Phillip Wylie Show

Latest Episodes:

Michael Kim: DJ turned Red Teamer Mar 26, 2024

Show notes

About the Guest: Michael Kim is a seasoned professional in the realm of offensive security, boasting an extensive background in red teaming and penetration testing. Throughout his dynamic career, Michael has contributed his expertise to a variety of organizations, which enables him to offer a unique perspective on cybersecurity. Prior to diving into the security field, Michael followed his passion in music production and DJing for over a decade. His pivot to cybersecurity was catalyzed by the realization that it did not require a formal degree but could be pursued through alternative educational platforms like boot camps. Michael's commitment to continual learning and self-improvement is demonstrated by his approach to gaining new skills and certifications necessary for advancing his career. Currently, he holds the position of red team operator. Episode Summary: In this episode of the Philip Wylie Show, host Phillip Wylie engages with Michael Kim, an expert in offensive security, to discuss his unconventional journey into the field of cybersecurity and insights on red teaming and penetration testing. Michael's narrative is not only a testament to career shifts but also an inspiration for individuals looking to pivot into new endeavors later in life. This conversation delves into the intricacies of cybersecurity, the differences between penetration testing, and red teaming, as well as effective learning strategies for those aspiring to break into the security sector. Michael and Phillip exchange valuable information on the evolution of cybersecurity careers, revealing how passion and dedication can lead to substantial professional growth despite starting from non-technical backgrounds. The episode underscores the importance of a proactive work ethic, the utilization of learning resources like TryHackMe and Hack The Box, and the strategic pursuit of relevant certifications. With Michael's background in music and his proactive approach to personal branding on LinkedIn, listeners are offered a multifaceted perspective on forging a successful career path in offensive security. Key Takeaways: Transitioning to cybersecurity does not require a formal degree; alternative education paths like boot camps can be effective. Red teaming involves stealth and in-depth tactics, unlike the broader approach of penetration testing. Certifications like OSCP are valuable but not entry-level; it's essential to build a foundation of skills prior to attempting advanced certifications. Resources such as TryHackMe and Hack The Box Academy are highly recommended for hands-on learning and skill development. Personal branding and active engagement on professional networks like LinkedIn can significantly benefit one's career advancement. Notable Quotes: "I always start with saying… I'm not here to push past, I'm just here because I just want to help out." "If I can do it, anyone can do it. If you have the passion, if you have dedication, never give up because everybody has a different starting point." "It's important to have a plan of action. And I feel like from there on, you can build on that plan of action." "I feel like if everybody does their due diligence to try to research, understand what certs actually help, it'll be easier to navigate [the field]." "We only go through this once and there'll be times when you look back fondly and like, 'Oh, I used to not be able to do this, but now I can do this really easily.'" Resources: https://www.linkedin.com/in/michael-kim-83b0627b/ https://twitter.com/MeterPeter4Eva

Be Fearless Online: In Browser Malicious File Detection Part 4 Mar 26, 2024

Show notes

About the Guest: Shourya Pratap Singh is a Principal Engineer at SquareX. He is responsible for building SquareX’s secure and privacy-focused extension, and works on researching methods to counteract web security risks. He has conducted a workshop at Texas Cyber Summit, and his work is being presented at Blackhat Arsenal EU. Before joining ⁠ SquareX⁠, he worked with FinBox (an Indian fintech) where he led a team of brilliant developers and was responsible for building and scaling multiple product lines. He has a bachelor’s degree from IIIT Bhubaneswar and holds a patent. His area of interest includes browser extensions and web application security.

Episode Summary: In this highly informative episode of the Philip Wylie Show, we dive into the pertinent topic of online security. Together with Shourya Pratap Singh from Squarex, we explore the intricacies of malicious file detection and examine the latest advancements Squarex has incorporated to bolster digital safety. From password-protected archives to deceptive file naming practices, this episode sheds light on the multi-layered defense strategies designed to ward off cyber threats. Shourya explains how Squarex has evolved its scanning abilities, focusing on zip files and extending its malicious document detection features to manage complex archives, including encrypted and recursively nested zip files. By integrating innovative capabilities directly within the browser, Squarex enables users to seamlessly scan for potential threats without compromising the security of their data. The discussion extends to how Squarex handles password retrieval from email bodies to automate the scanning process, showcasing the company's forward-thinking approach to cybersecurity. The episode also reveals Squarex's latest feature developments, such as the Download Interceptor, which provides users with additional layers of protection against unwittingly executing harmful downloads.

