Phillip Wylie Show

By Phillip WylieTechnology

Phillip Wylie Show episodes

June 13, 2023 Talking AI and Content Creation with Daniel Miessler
Daniel Miessler, the creator of the "Unsupervised Learning" newsletter and podcast, discusses the
importance of content creation for building a personal brand and breaking into
the industry. Miessler believes that having a visible brand can help connect
with others and lead to new opportunities. He recommends immediately capturing
ideas and always having a place to do so. Miessler's podcast and newsletter
cover security, technology, and human news. He believes that tech and science
are subordinate to humanity and is interested in how they impact humans and
what humans care about. Miessler emphasizes the importance of pursuing one's
interests and doing what resonates with oneself rather than creating for the
audience. He encourages being honest and transparent about the learning process
to build credibility and trust with others in the industry.
Miessler
recommends working for oneself as soon as possible, allowing for more control
over one's work and the ability to focus on what matters. He notes the power of
micro-podcasting and recommends having a website or a place to talk about
ideas, as Twitter may not be the best platform for longer-form content. Miessler
believes that AI will lead to digital assistants that will know everything
about you and interact with the world, collecting things that matter to you,
and then bringing them to you in the way that's best for you. He recommends
owning a domain and having content on that domain, making sure that it's easy
to import and export.
Miessler
emphasizes the importance of having control of one's content and recommends
having a website as a home base. He suggests linking out from the website to
different brands and syndication sources, such as Instagram, TikTok, Reddit,
YouTube, and Twitter. Miessler warns that platforms can change at any time, and
creators cannot trust them to keep their promises. As a result, creators should
make sure that their core identity is at their domain and their own website.
Miessler
also notes that the importance of SEO and having content on one's own website
may decrease due to AI's ability to parse and model information. In the future,
digital assistants may be able to answer queries without needing to access
websites directly. However, Miessler still emphasizes the importance of owning
a domain and having control over one's content. He discusses the potential for
AI to summarize books and present information in a way that is tailored to the
user's preferences.
Daniel's social media and resources:
https://twitter.com/DanielMiessler
https://www.linkedin.com/in/danielmiessler/
Unsupervised Learning https://danielmiessler.com/⁠
45 min
June 09, 2023 Insights from Evan Ottinger on Building Skills, Networking, and Job Hunting
Phillip's guest in this episode is Evan Ottinger, a senior security engineer at TCM Security. Evan shares his background and journey in the technology field. Evan shares his experience in the military as a Middle Eastern linguist and how it sparked his interest in cybersecurity. He emphasizes the importance of foundational knowledge and hands-on experience in systems administration. The conversation also touches upon resources for learning, including Professor Messer's free YouTube (@professormessercontent) and platforms like TryHackMe. They discuss the benefits of networking, attending conferences, and local meetups for career opportunities. The interview concludes with a reflection on the challenges of job hunting and the need for more realistic job listings in the industry. Overall, the conversation highlights the value of diverse skills, continuous learning, and building connections within the cybersecurity field.
Evan's LinkedIn: https://www.linkedin.com/in/eottinger/
26 min
June 07, 2023 Casey Ellis: Pioneering The Bug Bounty Platform To Empower Ethical Hackers
Casey Ellis, the founder of Bugcrowd, is interviewed by Phillip Wylie, who admires Casey's connection to the hacker community. Casey shares his background in technology and how his curiosity led him to become a hacker. He emphasizes that he always exercised caution and avoided causing harm. Casey shifted his focus to network engineering after leaving a nuclear medicine degree program. He enjoys the challenge of thinking like a criminal without engaging in illegal activities.
