Phillip Wylie Show

By Phillip WylieTechnology

Phillip Wylie Show episodes

July 07, 2023 Ankita Dhakar: Revolutionizing Bug Bounty Platforms with AI Integration
About The Guest:
Ankita Dhakar is the founder and CEO of Capture the Bug, Australia and New Zealand's first Vulnerability Intelligence Platform. She started her own cybersecurity consultancy firm specializing in penetration testing in late 2019. Ankita has worked with clients in New Zealand, Australia, Europe, and India. She is passionate about educating businesses and individuals about cybersecurity and fostering collaboration between ethical hackers and organizations.
Summary:
Ankita Dhakar, founder and CEO of Capture the Bug, joins Phillip Wylie on The Phillip Wylie Show to discuss her bug bounty platform and the importance of collaboration in cybersecurity. Ankita shares her background in cybersecurity and how she started her own company. She emphasizes the need for businesses to move beyond compliance and traditional security testing methods and highlights the benefits of bug bounty programs. Ankita also discusses the challenges of finding skilled cybersecurity professionals and offers advice for hiring and educating them. She concludes by inviting ethical hackers to join Capture the Bug and contribute to the growing community.
Key Takeaways:
Collaboration is key in protecting assets and businesses should seek to collaborate with ethical hackers.
Compliance does not guarantee real security, and businesses should go beyond traditional security testing methods.
Hiring skilled cybersecurity professionals requires a balanced approach, considering both technical expertise and the ability to communicate effectively.
Bug bounty programs provide an opportunity for ethical hackers to contribute to cybersecurity and be rewarded for their findings.
Capture the Bug aims to grow the female ethical hackers community and welcomes anyone interested in cybersecurity to reach out.

Ankita and Capture The Bug links:
https://www.linkedin.com/in/ankitadhakar/
https://twitter.com/expankita
https://twitter.com/capturethebugs
https://www.linkedin.com/company/capture-the-bug/
https://capturethebug.xyz/
24 min
July 06, 2023 Danny "Rand0h" Akacki discusses his love for streaming and community
About The Guest:
Danny "Rand0h" Akacki is a cybersecurity professional with over 11 years of experience in the industry. He has worked at companies like Mandiant, GE, and Bank of America, focusing mainly on threat hunting. He is currently a Customer Success Manager at Trimark Security and also heads up their marketing and project management efforts. Danny is also a goon at Defcon and is passionate about streaming and content creation.
Summary:
Danny "Rand0h" Akacki joins Phillip Wylie on the podcast to discuss his background in cybersecurity, his love for streaming and content creation, and his experiences as a goon at Defcon. They also talk about the importance of community and giving back, as well as Danny's journey towards fitness and health during the pandemic.
Key Takeaways:
Streaming and content creation can be a great way to share knowledge and connect with others in the cybersecurity community.
Defcon is a unique and special event that brings together people from all over the world who share a passion for hacking and cybersecurity.
Failing is a natural part of the learning process, and it's important to embrace failure and learn from it.
Building healthy habits and routines is key to maintaining fitness and overall well-being.
It's important to be gentle with yourself and not be too hard on yourself when working towards personal goals.
Danny's social media and website:
https://www.linkedin.com/in/dakacki/
https://twitter.com/dakacki
https://www.randoh.net/

50 min
July 05, 2023 Phillip Wylie Show Trailer
This trailer for the Phillip Wylie Show shares the topics discussed in episodes of the podcast.
2 min
July 04, 2023 The Art of Red Teaming with Shani Peled
About The Guest:
Shani is a young and talented offensive security professional who has made a name for herself in the industry. With a background in computer science and physics, she started her cybersecurity journey in the Israeli intelligence course during her military service. After gaining valuable experience in the army, she joined CYE, where she currently works as a Red Teamer. Shani is passionate about helping organizations improve their security posture and enjoys the challenge of finding unique entry points and assessing real risks.
Summary:
In this episode, Phillip Wylie interviews Shani, a talented Red Teamer at CYE. Shani shares her journey into the cybersecurity world, starting with her military service in the Israeli intelligence course. She highlights the importance of hands-on training and the unique skills required to be successful in the Red Team industry. Shani also discusses the challenges faced by organizations in prioritizing vulnerabilities and assessing real risks. She emphasizes the need for Red Teamers to think like real attackers and understand the crown jewels of the organizations they are testing. Shani also dives into the world of cloud security and the common vulnerabilities she encounters during cloud assessments. She stresses the importance of proper cloud migration and the responsibility organizations have in securing their cloud environments. Throughout the conversation, Shani provides valuable insights and advice for aspiring Red Teamers, emphasizing the need for passion, creativity, and a deep understanding of the IT world.
Key Takeaways:
Prioritizing vulnerabilities and assessing real risks is a major challenge for organizations.
Red Teamers should think like real attackers and understand the crown jewels of the organizations they are testing.
Misconfigurations in storing technical secrets and exposed resources are common vulnerabilities in cloud environments.
Proper cloud migration is crucial, and organizations have a responsibility to understand their cloud environment and secure it.
Red Teamers should focus on reconnaissance and understand the techniques behind tools to be effective in their assessments.
Shani's LinkedIn:
https://www.linkedin.com/in/shani-peled-28b3211a3/
CYE LinkedIn and website:
https://www.linkedin.com/company/cyesec/
https://cyesec.com/
28 min
June 30, 2023 The Power of Bug Bounty Automation with Nenad Zaric
About The Guest(s):
Nenad Zarick is a cybersecurity expert and the founder of Trickest, a platform that automates offensive security workflows. With over 15 years of experience in the field, Nenad has a deep understanding of bug bounty programs and the importance of automation in cybersecurity.
Summary:
In this episode, Phillip interviews Nenad Zaric, the founder of Trickest, a platform that automates offensive security workflows. Nenad shares his background in cybersecurity and how he got started in bug bounty programs. He emphasizes the importance of automation in bug bounty and explains how Trickest can help bug hunters optimize their efforts. Nenad gives a live demo of the platform, showcasing its features and capabilities. He also discusses the scalability of the platform and the benefits of automation in the future of cybersecurity.

