Phillip Wylie Show

Summary

Join Phillip Wylie as he interviews Anand Singh about his new book on AI security and the critical intersection of data protection, cybersecurity, and artificial intelligence. Anand shares his journey from working on Cray supercomputers to becoming a cybersecurity leader, and provides practical frameworks for organizations adopting AI securely.

Takeaways

• AI can be a useful tool for individuals.
• Malicious actors also leverage AI for attacks.
• It's crucial to secure the use of AI.
• AI is transforming security tooling.
• Understanding AI's dual nature is essential.
• Security for AI and AI for security are interconnected.
• The landscape of AI includes both benefits and risks.
• Organizations must be proactive in AI security.
• AI's potential for misuse is a growing concern.
• Cybersecurity strategies must evolve with AI advancements.

Sound bites

• "AI is a very useful tool for individuals."
• "How are you securing your use of AI?"
• "AI for security is becoming more important."

Chapters

00:00 Introduction to Anand Singh and His Book

07:01 Anand's Hacker Origin Story

12:30 The Importance of AI in Cybersecurity

20:15 Risks of AI and Data Security

25:04 Implementing AI Securely in Organizations

28:02 AI vs Machine Learning and Final Thoughts

29:49 Phillip Wylie Show Outro Video

Connect with Anand and get his book!

https://www.linkedin.com/in/anandsinghmn/

https://www.amazon.com/Data-Security-Age-Protecting-AI-Driven/dp/1968433015/

My interview with Anand for the Phosphorus IoT Security Podcast:

https://phosphorus.io/securing-the-foundation-cyber-strategy-in-the-age-of-smart-infrastructure-with-global-ciso-anand-singh/

Summary

In this episode of the Phillip Wylie Show, Emily Dobson shares her journey into cybersecurity, influenced by her family's background in technology. She discusses her experiences in digital forensics, the importance of networking, and her role in organizing conferences. Emily emphasizes the value of certifications and soft skills in the industry, as well as the significance of public speaking. The conversation concludes with her advice for newcomers in cybersecurity and her future aspirations in the field.

Takeaways

• Emily's interest in cybersecurity was sparked by her father's career.
• Networking is crucial for breaking into the cybersecurity field.
• Running conferences has helped Emily build valuable connections.
• Certifications can provide an edge in the job market.
• Soft skills are often as important as technical skills in cybersecurity.
• Public speaking can significantly enhance one's career opportunities.
• There are various career paths in cybersecurity beyond penetration testing.
• GRC roles are often overlooked but offer great starting points.
• Emily encourages newcomers to speak at conferences to gain experience.
• The importance of passion in choosing topics for presentations.

Connect with Emily!

https://www.linkedin.com/in/emily-dobson-cyber-technology/

Chapters

00:00 Introduction and Background

03:23 Emily's Journey into Cybersecurity

06:08 The Importance of Networking

08:47 Running Conferences and Building Connections

11:50 The Role of Certifications in Cybersecurity

14:27 Exploring Career Paths in Cybersecurity

17:27 Soft Skills in Cybersecurity

20:10 Public Speaking and Overcoming Fears

22:52 Future Aspirations and Closing Thoughts

Summary

In this episode of the Phillip Wylie Show, Emile Fugulin, co-founder of Caido, discusses the evolution of cybersecurity tools, his personal journey into hacking, and the importance of community engagement in the bug bounty space. He highlights the performance challenges faced by traditional security tools and how Caido aims to address these issues through innovative design and architecture. Emile also shares insights on the integration of AI in cybersecurity, the learning curve for new users, and the future of automation in the industry.

Takeaways

• Emile Fugulin emphasizes the importance of competition in the cybersecurity tool market.
• Caido aims to improve performance and usability compared to traditional tools.
• The tool is designed to facilitate collaboration between hackers and developers.
• Caido's architecture allows for remote deployment, enhancing flexibility for users.
• Community engagement is crucial for Caido's development, especially in plugin creation.
• The bug bounty community has been a primary focus for Caido's growth and features.
• Efficiency in manual testing is a key consideration in Caido's design.
• The learning curve for Caido is designed to be less steep than traditional tools.
• AI integration is being approached with user control and privacy in mind.
• The future of cybersecurity will likely see increased automation, but human intuition remains essential.

Connect with Emile!

https://www.linkedin.com/in/efugulin/

https://caido.io/

Chapters

00:00 Introduction to Caido and Emil's Background

03:19 Emil's Hacker Origin Story

06:05 Performance and Usability Challenges in Security Tools

09:35 Caido's Technical Architecture and Community Engagement

12:11 Plugin Development and Community Contributions

14:14 Focus on Bug Bounty Community

15:34 The Role of Automation in Pen Testing

18:05 Learning Curve and Documentation for Caido

21:35 AI Integration and Future of Pen Testing

24:39 The Future of Cybersecurity Jobs

26:51 Closing Remarks and Community Engagement

Summary

In this episode of the Phillip Wylie Show, host Phillip Wylie interviews Lisa Landau, a cybersecurity expert and co-founder of Threat Light. They discuss Lisa's unique journey from military intelligence to the startup world, the challenges and opportunities in cybersecurity, and the importance of hiring talent with diverse backgrounds. Lisa shares insights on how to break into the cybersecurity field, the significance of passion and critical thinking in candidates, and her vision for making cybersecurity solutions more accessible. The conversation culminates in an exploration of the founding of Threat Light and its mission to provide effective incident response solutions.

Takeaways

• Lisa Landau emphasizes the importance of diverse experiences in cybersecurity.
• Working in startups allows individuals to wear many hats and gain varied skills.
• Hiring managers should consider potential over specific past experience.
• Passion for cybersecurity is crucial for success in the field.
• Critical thinking and the ability to work under pressure are essential traits.
• Cybersecurity roles often require a mindset that goes beyond a 9-to-5 job.
• The startup environment can be daunting but offers unique learning opportunities.
• Threat Light aims to make enterprise-level security accessible to all.
• Incident response requires speed and efficiency to mitigate risks.
• Hiring managers should be open-minded to candidates from non-traditional backgrounds.

Connect with Lisa!

http://linkedin.com/in/lisa-landau/

https://www.linkedin.com/company/threatlight/

https://www.threatlight.com

Chapters

00:00 Introduction and Background

03:09 Lisa's Origin Story in Cybersecurity

08:46 Transitioning from Corporate to Startup Life

11:33 Opportunities for New Graduates in Startups

20:31 Hiring Strategies for Cybersecurity Talent

23:23 The Birth of ThreatLight and Its Mission

Summary

In this episode of the Phillip Wylie Show, John Baker from MITRE discusses the organization's role in cybersecurity, including the development of the ATT&CK framework and the importance of threat intelligence. He shares his personal journey into the field, MITRE's structure as a nonprofit, and the evolution of their resources. The conversation also touches on the integration of AI in cybersecurity, the significance of CVEs, and the need for continuous learning in the ever-evolving landscape of cyber threats.

Connect with Jon!

https://www.linkedin.com/in/jonathanobaker/

MITRE

https://www.mitre.org/focus-areas/cybersecurity/threat-informed-defense

Chapters

00:00 Introduction to MITRE and Cybersecurity Resources

03:16 John Baker's Hacker Origin Story

06:34 Understanding MITRE's Role and Structure

08:18 Exploring MITRE's Initiatives and Projects

11:04 The Development of MITRE ATT&CK

15:13 The Importance of Cyber Threat Intelligence

17:21 Center for Threat-Informed Defense

20:11 Leveraging AI in Cybersecurity

23:35 The Role of CVEs in Vulnerability Management

29:36 Closing Thoughts on Cybersecurity Learning

Summary

In this episode of the Phillip Wylie Show, host Phillip Wylie speaks with Casey Camilleri about the evolution of offensive security, the importance of continuous penetration testing, and the role of automation and AI in the cybersecurity landscape. They discuss Casey's hacker origin story, the shift in mindset required for modern security practices, and provide advice for aspiring penetration testers. The conversation emphasizes the need for continuous learning and adaptation in the ever-changing field of cybersecurity.

Connect with Casey!

https://www.linkedin.com/in/caseycammilleri/

https://www.sprocketsecurity.com/

Chapters

00:00 Introduction and Equipment Enthusiasm

02:12 The Hacker Origin Story

05:03 Evolution of Penetration Testing

07:33 Continuous Penetration Testing and Automation

10:29 The Role of AI in Pen Testing

13:03 Challenges in Application Pen Testing

15:37 Mindset Shift in Cybersecurity

18:31 Advice for Aspiring Pen Testers

21:21 Closing Thoughts on Continuous Security

Summary

In this episode of the Phillip Wylie Show, Jennifer Leggio shares her insights on personal branding, the evolution of marketing in cybersecurity, and the importance of community engagement. With a rich background in cybersecurity marketing, Jennifer discusses her journey from journalism to becoming a key player in the cybersecurity community. She emphasizes the need for marketers to understand the technical aspects of their products and the significance of authentic content creation. The conversation also touches on resilience in the face of career challenges and the importance of mental health in the industry.