Casey Ellis, an Australian entrepreneur, pioneered the bug bounty platform to tap into the creativity of the white hat hacker community and enhance internet security. He began his career in pen testing, transitioned to sales, and ultimately founded Bugcrowd.
Casey explains that Bugcrowd was created to connect companies in need of bug bounty programs with the hacking community. He aimed to address the disadvantage of individuals competing against a crowd of hackers with diverse skills and motivations. Phillip Wylie, a former ambassador for Bugcrowd, highlights that while some individuals may still engage in malicious activities, they risk losing their participation on the platform. Bugcrowd provides a secure and efficient way to connect organizations with hackers for bug bounty programs.
Casey's social media:
https://twitter.com/caseyjohnellis
https://www.linkedin.com/in/caseyjohnellis/
Bugcrowd social media and resources:
https://www.bugcrowd.com/
https://twitter.com/Bugcrowd
https://www.linkedin.com/company/bugcrowd/
https://www.youtube.com/@bugcrowd
Disclose.io social media and resources:
https://disclose.io/
https://twitter.com/disclose_io
https://www.linkedin.com/company/disclose-io/
37 min
June 01, 2023 Hacker, Researcher, Educator, Entrepreneur, a Glimpse into The World of Vivek Ramachandran
In this episode, Vivek Ramachandran joined the show. Vivek is the founder of Pentester Academy and SecurityTube. Vivek shared how he got interested in computers at an early age and developed a passion for hacking and cybersecurity. Since selling Pentester Academy to INE, he has started a hacker superhero, comic book, and his most recent venture a startup called SquareX. SquareX protects users with a secure browser solution that leverages a cloud-based sandbox. Vivek shares about his hacker-focused comic book titled Hackers: Superheroes of the Digital Age, which educates readers that hacking can be used for good. He shares how his son inspired him to create the comic book.
Vivek's Bio:
Vivek Ramachandran, a veteran in the cybersecurity industry with over 20 years of experience in building security products and finding vulnerabilities in security systems. His entrepreneurial experience spans over a decade, during which he has built wireless monitoring solutions, pentesting gadgets, and cloud-powered lab environments. Before SquareX, he founded Pentester Academy, a cloud-based cybersecurity training startup that was successfully acquired. Vivek also discovered the infamous Caffe Latte Attack and has authored multiple books and research papers on offensive cybersecurity techniques. He has spoken at top conferences like DEFCON and BlackHat over the years.
Vivek's social media:
https://www.linkedin.com/in/vivekramachandran/
https://twitter.com/vivekramac
SquareX website and social media:
https://www.sqrx.com/
https://www.linkedin.com/company/squarexonline/
https://twitter.com/getsquarex
VRN Comics:
https://www.vrncomics.com/
Connect with Phillip on social media, YouTube and visit his website:
https://twitter.com/PhillipWylie
https://www.linkedin.com/in/phillipwylie
https://www.instagram.com/phillipwylie/
https://www.youtube.com/@phillipwylie
https://www.thehackermaker.com/
33 min
May 31, 2023 Get To Know MITRE Engenuity With Maggie MacAlpine!
Phillip welcomes Maggie MacAlpine of MITRE Engunity ( @mitreengenuity3171 ) to discuss MITRE Engunity and its cybersecurity initiatives. In addition to MITRE Engunity, in this episode, Maggie discusses election security.
Connect with Maggie on social media:
https://twitter.com/MaggieMacAlpine
https://www.linkedin.com/in/margaretmacalpine/
MITRE Resources:
https://mitre-engenuity.org/https://mitre-engenuity.org/cybersecurity/attack-evaluations/
https://mitre-engenuity.org/cybersecurity/center-for-threat-informed-defense/
https://mitre-engenuity.org/cybersecurity/mad/
https://attack.mitre.org/
https://twitter.com/MITREengenuity
https://www.youtube.com/@UCGJjokBEqouIhVZvqnLQgYg
If you enjoyed this podcast, check out Phillip's other podcast, The Hacker Factory:
https://thehackerfactory.simplecast.com/
Connect with Phillip on social media, YouTube and visit his website:
https://twitter.com/PhillipWylie
https://www.linkedin.com/in/phillipwylie
https://www.instagram.com/phillipwylie/
https://www.youtube.com/@phillipwylie
https://www.thehackermaker.com/