Key Takeaways:

Squarex has enhanced its platform to detect malicious content within zip files, including password-protected and recursively nested archives.
The download interceptor feature within Squarex offers capabilities such as blocking downloads, ensuring users can review security scans before proceeding.
Squarex can automatically use passwords found in email bodies to scan encrypted files seamlessly, maintaining user convenience without compromising security.
Attackers' methods, such as renaming zip files or using multiple layers of encryption, can be thwarted with Squarex's comprehensive scanning features.
The cybersecurity landscape demands defenders to be always vigilant, as showcased by Shourya's assertion that "attackers have to win only once, but whoever is trying to protect you has to win every time." Resources: Get your free SquareX Chrome plugin: ⁠⁠http://sqrx.io/pw_x⁠⁠ ⁠⁠https://www.linkedin.com/company/getsquarex/⁠⁠ ⁠⁠https://twitter.com/getsquarex⁠⁠ ⁠⁠https://www.instagram.com/getsquarex/sible.

Be Fearless Online: In Browser Malicious File Detection Part 3 Mar 21, 2024

Show notes

About the Guest: Jeswin Mathai is the Chief Architect at SquareX. He leads the team responsible for designing and implementing the Infrastructure. Prior to joining SquareX, He was working as the chief architect at INE. He has published his work at DEFCON China, RootCon, Blackhat Arsenal, and Demo Labs (DEFCON). He has also been a co-trainer in-classroom training conducted at Black Hat Asia, HITB, RootCon, and OWASP NZ Day. He has a Bachelor's degree from IIIT Bhubaneswar. He was the team lead at InfoSec Society IIIT Bhubaneswar in association with CDAC and ISEA, which performed security auditing of government portals and conducted awareness workshops for government institutions. His area of interest includes Cloud Security, Container Security, and Web Application Security.

Episode Summary: In this insightful episode of the Phillip Wylie show, cybersecurity aficionado Jeswin Mathai returns to delve deeper into the intricacies of in-browser malicious file detection. Sponsored by Squarex, this continuation of the "Be Fearless Online" series sheds light on the ever-evolving tactics used by cyber attackers to circumvent traditional antivirus measures. The conversation promises a blend of technical demonstrations and thought-provoking discussion that's integral for professionals and enthusiasts alike. Jeswin guides us through the dark alleys of cyber threats, starting with reflections on the fundamental evasion techniques like VBA stomping and purging. He invites listeners into a complex world where even simple file renaming or metadata tampering can make malicious documents slip undetected past security checkpoints. Further, Jeswin exposes a fascinating aspect of cybersecurity—"large file attacks"—demonstrating that size does matter in malware detection. With technology that detects such threats in real-time, Jeswin introduces listeners to Squarex's latest advancements, aiming to revolutionize the way we stay safe online.

Key Takeaways: Attackers are innovating new evasion techniques that fool even the most advanced antivirus systems, like hiding malicious code in macro-enabled files. Simple changes, such as renaming files and modifying metadata, can significantly reduce the chances of detection by standard security measures. Large-file attacks are a newer method used by attackers to bypass antivirus systems by embedding malicious code within massive files. Squarex is at the forefront of combating these advanced threats with in-browser detection technology capable of analyzing and intercepting malicious downloads. Future updates from Squarex promise even greater capabilities in detecting and dealing with sophisticated in-browser threats. Notable Quotes: "In case of large files, let me start with the one XLSM. So this is the one that's having 33 Mb. It will take a few seconds and… it was able to flag it right there." "Now the moment we try to upload this on Virus Total… it will take a long time." "So now let's take a look at how Squarex's detection is going to help us." "With download Interceptor, it's a big win for all of the files out there, whether the file is coming from Google Drive, whether it is Telegram, WhatsApp, Whatnot." Resources: Get your free Chrome plugin: ⁠⁠http://sqrx.io/pw_x⁠⁠ ⁠⁠https://www.linkedin.com/company/getsquarex/⁠⁠ ⁠⁠https://twitter.com/getsquarex⁠⁠ ⁠⁠https://www.instagram.com/getsquarex/

