventually faced the consequences of his extreme training and steroid use, which led to a life-threatening illness. This experience sparked his curiosity about the nature of consciousness and the mind. Shawn explains that there is a deeper awareness underneath our thoughts and emotions, which he refers to as pure awareness or consciousness. He emphasizes the importance of quieting the mind through meditation to tap into this awareness and experience inner peace and clarity. Shawn also discusses the interconnectedness of all beings and the power of manifestation through consciousness.
Key Takeaways:
Our thoughts and emotions are not who we truly are. There is a deeper awareness or consciousness underneath them.

Meditation and mindfulness can help quiet the mind and connect with the stillness and peace within.

We are all connected through a collective consciousness, and our thoughts and intentions can manifest our reality.

Quotes:
"There has to be something listening to the little voice in our heads. There has to be something that's aware of our emotions, aware of our thoughts, aware of all that." - Shawn Alexander

"In order for everything to exist, there has to be something aware of it. We are all connected through consciousness." - Shawn Alexander

"Be still and know that I am God. Be still doesn't mean sit still, even though that helps. It means quiet your mind. Be silent inside." - Shawn Alexander
1 hr
July 13, 2023How I Rob Banks: A Journey into the World of Ethical Hacking with Freakyclown
About The Guest:
FC Barker aka Freakyclown is an ethical hacker and professional cyber criminalist with over three decades of experience.

He is the co-founder of Sygenta, a company that specializes in ethical hacking and penetration testing.

Freakyclown has a background in offensive cyber research and has worked for major defense firms.

Summary:
Freakyclown shares his experience as an ethical hacker and professional cyber criminalist. He discusses the type of pen testing he does, which goes beyond the typical cookie-cutter approach. He emphasizes the importance of manual work and understanding the foundations of hacking. Freakyclown also talks about the evolution of hacking over the years and the changes he has witnessed. He provides advice for those interested in getting into offensive security, including participating in CTFs and bug bounty programs. Freakyclown also talks about his new book, "How I Rob Banks," which shares anecdotes and tips from his career in physical pen testing.
Key Takeaways:
Ethical hacking goes beyond automated tools and requires manual work and understanding of the foundations.

The barrier to entry in offensive security has lowered, but the threat landscape has expanded.

Participating in CTFs and bug bounty programs is a great way to gain skills and experience in offensive security.

Freakyclown's book, "How I Rob Banks," provides entertaining anecdotes and tips from his career in physical pen testing.

Freakyclown resources:
https://twitter.com/_Freakyclown_
https://www.linkedin.com/in/freakyclown/
https://www.cygenta.co.uk/
How I Rob Banks book:
https://www.wiley.com/en-us/How+I+Rob+Banks%3A+And+Other+Such+Places-p-9781119911517
38 min
July 11, 2023The Evolution of Identity and Access Management with Adam Migus
About The Guest:
Adam Mingus is an expert in identity and access management (IAM) and privileged access management (PAM). With a background in network security and defense contracting, Adam has extensive experience in the field and has witnessed the evolution of IAM and PAM over the years. He is passionate about helping organizations strengthen their security posture and navigate the challenges of identity management in the modern digital landscape.
Summary:
Adam Migus, an expert in identity and access management (IAM) and privileged access management (PAM), joins Phillip Wylie on the show to discuss the evolving landscape of cybersecurity. Adam shares his journey in the industry, from working in defense contracting to focusing on IAM and PAM in the private sector. He emphasizes the importance of identity in security and highlights the growing need for strong access controls and authentication methods. Adam also touches on the challenges of securing operational technology (OT) and industrial control systems (ICS) and the increasing role of cyber insurance in driving cybersecurity improvements. He concludes by discussing the future of passwordless authentication and the potential impact of AI and quantum computing on cybersecurity.
Key Takeaways:
IAM and PAM are crucial components of a strong security posture, with identity being at the forefront of cybersecurity challenges.

The convergence of physical and virtual security is driving the need for robust access controls and authentication methods.

The rise of cyber insurance is motivating organizations to invest in stronger cybersecurity measures.

OT and ICS environments present unique challenges for security professionals, but the importance of securing these systems is gaining recognition.

Passwordless authentication is gaining traction, especially in consumer applications, but passwords will likely remain prevalent in enterprise environments.

The use of biometrics and hardware tokens, such as Ubikeys, can enhance security and protect against credential theft.

The increasing use of AI and quantum computing poses new challenges for cybersecurity, requiring ongoing innovation and adaptation.

Adam and Migus resources:
https://www.linkedin.com/in/amigus/
https://twitter.com/amigus
https://www.linkedin.com/company/the-migus-group/
https://twitter.com/migusgroup
https://www.facebook.com/migusgroup/
https://migusgroup.com/
32 min

About Phillip Wylie Show

From the publisher's feed

The Phillip Wylie Show is a premier cybersecurity podcast and media source for offensive security professionals. Hosted by Phillip Wylie, globally recognized ethical hacking expert, keynote speaker,…