27 min
May 26, 2023 Pentester Darin Fredde Shares Favorite Hacks And Tips For Career Success
Phillip interviews Darin Fredde, a longtime friend and twice former coworker from their CAD drafting days to a recent job as pentesters. Phillip and Darin have a history that goes back to 1995 when they were AutoCAD drafting. They reconnected in 2002 and have stayed connected since. Darin is an offensive Security professional educator, mentor, and author. Phillip has seen Darin's talent and recommended him for a job in pen testing. Darin has worked in pen testing for about five years and is now one of the best pen testers Phillip knows. During this episode, Phillip and Darin will discuss Darin's origin story, how he got started, and his favorite techniques for pen testing. This episode will be helpful for those already in pen testing and those trying to get started.
Darin's episode of The Hacker Factory Podcast:
https://thehackerfactory.simplecast.com/episodes/darin-freddes-path-from-cad-drafter-to-pentester-the-hacker-factory-with-phillip-wylie-iaciuaXa
Connect with Darin on social media:
Darin's LinkedIn: https://www.linkedin.com/in/darinfredde/
Darin's Twitter: https://twitter.com/dkfredde
If you enjoyed this podcast, check out Phillip's other podcast,
The Hacker Factory: https://thehackerfactory.simplecast.com/
Connect with Phillip on social media, YouTube and visit his website:
https://twitter.com/PhillipWylie
https://www.linkedin.com/in/phillipwylie
https://www.instagram.com/phillipwylie/
https://www.youtube.com/@phillipwylie
https://www.thehackermaker.com/
34 min
May 19, 2023 A Conversation with Offensive Security Pro Corey LeBleu
In this episode, Phillip interviews Corey LeBleu, an offensive security professional with over 19 years of experience in offensive security. Corey shares his beginnings in offensive security specializing in social engineering and physical pentesting. Corey's career has been spent consulting for various companies, and his interests evolved from network pentesting to application pentesting. He shares how crucial constant learning is to be an offensive security professional and how learning languages such as Python and Go Lang is essential in developing your skills. In this episode, Corey shares how he enjoys lifting weights to stay healthy and manage stress to keep his mental health in check. Corey shares his early interests in inline skating and punk rock music.
Corey's LinkedIn: https://www.linkedin.com/in/coreylebleu/
If you enjoyed this podcast, check out Phillip's other podcast, The Hacker Factory:
https://thehackerfactory.simplecast.com/
Connect with Phillip on social media, YouTube and visit his website:
https://twitter.com/PhillipWylie
https://www.linkedin.com/in/phillipwylie/
https://www.instagram.com/phillipwylie/
https://www.youtube.com/@phillipwylie
https://www.thehackermaker.com/
32 min
May 14, 2023 From Military Red Teamer to CEO and Cofounder: A Conversation with Reuven "Rubi" Aronashvili
Phillip is joined by Reuven "Rubi" Aronashvili, the CEO and founder of CYE. Phillip discusses the advanced capabilities of people in cybersecurity, particularly those who have served in the Israeli Defense Forces (IDF) and Unit 8200. They have a unique understanding of how to defend networks, as the stakes are much higher in the military as it can involve protecting citizens and potentially life-threatening consequences. Rubi explains that Israel is often seen as advanced in cybersecurity primarily because of the survival-oriented approach taken in the Army, such as the Technology Units and the Center of Encryption Cybersecurity in the IDF. Every attack and cybersecurity-related operation can have serious consequences, thus necessitating the need for a focused and comprehensive approach.
The conversation discusses the immediate consequences of an attack on critical infrastructure, such as power and water treatment plants. It is pointed out that such attacks can cause damage to civilian lives while also highlighting the cyber attack against a water treatment plant in Florida last year, which was referred to as a killware attack. The conversation also mentions that Israel experienced an attack attempt on its power environment by Iranian attackers last year. In summary, the conversation focuses on the importance of protecting critical infrastructure from attack attempts to prevent such damage.