Key Takeaways: Bug bounty hunters need to automate their workflows to be successful.Trickest allows users to easily automate offensive security workflows without the need for manual scripting.The platform integrates various tools and provides a visual interface for building workflows.Users can schedule workflows and execute them on multiple machines for scalability.Automation is the key to the future of cybersecurity and can save time and improve efficiency.

Nenad's and Trickest's social media and website:
https://twitter.com/ZaricNenad_
https://www.linkedin.com/in/nenad-zaric/
https://twitter.com/trick3st
https://www.linkedin.com/company/trickest/
https://trickest.com/
35 min
June 29, 2023The Evolution of Offensive Security: Insights from Dave Mayer
About The Guest(s):
Dave Mayer is an Offensive Security professional with extensive experience in Red Teaming and Penetration Testing. He has a background in computer science and has worked for companies like Citibank and Grim before founding Neuvik. Dave is also a mentor and educator in the field of Offensive Security.
Summary:
Dave Mayer, an experienced Red Team professional, shares his journey in the field of Offensive Security. He discusses his background in computer science, his transition from development to Red Teaming, and his work at Citibank and other consulting firms. Dave emphasizes the difference between Red Teaming and Penetration Testing, highlighting the intent and level of detail involved in each. He also provides insights into when organizations should consider conducting a Red Team operation and the importance of cloud security in today's hybrid environments. Dave recommends learning programming and scripting languages like Python and PowerShell to excel in Offensive Security. He also discusses the role of bug bounties and disclosure programs in finding vulnerabilities and improving security.
Key Takeaways:
Red Teaming is focused on remaining undetected and achieving a specific objective, while Penetration Testing aims to find as many vulnerabilities as possible across multiple systems.

Red Teaming should be conducted after organizations have matured their vulnerability scanning and Penetration Testing processes.

Cloud security is crucial in today's hybrid environments, and understanding cloud platforms and APIs is essential for Offensive Security professionals.

Learning programming and scripting languages like Python and PowerShell is important for automating tasks and building tools in Offensive Security.

Bug bounties and disclosure programs can be valuable for finding vulnerabilities and improving security, but organizations should provide clear contact information for researchers to report vulnerabilities.

Dave's social media and Neuvik website:
https://twitter.com/dmay3r
https://www.linkedin.com/in/dmay3r/
https://www.neuvik.com/
35 min
June 27, 2023 Hacking Past and Present: A Conversation with Moses Frost
Moses Frost, an offensive security expert, shares his journey into cybersecurity in this episode of the Phillip Wylie Show. Frost's interest in computers started in elementary school when he taught himself how to use an old IBM 8088 and read about DOS. He later discovered bulletin board systems (BBS) and began exploring the world of hacking. Frost's curiosity and passion for computers led him to pursue a career in offensive security, where he helps companies prevent cyber attacks.

Frost discusses his early experiences with BBS, including learning how to manipulate phone lines and bypass security systems. He also shares a story about getting doxxed after logging into an elite bulletin board and angering the admin. After high school, Frost became an auto mechanic but eventually returned to his love of computers and signed up for an A+ class. He started building systems for a company but was treated poorly and decided to better himself by learning how to use Windows NT four on his own laptop.

Later, Frost talks about his early experiences with Linux and how he figured out how to get drivers on his laptop. He eventually got a job at a hospital as a temp worker for PC support, where he developed a process to make desktop imaging faster and migrated 10,000 desktops to the system. Despite being in his teens, Frost was able to lead his senior colleagues and eventually got hired by the hospital.

The conversation also touches on the early days of cybersecurity when people were not aware of the risks and how easy it was for threat actors to exploit vulnerabilities. However, with the industry growing and maturing, the tools have become more sophisticated, and it takes a lot more to be a good pen tester now than it did in the past. Frost explains the complexity of hospital systems and the various technologies used in them. He also talks about the hospital's network, which was on the internet in 92-93 and was given a slash 16. Frost was tasked with upgrading the hospital's firewalls, which were originally Windows NT, to Nokia boxes.