Cecile Mengue: From Hacked to Hacker Mar 20, 2024

Show notes

About the Guest: Cecile Mengue is a dynamic and inspiring penetration tester with a background that diverges from the traditional cybersecurity pathway. Her journey into the realm of cybersecurity was spurred by a personal experience involving cybercrime, which led her to pivot from her degree in criminal justice to pursuing a career in penetration testing. Demonstrating an entrepreneurial spirit and a passion for security, Mengue transitioned from being a victim of hacking to a cybersecurity expert. A notable speaker with an interesting origin story, she presently holds a position as a penetration tester at IBM.

Episode Summary: In this compelling episode of the Phillip Wylie Show, host Phillip Wylie welcomes an intriguing guest, Cecile Mengue, whose unconventional path to becoming a penetration tester is not just informative but also deeply motivational. The conversation delves into Mengue's unique "hacker origin story," shedding light on her transition from working in juvenile court to unraveling a hacking attempt that targeted her own business. Cecile Mengue's narrative is one of resilience and tenacity. Having been hacked during her entrepreneurial ventures, Mengue chose to transform her anger into curiosity, leading her down the path of self-taught cybersecurity methods and eventually open-source intelligence (OSINT). She remarkably tracked down her attackers and successfully recovered her losses, a victory that fueled her interest in cybersecurity. Her unconventional entry into pen testing highlights the power of determination and self-directed learning. Throughout the conversation, Mengue candidly shares the strategies she employed to break into the cybersecurity field, including how she targeted her efforts specifically toward pen testing and leveraged networking to secure her first professional role. The episode is a testament to the idea that one's passion, complemented by strategic skill-building and smart networking, can create pathways to success in the technology industry.

Key Takeaways: Cecile Mengue's foray into cybersecurity stemmed from her own experience with a hacking incident, leading to a career change from criminal justice to penetration testing. With determination and self-learning, she tracked down her hacker, which sparked her interest in cybersecurity and ethical hacking. Focusing on a specific area of interest within cybersecurity, Mengue optimized her learning and job search toward penetration testing, emphasizing the importance of specialization. Mengue's proactive approach in gaining experience, such as volunteering to help secure local businesses, played a pivotal role in strengthening her resume. Networking and taking advantage of apprenticeship and entry-level programs can be crucial steps in securing a position in cybersecurity, as demonstrated by Mengue’s journey. Notable Quotes: "Once I became curious about how it happened, I started kind of like poking around the Internet myself, trying to Google." "It was anger, then curiosity, then after curiosity, it was determination." "I kept waiting because I didn't think that I could do it, right, because I felt like every time I start researching hackers or pen testers or anything in cybersecurity, one of the things that I noticed, like, nobody looked like me." "Your attitude and just the way you go about things is already a big step." "My passion was always about going after the bad guy to protect the good guy, right?" Resources: https://www.linkedin.com/in/cecile-m-2375b9133/ https://www.instagram.com/cybercile/ https://cybercile.com/

Mariana Padilla: Building Relationships and Networking in Cybersecurity Mar 12, 2024

Show notes

About the Guest:

Mariana Padilla is a cybersecurity professional with a background in marketing and a keen focus on storytelling as a powerful tool. With an unexpected foray into the cybersecurity world, she has found her niche and currently serves as a co-founder, and CEO of a company pioneering in creating an automated demo marketplace for cybersecurity software. She brings a wealth of experience from education and nonprofit sectors, with a mission to bridge the gap between different cybersecurity communities through initiatives like virtual coffee meetings and community events.

Episode Summary:

In this fascinating episode of the Phillip Wylie Show, we delve into the importance of networking and the art of virtual connection in the dynamic field of cybersecurity. Our special guest, Mariana Padilla, shares her journey into the world of cybersecurity, highlighting the unexpected paths that lead to fulfilling careers in the industry. Her innovative approach to networking through 'virtual coffees' underscores the value of building strong professional relationships.