The conversation is about the importance of having adequate security measures in industrial control systems and OT environments. The speaker has a background in the Israeli military, where he was part of the founding team of Section 21 and served for seven years. He states that the knowledge and problem definition he has gained from the military is invaluable, and he believes one year in the army equals five years of experience in the commercial world. The speaker also speaks of nation-state capabilities and how they can be divided into three areas: people, training, and skills. Social engineering is mentioned as an example of chutzpah, which is the ability to take things to the next level.

Cybersecurity is complex, and there are several essential components to consider. These include processes and procedures, efficient activation, and covering tracks. But the most critical component is having the right tool set. Nation-level players have access to powerful tools such as Eternal Blue, but even smaller players can cause significant damage by exploiting vulnerabilities or misconfigurations. Organizations need to make improvements to protect themselves against these threats.

Rubi's LinkedIn: https://www.linkedin.com/in/reuven-aronashvili/
CYE Twitter: https://twitter.com/CyesecLtd
CYE Website: https://cyesec.com/

If you enjoyed this podcast, check out Phillip's other podcast, The Hacker Factory: https://thehackerfactory.simplecast.com/

Connect with Phillip on social media, YouTube and visit his website: https://twitter.com/PhillipWylie
https://www.linkedin.com/in/phillipwylie/
https://www.instagram.com/phillipwylie/
https://www.youtube.com/@phillipwylie
https://www.thehackermaker.com/
31 min
May 12, 2023 A Conversation with Buckhorn Consulting Founder and Director Don Dobson
In the podcast episode, Phillip Wylie interviews cybersecurity professional Don Dobson, who shares his journey into the field and emphasizes the importance of continuous learning, hands-on experience, and a strong foundation in computer science. They discuss the significance of soft skills such as communication, empathy, and teamwork in the cybersecurity industry and the value of networking, attending events, and engaging on platforms like LinkedIn.
Don talks about his various roles in the cybersecurity sector and the importance of finding the right fit for one's skills and interests. He highlights the value of mentorship, learning from others, and building a personal brand on LinkedIn through consistency, quality, and original content.
Don encourages professionals to be patient and persistent in their careers, leverage mentors for guidance, and give back to the community by volunteering and helping local organizations with security challenges. His insights offer valuable advice for those seeking a cybersecurity career.
Don's LinkedIn profile:
https://www.linkedin.com/in/security-cyber-technology/
Buckhorn Consulting LinkedIn and Website:
https://www.linkedin.com/company/buckhorn-consulting/
https://www.buckhornconsulting.com/
If you enjoyed this podcast, check out Phillip's other podcast, The Hacker Factory:
https://thehackerfactory.simplecast.com/
Connect with Phillip on social media, YouTube and visit his website:
https://twitter.com/PhillipWylie
https://www.linkedin.com/in/phillipwylie/
https://www.instagram.com/phillipwylie/
https://www.youtube.com/@phillipwylie
https://www.thehackermaker.com/
38 min
May 04, 2023 Kenny Parsons Introduces, PwnKube, a Purposely Vulnerable Kubernetes Environment
In this episode, Phillip Wylie interviews Kenny Parsons
about his open-source project, PwnKube, a purposely vulnerable Kubernetes
environment designed to provide hackers, pentesters, security researchers, and
others a way to practice their Kubernetes hacking skills. They discuss the
benefits of creating such an environment and the future plans for the project,
which include making it publicly available on GitHub and potentially turning it
into a CTF format. They also emphasize the importance of sharing knowledge
within the information security community.

Kenny's LinkedIn: https://www.linkedin.com/in/kenny-parsons/
Kenny’s Twitter: https://twitter.com/therealjiru

If you enjoyed this podcast, check out Phillip's other
podcast, The Hacker Factory: https://thehackerfactory.simplecast.com/

Connect with Phillip on social media, YouTube and visit his
website: https://twitter.com/PhillipWylie
https://www.linkedin.com/in/phillipwylie/
https://www.instagram.com/phillipwylie/
https://www.youtube.com/@phillipwylie
https://www.thehackermaker.com/
15 min

About Phillip Wylie Show

From the publisher's feed

The Phillip Wylie Show is a premier cybersecurity podcast and media source for offensive security professionals. Hosted by Phillip Wylie, globally recognized ethical hacking expert, keynote speaker,…