Frost recommends starting small and expanding one's skillset to get into pen testing. He advises against trying to learn everything and instead encourages people to focus on what they enjoy and are good at. He also cautions against trying to become someone important or famous on social media, as it can be a trap that distracts from learning and growth. Frost's story highlights the importance of pursuing one's passions and constantly striving to improve oneself.

Moses' social media:
https://www.linkedin.com/in/mosesfrost/
https://twitter.com/mosesrenegade
49 min
June 22, 2023 Talking Content Creation and Marketing with Zach Hill
Zach Hill, content creator and marketer at TCM Academy and TCM Security, joined Philip Wylie on the Philip Wylie Show to discuss the significance of content creation and marketing in the cybersecurity industry. Hill emphasized that content creation is about helping the community by providing unique perspectives on cybersecurity topics. He highlighted the importance of social engineering, which hasn't changed in the last 24 years. Hill shared his transition from web development and search engine optimization to infrastructure and YouTube.
Hill and his colleague, Heath, recently released a course, Practical Career Ready Professional, which teaches soft skills, technical skills, marketing skills, branding skills, and other skills necessary for success in the industry. Hill emphasized the need to be involved in social networks and put oneself out there, sharing success stories of individuals who found new or better employment through social networks. Hill stressed that soft skills are often overlooked but can give individuals an edge over their peers. Companies are starting to realize the value of video content creation and social media marketing and are using it as a cheaper form of advertising.
Hill's YouTube channel started as a way to help people, and he never expected it to evolve the way it did. He shared a personal experience of how social media and networking can lead to job opportunities. Hill advised that finding a purpose for content creation is key, and recording the first video is always tough, but it is necessary to start somewhere. The value of providing genuine content to help people is crucial, and it can lead to a more solid brand and wider acceptance. Hill's goal is to see people succeed and do better than him, and he encourages individuals to never give up and take the first step.
Zach's social media, website, and YouTube:
https://www.linkedin.com/in/iamnerdy/
https://www.youtube.com/itcareerquestions
https://iamnerdy.net/
35 min
June 20, 2023 A Conversation with Red Team Expert Manit Sahib
Manit Sahib, Director of Global Intelligence and Offensive Operations at Picnic, spoke on the Phillip Wylie Show about the
importance of experience and certifications in red teaming and social
engineering. He highlighted the significance of CBEST, a framework jointly
created by Crest and the UK Central Bank, for financial regulated firms to
undergo assurance testing every three years to simulate an adversary's attack
and test their detection and response capabilities. Manit also mentioned TCM
Academy, which is gaining traction in the industry. The conversation covered
the changing landscape of the industry, with more awareness and accessibility
to certifications such as OSCP. Manit explained the difference between pen
testing and red teaming, with the latter being a more comprehensive and
end-to-end style of testing that assesses an organization's detection and
response capabilities. Manit emphasized the importance of testing an
organization's security posture multiple times and simulating attacks from
advanced persistent threat groups to ensure that the organization is prepared
to isolate and contain breaches. He also shared anecdotes about the challenges
of working as an internal or external tester and the importance of building
relationships with stakeholders and technical staff. Manit emphasized the
importance of using visuals to help stakeholders understand the impact of
vulnerabilities and the value of red teaming and pen testing reports in
improving an organization's security posture. He recommended networking,
keeping up to date with research, and practicing on red team labs to gain
experience in the field. Manit closed by sharing his YouTube channel, Red Team
Raw, where he interviews hackers and like-minded individuals about their
experience and journey in the industry. Manit also offered his help and advice
to anyone who is struggling in their career and wants to reach out to him on
LinkedIn.
Manit's social media and YouTube:
https://www.linkedin.com/in/manitsahib/
https://twitter.com/redteamraw
https://www.youtube.com/c/RedTeamRaw
33 min
June 16, 2023 Cybersecurity Certifications a Discussion with Sumit "Sid" Siddharth
In the first live episode of The Phillip Wylie Show, Sid Siddharth, the founder of The SecOps Group, joins Phillip to discuss cybersecurity certifications. Sid is a renowned cybersecurity expert with over 15 years of experience in pen testing and has given offensive security training at major events like Black Hat, DEFCON, and Hack in the Box. He has also authored several research papers, exploit books, and advisories. In this interview, Sid and Phillip discuss the challenges of cybersecurity certifications and how Sid's SecOps Group is helping to address these issues. They cover topics like the importance of hands-on training, the limitations of traditional certifications, and the need for industry-specific certifications.
The SecOps Group website: https://secops.group/
Free Pentesting Labs: https://vulnmachines.com/
Sid's LinkedIn profile: https://www.linkedin.com/in/sumsid/
44 min

About Phillip Wylie Show

From the publisher's feed

The Phillip Wylie Show is a premier cybersecurity podcast and media source for offensive security professionals. Hosted by Phillip Wylie, globally recognized ethical hacking expert, keynote speaker,…