Mariana Padilla emphasizes the critical role of trust and relationship-building in the cybersecurity sector. She narrates her personal networking strategy, which includes initiating 100 virtual meetings in as many days, an effort that significantly expanded her professional network. This approach not only showcases her dedication to connecting with industry professionals but also her entrepreneurial spirit as she ventured into the cybersecurity space with her automated demo marketplace and community events. Her ability to leverage LinkedIn as a networking tool provides listeners with actionable insights on how to navigate and utilize social media effectively for career advancement.

Key Takeaways:

The Power of Networking: Establishing a strong network is key in cybersecurity, and virtual coffees can serve as an innovative and effective method for building connections.

Trusting in Opportunities: Being open to possibilities and stepping out of your comfort zone can lead to unforeseen and valuable relationships within the industry.

Personal Branding Importance: Showcasing personal achievements, like participating in or winning CTF (Capture The Flag) competitions, is crucial for building one's brand and portfolio.

Bridging Industry Gaps: Collaboration between different cybersecurity communities, such as practitioners and executives, is essential.

Utilizing LinkedIn: Engage actively on LinkedIn, not just by posting content but also by participating in discussions and utilizing the platform's diverse features for networking.

Notable Quotes:

"I really think that the common thread with everything that I've done is storytelling."

"One of the things that I learned very early on after joining this industry is that it is very much focused… it operates differently from a lot of industries in terms of it is trust based."

"Every good conversation opens the door to other conversations."

"You have to think about it kind of like sailing. You just have to open up your sails and be willing to be open to the opportunities that come your way."

"The market is continuing to be more and more crowded. They're looking for new ways to show their product and showcase to potential clients and customers how it works."

Resources:

Mariana Padilla's LinkedIn Profile: https://www.linkedin.com/in/heretoshakeshitup/

Hackerverse Website: https://hackerverse.co/

Hackerverse LinkedIn Page: https://www.linkedin.com/company/hackerverse/

Justin Elze: A CTO's Offensive Security Insights Mar 05, 2024

Show notes

About the Guest:

Justin Elze is the CTO of TrustedSec, a highly acclaimed cybersecurity company. With over 14 years of industry experience, Justin is an expert in the field of offensive security, especially in the domain of red teaming and penetration testing. His extensive knowledge extends over several facets of cybersecurity, from system engineering to research. At TrustedSec, he also oversees the red team and research team, showcasing a driven career that advanced from hands-on technical roles to strategic leadership.

Episode Summary:

In this insightful episode of the cybersecurity-focused podcast, we have the pleasure of welcoming Justin Elze, the Chief Technology Officer of TrustedSec. The conversation dives deep into the world of offensive security, balancing technical expertise with leadership, and the evolution of penetration testing and red teaming in the dynamic cybersecurity landscape.

The episode kicks off with host Phillip Wylie introducing Justin Elze and acknowledging his substantial experience in cybersecurity and defensive security. As they delve into the discussion, Justin shares his origin story, detailing his journey from IRC beginnings and computer repair to ascending the ranks in the cybersecurity realm. The conversation steers towards various career tips for aspiring cybersecurity professionals, touching upon certifications, the art of interviewing, and the importance of having a diverse skill set. Also discussed are current trends and future directions in offensive security, such as assume breach assessments, red team specialization, and purple team operations.

Key Takeaways:

Experience in IT prior to entering offensive security is invaluable for understanding business processes and applying cybersecurity measures effectively.

For those looking to break into cybersecurity, certifications such as OSCP and specialized courses can offer a significant edge.

Purple team operations are pivotal for organizations to develop robust defenses and improve upon the insights gained from offensive security assessments.

Cultural shifts, such as the move towards more assume breach assessments, indicate the evolving strategies in red teaming and cybersecurity testing.

Although specializations can be advantageous, they should be balanced with broader skills to remain adaptable in the swiftly changing cybersecurity landscape.

