Phillip Wylie Show

Latest Episodes:

Olivia Gallucci: Offensive Security, Coding, and Content Creation Nov 14, 2023

Show notes

About The Guest

Olivia Gallucci is a junior at the Rochester Institute of Technology and an expert in offensive security and content creation. She has worked in various offensive roles, including pen testing and red teaming, and has also done freelance work in the field. Olivia is passionate about open source software and has contributed to several projects. She is known for her blog, oliviagallucci.com, where she shares her expertise in offensive security, open source, and glitter.

Summary

Olivia Gallucci, a junior at the Rochester Institute of Technology, shares her journey in offensive security and content creation. She emphasizes the importance of content creation in showcasing expertise and networking. Olivia discusses her experience in open source software and the benefits of contributing to the community. She also highlights her passion for malicious tool development in red teaming and exploit development. Olivia provides valuable advice for those interested in pursuing a similar career path.

Key Takeaways

Content creation is a powerful tool for showcasing expertise, networking, and finding opportunities.
Open source software provides a valuable learning platform and fosters collaboration within the community.
Malicious tool development in red teaming and exploit development requires a deep understanding of code and specific use cases.
Reading other people's code and searching GitHub for popular offensive tools are effective ways to learn and improve coding skills.
Getting a job in security or software development helps gain credibility and make connections in the field.

Quotes

"Content creation has really been great in terms of showing people what I know how to do, but also helping me know how to do what I know how to do." - Olivia Gallucci
"Open source is an amazing place to start because you have YouTube for tutorials, but when you need help, the open source community breaks it down into simple concepts." - Olivia Gallucci
"Malicious tool development is like a puzzle, figuring out where you fit in and how to modify existing code to achieve specific use cases." - Olivia Gallucci
"Reading code and understanding what others have done is crucial in exploit development and identifying vulnerabilities." - Olivia Gallucci
"Getting a job in security or software development helps gain credibility and make connections to pursue a career in exploit development." - Olivia Gallucci

Socials and Resources

https://twitter.com/OliviaGalluccii

https://www.linkedin.com/in/olivia-gallucci/

https://oliviagallucci.com/

Jessica Barker: The importance of cybersecurity culture and awareness Nov 07, 2023

Show notes

About The Guest:
Jessica Barker is a cybersecurity expert and co-founder of Cygenta, a company that focuses on the human, technical, and physical aspects of cybersecurity. With a background in sociology and civic design, Jessica brings a unique perspective to the field of cybersecurity. She is the co-author of "Cybersecurity ABCs" and "Confident Cybersecurity," and is currently working on her upcoming book, "Hacked."

Summary:
In this episode of The Phillip Wylie Show, host Phillip Wylie interviews cybersecurity expert Jessica Barker. They discuss the importance of cybersecurity culture, the role of social engineering in cybersecurity, and the impact of simulated phishing exercises. Jessica emphasizes the need for organizations to create a positive and empowering cybersecurity culture that focuses on self-efficacy and intrinsic motivation. She also highlights the value of culture assessments in understanding an organization's cybersecurity culture and making informed improvements. Throughout the conversation, Jessica shares insights and practical tips for raising cybersecurity awareness and building a strong security culture.

Key Takeaways:

Cybersecurity culture is crucial for organizations to effectively defend against social engineering attacks.
Simulated phishing exercises can be valuable in raising awareness and improving cybersecurity behaviors, but they should be implemented in a supportive and non-punitive manner.
Rewards and recognition can be effective motivators for encouraging positive cybersecurity behaviors.
Culture assessments provide valuable insights into an organization's cybersecurity culture and help identify areas for improvement.
Empathy and understanding are essential in cybersecurity awareness and culture-building efforts.

Quotes:

"The most influential factor when raising awareness is harnessing self-efficacy." - Jessica Barker
"The right fish at the wrong time can catch anyone." - Jessica Barker
"Creating a safe space for employees to express their concerns and ask questions is crucial for building a positive cybersecurity culture." - Jessica Barker

Socials and Resources:

https://twitter.com/drjessicabarker

https://www.linkedin.com/in/jessica-barker/

https://www.cygenta.co.uk/

Lilly Chalupowski's Journey Into Malware Analysis Oct 31, 2023

Show notes

About The Guest:
Lilly Chalupowski, also known as Cerberus, is a malware reverse engineer specializing in criminal malware. She has extensive experience in analyzing various malware families and has developed open-source projects to aid in the detection and extraction of intelligence from malware. Lilly is also a talented musician and often incorporates guitar playing into her live Twitch streams.