Chapters

00:00 Introduction and Personal Branding

04:02 Jennifer Leggio's Origin Story

06:58 Building Personal Brands

10:09 The Importance of Technical Understanding in Marketing

13:04 Evolution of Marketing in Cybersecurity

15:53 Content Creation and Its Value

18:53 Influencer Marketing and Subject Matter Expertise

22:01 The Challenges of Faking Expertise

25:06 Resilience in Cybersecurity Careers

28:09 Mental Health and Personal Growth

31:00 Closing Thoughts and Community Support

Connect with Jennifer!

https://www.linkedin.com/in/jenniferleggio/

https://x.com/mediaphyter

Summary

In this episode of the Phillip Wylie Show, host Phillip Wylie speaks with Kat Cozgrove, a developer advocate and Kubernetes maintainer. They discuss Kat's journey into technology, her hacker origin story, and her transition from software engineering to developer advocacy. Kat shares insights on getting started with Kubernetes, the importance of open source contributions, and the value of networking and community engagement. They also touch on misconceptions about sales roles, the benefits of attending smaller conferences, and the significance of kindness in the open source community.

Chapters

00:00 Introduction

04:03 Kat's Hacker Origin Story

06:59 Career Path in Technology

09:50 Transition to Developer Advocacy

13:00 Getting Started with Kubernetes

15:52 The Importance of Community and Networking

19:04 Career Evolution and Opportunities

22:07 The Value of Learning to Code

25:09 Exploring Non-Traditional Career Paths

28:10 The Role of Sales in Tech

31:08 Conferences and Community Engagement

33:51 Closing Thoughts and Open Source Advocacy

Connect with Kat!

https://www.linkedin.com/in/katcosgrove/

https://bsky.app/profile/kat.lol

**"In this inspiring cybersecurity conversation, Filipi Pires reflects on his decade-long journey in the industry, sharing lessons on patience, persistence, and embracing your personal career path. He discusses the realities of professional growth, the importance of continuous learning, and why comparing yourself to others can hold you back. Perfect for aspiring ethical hackers, penetration testers, and anyone navigating the cybersecurity career landscape."**

Timestamps:

00:00 Introduction

02:15 Filipi’s career beginnings

07:40 Lessons from a decade in cybersecurity

12:30 The importance of patience and persistence

17:55 Overcoming self-comparison

23:10 Career advice for aspiring professionals

Connect with Filipi Pires:

🔗 LinkedIn: https://www.linkedin.com/in/filipipires/

🔗 Twitter/X: https://x.com/FilipiPires

Follow The Phillip Wylie Show:

🎙 Podcast: https://phillipwylieshow.com

📺 YouTube: https://www.youtube.com/c/phillipwylie

🔗 Website: https://thehackermaker.com

Summary

In this episode of the Phillip Wylie Show, Phillip Wylie interviews Alethe Denis from Bishop Fox, exploring her journey into hacking, the significance of social engineering in cybersecurity, and the evolving landscape of phishing and red teaming. Alethe shares her unique origin story, insights into the importance of real phishing engagements, and creative methods for gaining access during physical pen tests. The conversation also touches on the ethical implications of social engineering, the challenges posed by increasing security awareness, and valuable advice for aspiring security professionals.

Takeaways

• Alethe's journey into hacking began with an interest in social engineering as a child.
• The evolution of hacking has always involved human manipulation.
• Real phishing engagements provide a more accurate assessment of security posture.
• Red teaming is essential for testing security assumptions and controls.
• Physical pen testing requires creative strategies to gain access.
• Voice phishing techniques are becoming increasingly sophisticated.
• Security awareness training is improving, but challenges remain.
• Ethical considerations are crucial in social engineering practices.
• AI is being misused to create fake explicit images for extortion.
• Networking and community engagement are vital for career growth in cybersecurity.

Connect with Alethe!

https://www.linkedin.com/in/alethe/

https://alethedenis.com/

Chapters

00:00 Introduction and Background

02:29 Alethe's Hacker Origin Story

06:40 The Evolution of Hacking and Social Engineering

08:11 Role of Social Engineering in Red Teaming

10:23 The Importance of Realistic Phishing Engagements

13:42 Physical Pen Testing and Access Strategies

16:15 Creative Methods for Gaining Access

20:03 Voice Phishing Techniques and Challenges

22:56 Navigating Social Engineering and Security Awareness

28:02 The Evolution of Scams and Manipulation Techniques

32:43 Career Pathways in Cybersecurity

40:31 Balancing Offensive and Defensive Security Roles