Notable Quotes:

"Once you get to a certain point of doing this, you really just need to focus on, hey, I found a really good class on AWS, found a really good class on enumeration."

"You kind of need to look at where you are today, where things you think will be in five years."

"The report is really what you're going to digest… Making sure that they [cybersecurity firms] are there to kind of support you after you have the report to digest it at different levels that you need."

Resources:

https://twitter.com/HackingLZ

https://www.linkedin.com/in/justinelze/

TrustedSec website: trustedsec.com

Cathy Ullman: The Power of Active Defense Feb 27, 2024

Show notes

About the Guest:

Cathy Ullman, known in the cybersecurity community as Investigator Chick, boasts an impressive 24-year tenure at the University of Buffalo where her expertise spans across digital forensics and incident response. She has not only made a mark with her significant work in tech support but also holds a leadership position in organizing significant conference events such as summer camp. A celebrated author, Ullman recently published a thought-provoking book that delves into the intersection of offensive and defensive cybersecurity strategies.

Episode Summary:

In this episode of the Phillip Wylie show, listeners are treated to an intimate conversation with cybersecurity expert Cathy Ullman. The talk traverses Ullman's storied path which veers from a unique childhood surrounded by pioneering computing to her two-decade-plus stint in university cyber security. Along the way, Ullman offers a peek into the heart of her recent book, which urges a mindset shift in cybersecurity defense by taking cues from offensive tactics.

Ullman reflects on her early days in tech support, leading to her current specialization in digital forensics and incident response at the University of Buffalo. She discusses the value and rigorous nature of certifications such as the IAsis and the doors they've opened within her field. The conversation turns to Ullman's enlightening journey into the offensive side of cybersecurity, captured in her new book "The Active Defender." Ullman makes a compelling case for why understanding offensive strategies can fortify defense mechanisms within the cybersecurity realm.

Key Takeaways:

Cathy Ullman's Emergence: From a childhood surrounded by computing, Cathy's journey is emblematic of the organic evolution into the cybersecurity niche.

Higher Education in Cybersecurity: Ullman underscores the benefits and stability offered by her long-standing role at the University of Buffalo and the profound learning and growth it has facilitated.

Digital Forensics Certification: Cathy shares insights into the invaluable expertise and depth gained from the digital forensics and incident response training with IAsis.

Cybersecurity Community Engagement: The significance of attending and participating in events like B sides for professional development and networking is emphasized.

Understanding Offensive Security: Ullman explores the perspective that comprehending offensive techniques enhances defensive strategies, a central theme in her latest book.

Notable Quotes:

"And I took SANS classes on forensics before I had the IACIS background, and it did not go well."

"Understanding how offensive security folks think, because if you understand what they do and how they think, then you can be better as a defender in terms of your own defenses."

"I've been there 24 years, and I've had the opportunity to kind of grow into different spaces within that without having to jump ship."

"It was a matrix moment, you know, the blue pill, red pill thing, where I suddenly realized, hey, there's this whole other world that I was missing out on."

"Everybody wants to share all the cool things with you. The excitement is palpable when you go to these conferences."

Resources:

Cathys Twitter: @investigatorchic

Cathy's LinkedIn: https://www.linkedin.com/in/catherine-ullman-26a9406/

Cathy's book: The Active Defender: Immersion in the Offensive Security Mindset https://www.wiley.com/en-us/The+Active+Defender%3A+Immersion+in+the+Offensive+Security+Mindset-p-9781119895213

Andy Liverman Anderson: Scaling Cybersecurity Functions with AI Feb 20, 2024

Show notes

About the Guest:

Andy Liverman Anderson is a seasoned professional with a diverse background spanning real estate, Wall Street, and cybersecurity. With nearly a decade dedicated to the field of cybersecurity, Andy brings a wealth of experience and knowledge to the industry. As a history major, he leverages his unique perspective to analyze the intricacies of cybersecurity's geopolitical landscape. Notably, Andy has been pivotal in the development of moving target defense strategies and has pioneered the use of machine learning to estimate cyber risk in the insurance domain. Currently, he serves as a VP of Sales at Uno AI, a company at the forefront of incorporating AI into cybersecurity efforts.