Summary:
Lilly Chalupowski shares her inspiring hacker origin story, from starting out in computer science to pursuing a degree in music and facing financial hardships. She discusses the importance of having a healthy relationship with failure and the value of continuous learning and practice. Lilly also provides valuable advice for aspiring malware analysts, emphasizing the significance of creating a portfolio and actively participating in the cybersecurity community.

Key Takeaways:

Don't be afraid of failure; view it as a normal part of the learning process.
Dedicate time each day to practice and improve your skills, even if it's just half an hour.
Establish a portfolio to showcase your work and value to potential employers.
Attend local cybersecurity meetups and network with professionals in the field.
Create a virtual machine and practice analyzing malware samples from open-source resources.

Quotes:

"Be okay with failure and if you enjoy it, keep doing it and you'll improve over time."
"Half an hour to an hour a day, put it on your calendar and make time for what you're passionate about."
"Your value is showcased through your output, not just a resume."
"You have nothing to lose by applying; what's the worst thing they can tell you? No."
"VMs are literally the gateway drug to malware analysis."

Socials and Resources:

https://www.linkedin.com/in/lillypads/

https://twitter.com/c3rb3ru5d3d53c

https://www.twitch.tv/c3rb3ru5d3d53c

https://c3rb3ru5d3d53c.github.io

Shenetworks: Leveraging Content Creation to Build a Career in Cybersecurity Oct 24, 2023

Show notes

About The Guest:Shenetworks is a content creator and cybersecurity professional known for her educational videos on TikTok. She has built a following by sharing technical content and leveraging various social media platforms to educate and engage with the cybersecurity community. Summary:Shenetworks discusses her journey as a content creator and how she has leveraged brand building and content creation to advance her career in cybersecurity. She shares her experience with TikTok and other social media platforms, highlighting the importance of diversifying one's online presence. The conversation also touches on the recent rebranding of Twitter and the potential impact on content creators. Shenetworks offers advice for individuals looking to enter the cybersecurity field, emphasizing the value of networking, self-training, and consistent engagement with the community. Key Takeaways: Leveraging content creation and brand building can help advance a career in cybersecurity. Diversifying one's online presence across multiple platforms is important to mitigate the risk of platform shutdowns. Twitter provides valuable opportunities for networking and sharing information in the cybersecurity community. Consistency and dedication to learning are key to acquiring the skills needed for a career in cybersecurity. Embracing change and adapting to new technologies and roles is crucial in the ever-evolving field of cybersecurity. Quotes: "I started making technical related TikToks back in 2020 during lockdown, and it was literally because everybody was on TikTok and bored." - Shenetworks "The more clear and concise you can convey technical topics, the better, especially when interacting with non-technical individuals." - Shenetworks "Time and consistency are essential in building a successful career in cybersecurity." - Shenetworks Socials and Resources: https://twitter.com/notshenetworks https://www.tiktok.com/@shenetworks https://www.youtube.com/c/shenetworks

InfoSec Pat: Content Creation and Cybersecurity Careers Oct 24, 2023

Show notes

About The Guest:
Patrick Gorman, also known as Infosec Pat, is a content creator in the cybersecurity community. He started making content on YouTube about four years ago and has since built a strong following. Patrick is an offensive security professional and covers a wide range of topics in his videos, including hacking, penetration testing, and network security.

Summary:
In this episode, Phillip Wylie interviews Patrick Gorman, also known as Infosec Pat, about content creation and brand building in the cybersecurity industry. Patrick shares his journey of accidentally starting his YouTube channel and how it has grown over the years. He emphasizes the importance of building a personal brand and networking in the industry. Patrick also provides advice for those looking to get started in offensive security and discusses the role of certifications in landing a job in cybersecurity.

Key Takeaways:

Content creation and brand building are essential for getting jobs in the cybersecurity industry.
Building a personal brand through content creation can help showcase your skills and attract job opportunities.
Networking is crucial in the industry, and attending conferences and local meetups can help you connect with professionals and potential employers.
Certifications can act as a gatekeeper and demonstrate your ability to start and finish something, but networking and a positive attitude are equally important.

Quotes:

"If you have a good attitude, technology can be learned. But if you don't have that attitude, you're screwed." - Patrick Gorman
"Never be one thing about me. I'm super approachable. I'm not better than you, you're not better than me." - Patrick Gorman

Socials and Resources:

https://twitter.com/Infosecpat

https://www.instagram.com/infosecpat/

https://www.linkedin.com/in/infosecpat/

https://www.youtube.com/@InfoSecPat

From NSA to CISO: A Conversation with Ira Winkler Oct 18, 2023

Show notes

About The Guest:
Ira Winkler is a renowned cybersecurity expert with over 30 years of industry experience. He started his career at the National Security Agency (NSA) and has since held various roles in the field of cybersecurity, including chief security strategist at HP and chief security architect at Walmart. He is currently the CISO at CYE, a cybersecurity company. Winkler is also the author of several books, including "You Can Stop Stupid" and "Security Awareness for Dummies."