Episode Summary:

This episode of The Phillip Wylie Show delves into the rapidly evolving landscape of cybersecurity, focusing on the integration of automation and AI technologies. Host Phillip Wylie is joined by Andy Liverman Anderson from Uno AI to explore the ways these advancements are transforming the industry. Fascinated by the seismic shift caused by AI tools like Chat GPT, they discuss the implications for cybersecurity professionals, who like superheroes, each have their own origin story.

The conversation begins by highlighting the role of automation in cybersecurity, referencing Jeff Foley's mass reconnaissance script, and moves on to unpack Andy's journey from real estate and Wall Street into the complex world of cybersecurity. The second summary paragraph touches on the significant role AI plays in vulnerability management, acting as a force multiplier for security practitioners, and the potential for Uno AI's copilots to scale and enhance the capabilities of cybersecurity teams. As the episode unfolds, it becomes clear that the integration of AI into cybersecurity is not just a possibility, it's a reality unfolding before us.

Key Takeaways:

Automation and AI are revolutionizing cybersecurity, taking over repetitive and tedious tasks to free up professionals for more complex work.

Andy Liverman Anderson's history in both traditional tech and cybersecurity provides a unique perspective on the use of AI in cybersecurity.

Cyber insurance and understanding post-attack scenarios are critical components in managing cyber risk effectively.

Uno AI's cyber AI copilot assists security professionals by streamlining the process of vulnerability management and producing actionable insights.

As AI democratizes technology, it may lower barriers to entry in cybersecurity and generate better, more creative jobs.

Notable Quotes:

"It's the land of broken toys. You get to look at all these different things."

"Every organization should have cyber insurance. I'm not selling insurance anymore, but I think you're crazy as an organization, even a very small business, it's surprisingly inexpensive."

"What AI is going to do because the very narrow skills that you had are no longer so scarce."

"A bot never gets tired, is always happy to answer them, and as long as they're providing accurate answers."

"When you've seen sort of a democratization of core technologies, that's just the explosive impact it's had across the world."

Resources:

https://www.linkedin.com/in/andyandersoncyber/

https://www.linkedin.com/company/unoai/

https://uno.ai/

Be Fearless Online: In Browser Malicious File Detection Part 2 Feb 13, 2024

Show notes

About the Guest:

Dakshitaa Babu is a Software Engineer at SquareX, where she is engaged in data engineering and analytics.

She is also the pen behind the engineering blogs written on SquareX's infrastructure and security research. After completing her Bachelor's degree at the National University of Singapore, Dakshitaa joined SquareX, marking her foray into the cybersecurity industry. While new to the field, her enthusiasm for discovering and understanding new concepts has quickly established her as a committed contributor to the evolving sector. Her interests are in Browser Security and consumer education.

Episode Summary:

In this captivating episode of The Phillip Wylie Show, cybersecurity enthusiasts witnessed a deep dive into the cutting-edge realm of in-browser malicious file detection with Dakshitaa Babu. Dakshitaa, showcasing her prowess in the industry, illustrates sophisticated features of her company's flagship cybersecurity product designed to enhance online safety.

Dakshitaa demonstrates the product's ability to detect malicious macros within files, emphasizing the significance of privacy in their detection methods which occur directly within the browser environment. Focusing primarily on Gmail due to its widespread use, she articulates how the product can reveal hidden dangers within office documents and macros. The episode highlights not only the detection of conventional threats but also uncovers tactics like file renaming, VBA purging, and old file format analysis to pinpoint potentially harmful activity.

The conversation shifts towards the efficiency and privacy advantages of in-browser detection. Dakshitaa explains how this approach offers immediate and private threat recognition compared to traditional methods. She confidently positions her company's product as a vital layer of defense, complementing existing antivirus solutions and empowering users with immediate insights into file safety before downloads occur.

Key Takeaways:

In-browser malicious file detection technology offers advanced privacy and fast analysis by scanning files directly within the email client.

Dakshitaa demoed the tech's proficiency in detecting renamed files, large file components, and outdated file formats—all indicative of potential malware.