Summary:
Ira Winkler, a cybersecurity expert with over 30 years of industry experience, joins the podcast to discuss the cybersecurity skills shortage and the importance of practical experience in the field. He emphasizes the need for cross-training individuals with computer backgrounds in cybersecurity rather than relying solely on certifications or degrees. Winkler also highlights the value of soft skills and critical thinking in the cybersecurity field. He shares his perspective on the misconception that anyone can enter the field without experience or credentials and explains the importance of understanding programming and mathematical principles in certain cybersecurity roles.

Key Takeaways:

Practical experience and cross-training individuals with computer backgrounds are more valuable than certifications or degrees in cybersecurity.
Soft skills and critical thinking are essential in the cybersecurity field.
Understanding programming and mathematical principles can enhance cybersecurity skills.
Machine learning may automate certain cybersecurity tasks, but a deeper understanding of the underlying principles is still necessary.

Quotes:

"Our job is to stop stupid. Our job is to patch stupid." - Ira Winkler
"You're competing against people who know how to program, who have college degrees, who set up their home labs." - Ira Winkler
"A job might have no requirements, but you're likely going to be competing against people who do have qualifications." - Ira Winkler

Socials and Resources:

https://www.linkedin.com/in/irawinkler/

https://twitter.com/irawinkler

Importance of Fundamentals and Home Labs with Kevin Apolinario Oct 10, 2023

Show notes

About The Guest:
Kevin Apolinario is a cybersecurity professional with a diverse background in IT support and training. He has over 12 years of experience in the restaurant industry, which has helped him develop strong customer service and soft skills. Kevin is also involved with Riosis, an organization that supports Latin individuals in the cybersecurity field. He is passionate about helping others and sharing his knowledge through his YouTube channel and various training programs.

Summary:
Kevin Apolinario shares his unique career journey, starting from his experience in the restaurant industry to his transition into IT support and cybersecurity. He emphasizes the importance of soft skills and customer service experience in the field. Kevin also discusses the value of creating content and networking to enhance career opportunities. He highlights the significance of building a strong foundation in IT fundamentals and recommends creating a home lab to gain practical experience. Kevin emphasizes the importance of mindset and perseverance in overcoming rejection and securing job opportunities in the IT industry.

Key Takeaways:

Soft skills gained from customer service experience are valuable in IT and cybersecurity roles.
Creating content and networking can enhance career opportunities.
Building a strong foundation in IT fundamentals is crucial for success.
Creating a home lab can provide practical experience and make candidates stand out.
Mindset and perseverance are essential in overcoming rejection and securing job opportunities.

Quotes:

"Soft skills are important in IT. You're going to use soft skills and you can leverage that over to it." - Kevin Apolinario
"Put yourself out there and see what happens. You never know who's watching you." - Kevin Apolinario
"Fundamentals are very important. It's like building a house. You gotta have a strong base." - Kevin Apolinario
"Certifications do not guarantee you a job. It just guarantees you an interview." - Kevin Apolinario
"Embrace rejection. Keep applying for jobs until someone gives you a chance." - Kevin Apolinario

Socials and Resources:

https://www.linkedin.com/in/itprofessionalkevinapolinario/

https://www.youtube.com/c/KevtechITSupport

https://kevtechitsupport.com/

https://twitter.com/KevTechSupport

Web Application Pentesting and the Importance of Specialization with Tib3rius Oct 03, 2023

Show notes

About The Guest:
Tib3rius is a penetration tester with over ten years of experience, specializing in web application security. He is the creator of the popular tool Autorecon, which is widely used for enumeration in the OSCP exam and CTF challenges. Tib3rius also offers courses on Udemy and Hackers Academy, focusing on privilege escalation techniques for Windows and Linux.

Summary:
Tib3rius joins Phillip Wylie on The Phillip Wylie Show to discuss his background in penetration testing and his specialization in web application security. He shares insights into the development of his tool Autorecon, which was initially created for the OSCP exam but gained popularity in the community. Tib3rius also talks about the importance of specialization in offensive security and offers advice for those looking to start a career in penetration testing. He highlights the value of bug bounty hunting as a way to gain practical experience and shares his thoughts on the OWASP Top Ten and the future of web application security tools.

Key Takeaways:

Autorecon, a tool created by Tib3rius, is widely used for enumeration in the OSCP exam and CTF challenges.
Specializing in a specific area of penetration testing, such as web application security, can lead to becoming a subject matter expert and increase value to a company.
Bug bounty hunting can provide practical experience and count as valuable experience in the field of penetration testing.
The OWASP Top Ten has evolved from a list of the top ten vulnerabilities to a list of categories, covering a wide range of web application security issues.
The future of web application security tools, such as Kaido, remains to be seen, but competition in the field can lead to improvements and alternatives to existing tools.

Quotes:

"I think specialize in something and learn that thing well, and you'll be fine." - Tib3rius
"Bug bounty hunting is a great thing to go into because you'll get some experience actually testing real applications." - Tib3rius
"The OWASP Top Ten has become a catch-all category that covers almost every vulnerability." - Tib3rius

Socials and Resources:

https://twitter.com/0xTib3rius

http://youtube.com/Tib3rius

https://tib3rius.com/

https://courses.tib3rius.com/

https://linktr.ee/tib3rius

Jakoby's Journey Sep 26, 2023

Show notes

About The Guest:
Jakoby is a content creator and hacker with over a decade of experience in the field. He started his journey in hacking at a young age and has since become skilled in various areas, including bad USB and PowerShell. Jakoby is known for his ability to make complex concepts easily digestible for newcomers to the field.

Summary:
In this episode, Phillip Wylie interviews Jakoby, a content creator and hacker. They discuss Jakoby's hacker origin story, his experience in the content creation space, and the positive impact of a Discord server for content creators. Jakoby shares his passion for educating and helping others, as well as his journey to overcome imposter syndrome. He also talks about his plans to pursue certifications and work in the security field professionally. The conversation highlights the importance of sharing knowledge and the power of positive communities in the industry.

Key Takeaways:

Joining a positive and supportive community, like the Discord server for content creators, can be incredibly beneficial for learning and growth.
Blind spots in our knowledge can be filled by engaging in conversations and learning from others in the community.
Overcoming imposter syndrome requires recognizing and accepting the value of your own knowledge and skills.
Sharing content that is easily digestible for newcomers can have a significant impact on their learning and understanding.
Leveraging social media platforms, such as YouTube, Twitter, and LinkedIn, can help build a personal brand and create opportunities in the industry.

Quotes:

"Everybody needs to hear that you don't have to believe it, but maybe consider that they're telling the truth." - Jakoby
"You give this presentation, you give this lecture, you do this demonstration, and you think it's kind of lame, but then someone comes up and tells you, 'Man, I learned a lot from that.'" - Phillip Wylie
"If you're constantly getting into Twitter disputes and Twitter fights, that's what the algorithm is going to feed you." - Jakoby
"You could be the best at something in the world, but if people don't know who you are, you're still stuck in the manual process of reaching out to people individually." - Jakoby
"You put a lot of effort into your projects. You don't halfway do anything, which is awesome to see." - Phillip Wylie

Socials and Resources:

https://twitter.com/I_Am_Jakoby

https://www.youtube.com/@IamJakoby

https://discord.gg/iamjakoby

Michael Taggart's Journey in Education and Information Security Sep 19, 2023

Show notes

About The Guest:

Michael Taggart is the founder of the Taggart Institute, an education project that aims to provide affordable and accessible learning resources for individuals interested in information security. With a background in teaching and technology, Michael transitioned from K-12 education to security analysis work and is currently a senior researcher at UCLA Health. He is passionate about sharing knowledge and helping others develop their skills in the field of cybersecurity.

Summary:

In this episode, Phil interviews Michael Taggart, the founder of the Taggart Institute. Michael shares his background in teaching and technology and how he transitioned into the field of information security. He discusses the importance of accessible education and the mission of the Taggart Institute to provide affordable learning resources. Michael also talks about the benefits of content creation and learning in public, as well as the tools and equipment needed to get started. He emphasizes the value of diversity in tools and the importance of responsible red teaming.

Key Takeaways:

Learning in public and creating content can be valuable for both personal growth and sharing knowledge with others.
The Taggart Institute aims to provide affordable and accessible learning resources for individuals interested in information security.
It is important to choose tools and equipment that work best for you and your specific needs.
Building a hacking-specific machine from a base OS can provide more flexibility and customization options.
Responsible red teaming involves ethical considerations and responsible handling of customer data.

Quotes:

"Learning in public is incredibly valuable. Teaching is a fantastic learning mechanism." - Michael Taggart
"Diversity is good in all senses. Monoculture is dangerous." - Michael Taggart

Socials and Resources:

https://infosec.exchange/@mttaggart

https://threads.net/@mttaggart| https://www.linkedin.com/in/mttaggart

The Taggart Institute:

https://taggartinstitute.org

https://discord.gg/taggartinstitute

https://www.linkedin.com/company/the-taggart-institute