The product integrates seamlessly with Gmail, providing users with immediate warnings and detailed insights into file contents without downloads.

Unique detection methods allow for identifying suspicious activities such as VBA purging, which can bypass some antivirus solutions.

The browser extension is free and compatible with all chromium-based browsers, encouraging user adoption for an added layer of cybersecurity.

Notable Quotes:

"We are going deeper than what surface level checks do in Gmail, for instance." -Dakshitaa Babu

"We have no idea why you're still using it in 2024." -Dakshitaa Babu

"We are trying to create a product that has never been there before that is truly important for every user." -Dakshitaa Babu

"We can't always take our own sweet time to scan through every single file thoroughly before letting the user use it." -Dakshitaa Babu

"We want to make sure that before you give the file a chance to even penetrate to your local device or to your network… we want to be there first and give you a first line of defense." -Dakshitaa Babu

Resources:

Get your free Chrome plugin: ⁠⁠⁠http://sqrx.io/pw_x⁠⁠⁠

⁠⁠⁠https://www.linkedin.com/company/getsquarex/⁠⁠⁠

⁠⁠⁠https://twitter.com/getsquarex⁠⁠⁠

⁠⁠⁠https://www.instagram.com/getsquarex/

Michael Jenks: Lessons from a Former DoD Professional Feb 13, 2024

Show notes

About the Guest:

Michael Jenks, commonly referred to as "Jenks," is an esteemed figure with an extensive background in the Department of Defense (DoD). With a penchant for cybersecurity and a wealth of experience in cyber warfare, Jenks offers a valuable skill set that has been honed in high-stakes environments where precision and accuracy are paramount. Having started his journey in computer science, he quickly developed a fascination with digital code and its impact. Transitioning from dial-up ISPs to L-3 Communications, where he gained clearance for classified work, Jenks eventually founded his own defense contracting company specializing in offensive and defensive cyber operations.

Episode Summary:

In this riveting episode of the Phillip Wylie Show, host Phillip examines the intersection of cybersecurity and defense backgrounds through his conversation with Michael Jenks from Interpris. The dynamic dialogue delves into how professionals from critical sectors, such as the Department of Defense, bring innovative solutions and meaningful perspectives to the cybersecurity industry.

Jenks shares his 'origin story,' which follows a trajectory starting from gaming and IRC administration, leading to a computer science degree and an impressive tenure at various defense-related roles. His story highlights a critical insight: that the best cybersecurity defenses are often forged in the crucible of real-world operations where the cost of failure is immense.

Central to the conversation, Jenks unravels the methodology behind Interpris—a platform designed to contextualize and elevate existing cybersecurity tools through continuous threat exposure management. Leveraging a thorough understanding of threat profiles, Interpris aims to help organizations prioritize potential risks based on industry, operations, and data sensitivity. The platform's philosophy is clear—fortify defenses by optimizing tools that organizations already possess, using informed strategies and continuous monitoring to proactively counter advanced cyber threats.

Key Takeaways:

Cyber professionals with DoD experience bring invaluable expertise to cybersecurity solutions.

Interpris focuses on improving an organization's security posture by providing context and strengthening existing tools.

Assume breach approach and implementing best practices are essential for a robust security posture.

Insider threats are as significant as external threat actors, making holistic security measures necessary.

The emergence of AI in both offensive and defensive cybersecurity tools is rapidly changing the landscape.

Notable Quotes:

"I mean, man, if you have it, background, a clearance, man, there are just a ton of jobs." -Michael Jenks

"From just the digital realm. Gamer growing up. Cut my teeth on hacking back in the day." -Michael Jenks

"You already have enough tools, right. It's really just that optimized configuration, that prioritization, that customization." -Michael Jenks

"It's my job to defend this environment. I have no idea where we're protected, where we're not." -Michael Jenks

"What we're doing is weaving together all of these products, from EDR, from network sensing, to firewall, to your ESM." Michael Jenks

Resources:

https://www.linkedin.com/in/michaeljenks/

https://www.linkedin.com/company/interpres-security/

https://twitter.com/InterpresSec

https://interpressecurity.com/

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected