Phillip Wylie Show

Latest Episodes:

A Journey From Offensive Security to Leadership with Tom Eston Sep 12, 2023

Show notes

About The Guest:
Tom Eston is the VP of Consulting and Cosmos Delivery at Bishop Fox, an information security consulting firm. He is also the founder and host of the Shared Security Podcast, which has been running for over 14 years. Tom has over 24 years of experience in the technology and cybersecurity industry, with a focus on offensive security and application security.

Summary:
Tom Eston joins The Phillip Wylie Show to discuss his journey in offensive security and his role at Bishop Fox. He shares how he got started in the industry, his experience in consulting and management, and the importance of mentorship. Tom also gives a preview of his upcoming talk at Summer Camp, where he will discuss personalities, empathy, and difficult conversations in leadership.

Key Takeaways:

Tom Eston started his career in technology as a contractor doing desktop support and Help Desk work.
He transitioned into information security when he was hired to start the first information security department at a real estate company.
Tom's interest in offensive security was sparked when he hired a pen tester for the first time and was amazed by their skills.
He transitioned into consulting to gain more experience and exposure to different environments and clients.
Tom believes that leadership is about making people better and that mentorship is an important aspect of the industry.

Quotes:

"I was just so inspired by this guy. And he let me sit next to him. It was like three or four days he was in the office, and I'm just soaking up all this information." - Tom Eston
"Consulting for me was really that door that I think led me to where I'm at today by just exposing me to different environments, different clients, different people." - Tom Eston
"Leadership is about making people better. Essentially, that's my job. My job is to make people better, help them do their jobs better." - Tom Eston

Socials and Resources:

https://www.linkedin.com/in/tomeston/

https://twitter.com/agent0x0

https://sharedsecurity.net/

Powerlifting and PowerShell: A Discussion with Jake Hildreth Sep 07, 2023

Show notes

About The Guest:

Jake is a cybersecurity professional with a background in system administration. He has a deep understanding of Active Directory security and is currently the Active Directory Security Assessment Service Lead at Trimarc. Jake is also the head developer of the open-source tool Locksmith, which focuses on Active Directory Certificate Services misconfigurations.

Summary:

Jake shares his hacker origin story, starting from his early days tinkering with computers and discovering the world of IRC. He talks about his transition from a sysadmin role to focusing on security and his journey to becoming an Active Directory expert. Jake also discusses the importance of automation and scripting in his work and the role of PowerShell in his day-to-day tasks. He emphasizes the value of continuous learning and the parallels he sees between powerlifting and research in terms of setting goals and putting in consistent effort.

Key Takeaways:

Jake's transition from sysadmin to security professional was driven by his passion for tinkering with computers and his desire to secure his organization's systems.
PowerShell is a crucial tool for Active Directory security professionals, allowing for automation and scripting to streamline tasks.
Continuous learning and consistent effort are key to achieving goals, whether in powerlifting or cybersecurity research.

Quotes:

"I was one of those kids, age four, playing on my grandparents' Commodore 64 and typing in Basic from a magazine... anytime I was near a computer, I would play around with it."
"PowerShell is are you familiar with Beto on security, the Twitter account? Okay, so he and I have become buddies, and he has a PowerShell tattoo. I'm not quite to that level, but yeah, PowerShell and I were... I have a red teamer named Spencer that works with me on locksmith. He's part of our core team. We got three guys, Spencer and Sam... we just all love PowerShell."
"Do the work, put in a little bit of work every day, and before you know it, you're going to be to your goal or past your goal... just it wouldn't have felt like it doesn't really feel like anything."
"Powerlifting taught me... you get out there and you do the work... usually if you're out there working, you're going to progressively build up over time and then eventually you're going to look back and see, holy hell, I just put 425 pounds on my back and went down into a squat and came back up."

Links:

Twitter: @dotdotdotHorse
Jake's Infosec Exchange: @horse@infosec.exchange
Trimark: https://www.trimarcsecurity.com/
Locksmith: https://github.com/TrimarcJake/Locksmith

Yuri Diogenes Discusses Building a Career in Cybersecurity Sep 05, 2023

Show notes

About The Guest:
Yuri Diogenes is a cybersecurity expert and author with over 15 years of experience in the industry. Originally from Brazil, Yuri moved to the US in 2003 to work at Microsoft and Dell Computers. He has published 31 books on cybersecurity and currently works as a People Manager at Microsoft, overseeing the development of cloud security products. Yuri is also a professor at Capitol Technology University and holds a Master's degree in Cybersecurity.

Summary:
Yuri Diogenes, a cybersecurity expert and author, joins the podcast to discuss his book "Building a Career in Cybersecurity." He emphasizes the importance of self-assessment and leveraging existing skills when transitioning into the cybersecurity field. Yuri also highlights the need for a strong foundation in operating systems and network communication. He shares insights on the evolving nature of cybersecurity education and the importance of incorporating security fundamentals into school curriculums. Additionally, Yuri emphasizes the significance of soft skills in the industry and the need for effective communication and collaboration. He encourages individuals to pursue their passion within the cybersecurity field and provides guidance on finding the right specialization.

Key Takeaways:

Self-assessment and leveraging existing skills are crucial when transitioning into cybersecurity.
A strong foundation in operating systems and network communication is essential for success in the field.
Incorporating security fundamentals into school curriculums can help build cybersecurity awareness from a young age.
Soft skills, such as effective communication and collaboration, are highly valued in the industry.
Finding a specialization within the cybersecurity field based on personal passion is key to long-term success.

Quotes:

"Unless we start building this level of awareness about information security that becomes second nature, it will continue to be a challenge for many people to be aware of what's going on out there." - Yuri Diogenes
"Soft skills are important. If you don't have the soft skills to manage those things and to interact with people, it becomes very hard." - Yuri Diogenes
"Go to where you feel passionate about. That's a question I receive a lot. Should I be a pen tester? Should I be a cybersecurity analyst? Well, I don't know. It depends on what you want for your life." - Yuri Diogenes

Socials and Resources:

https://twitter.com/yuridiogenes

https://www.linkedin.com/in/yuridiogenes/

https://www.amazon.com/Building-Career-Cybersecurity-Strategy-Succeed/dp/0138214514

The Power of Community: A Conversation with Kevin Johnson Aug 29, 2023

Show notes

About The Guest:

Kevin Johnson is a renowned cybersecurity expert and the founder of Secure Ideas, a consulting and training company. He has been in the industry for over 30 years and has extensive experience in penetration testing and application security. Kevin is also actively involved in the open-source community and is a strong advocate for the OWASP (Open Web Application Security Project) organization.

Summary:

In this episode of The Phillip Wylie Show, host Phillip interviews Kevin Johnson, founder of Secure Ideas and a prominent figure in the cybersecurity industry. They discuss Kevin's journey into pen testing, his involvement with the open-source community, and the importance of OWASP. Kevin also shares his thoughts on the need for increased membership and support for OWASP to ensure its continued success.

Key Takeaways:

Kevin Johnson emphasizes the importance of sharing knowledge and helping others in the cybersecurity community.
He believes that true expertise is demonstrated when one can effectively teach and explain complex concepts to others.
Kevin highlights the need for improved membership and support for OWASP to address the challenges it currently faces.
He encourages individuals to ask questions and seek guidance from experienced professionals in the field.

Quotes:

"I am where I am today because other people showed me stuff or helped me."
"For you to be able to teach it to somebody, that's proof you actually know it."
"The fear of being found to be ignorant makes these people clam up."
"The vast majority of people that say 'go figure it out yourself' don't actually know the things they say they do."
"OWASP has lost two major flagship projects to OpenSSF. We need to fix this or we're going to lose."

Socials and Resources:

https://www.linkedin.com/in/kevinjohnson/

https://twitter.com/secureideas

https://www.secureideas.com/

A Discussion with Active Directory Security Consultant Brandon Colley Aug 22, 2023

Show notes

About The Guest:

Brandon Colley is a cybersecurity professional who specializes in Active Directory security. He has a background in IT operations and has worked in various roles, including help desk support, desktop support, and server administration. Brandon currently works for Trimarc Security, a well-known Active Directory security company.

Summary:

In this episode, Brandon discusses his journey from IT operations to his current role in Active Directory security. He shares how he discovered his passion for security and the steps he took to specialize in Active Directory. Brandon also talks about the importance of understanding the technology behind security and the value of having a background in IT operations. He emphasizes the need for continuous learning and recommends playing with Active Directory in a lab environment to gain hands-on experience. Brandon also highlights the benefits of giving talks and being active in the cybersecurity community.

Key Takeaways:

Understanding the technology behind security is crucial for effective Active Directory security.
Playing with Active Directory in a lab environment is a great way to gain hands-on experience.
Having a background in IT operations provides valuable insights for defending against attacks.
Giving talks and being active in the cybersecurity community can help in learning and sharing knowledge.

Quotes:

"One of the things I like to do outside of mentoring and teaching is share resources, and some of those resources are awesome people like yourself, where people can learn from." - Brandon
"Meet security where you are. See things that are security-related in your current role." - Brandon

"Security is everyone's responsibility. Go out and find it, do it, learn about it, and suggest things." - Brandon

Socials and resources:

https://www.linkedin.com/in/techbrandon/

https://twitter.com/TechBrandon

A Conversation about Hack Red Con with Dan and Ken Aug 18, 2023

Show notes

About The Guest(s):
Dan and Ken are the founders and coordinators of Hack Red Con, and Hack Space Con. They are passionate about bringing hands-on technical training and mentorship to the cybersecurity community. They believe in the power of community and strive to bridge the gap between experienced professionals and those just starting out in the industry.

Summary:
Dan and Ken discuss their upcoming conference, Hack Red Con, and the mission behind it. They emphasize the importance of hands-on training, mentorship, and building connections within the cybersecurity community. They also share stories of how their organization has helped individuals from low-income and at-risk communities find jobs and change their lives. The conference aims to provide a unique and accessible experience for attendees, with a focus on community and education.

Key Takeaways:

Hack Spacecon is a hacker conference that focuses on hands-on training, mentorship, and building connections within the cybersecurity community.
Volunteering at conferences is a great way to build relationships, gain experience, and give back to the community.
CTFs (Capture the Flag) are an important part of cybersecurity training and provide opportunities for competition, camaraderie, and skill development.
The conference aims to bridge the gap between experienced professionals and those just starting out in the industry, with a focus on supporting individuals from low-income and at-risk communities.
The organization offers scholarships, education vouchers, and job placement assistance to help individuals break into the cybersecurity field.

Quotes:

"We wanted to take a more hands-on approach towards what we, as founders, have a lifetime of experience in: hands-on technical training, getting involved, and learning by doing." - Dan
"Volunteering at conferences is an amazing way to build relationships, both on a personal and business level, and to impact people's lives." - Ken
"CTFs are a great way to not only compete and prove yourself, but also to build friendships, connections, and camaraderie within the cybersecurity community." - Dan
"Our goal is to get people into a better economic position by providing training, mentorship, and job opportunities." - Ken
"Teaching others and mentoring them is a high that helps both the mentor and the student learn and grow." - Dan

Socials and Resources:

https://www.hackredcon.com/

https://twitter.com/HackRedCon

https://www.linkedin.com/company/hackredcon/

https://twitter.com/k3nundrum

https://discord.gg/YaNp8SfUfj

The Importance of Quality Pen Testing: A Conversation with Katerina Tasiopoulou Aug 10, 2023

Show notes

About The Guest:
Katerina is the CEO and founder of Exelasis, a cybersecurity organization that focuses on elite pen testing and advanced security testing. She is one of the first female CEOs in the industry, and she is passionate about bringing the elite back into cybersecurity and promoting the importance of pen testing.

Summary:
Katerina discusses the commoditization of pen testing and the need for organizations to prioritize quality over quantity. She explains the difference between pen testing and red team operations, emphasizing that pen testing is coverage-based while red teaming is objective-based. Katerina also shares her thoughts on the role of AI in pen testing and cybersecurity, highlighting the importance of human expertise and the need for ethical guidelines in AI development. She emphasizes the need for organizations to invest in pen testing and validate their cybersecurity measures to ensure the safety of their digital assets.

Key Takeaways:

Pen testing is coverage-based, while red teaming is objective-based.
AI can enhance pen testing, but it cannot replace the human expertise and ethical decision-making required in cybersecurity.
Organizations should prioritize quality over quantity when it comes to pen testing and invest in elite testing to validate their cybersecurity measures.
Pen testing is crucial in identifying vulnerabilities and reducing exposure, but it cannot guarantee 100% security.

Quotes:

"Pen testing really lost the eliteness it could have had. It's become a checklist." - Katerina
"Red teaming is an objective-based exercise. It will tell you if the ultimate objective is achievable or not." - Katerina
"AI cannot possibly go into an organization and have that logical thinking saying, 'I'm not going to touch that because it's a real customer.'" - Katerina
"We want to enhance, not replace. Use AI to enhance, not to replace." - Katerina
"Pen testing is not commodity. It's a lot more elite, it's a lot more strategical." - Katerina

Socials and Resources:

https://www.linkedin.com/in/katerina-tasiopoulou-a71424128/

https://www.linkedin.com/company/exelasis-ltd/

www.exelasis.com

Product Marketing in the Cybersecurity Industry: A Conversation with Liron Mendel Aug 07, 2023

Show notes

About The Guest:

Liron Mendel is a product marketing professional with a background in sales and marketing. She has worked in various tech companies, including CYE and Allot, and specializes in bridging the gap between product and marketing.

Summary:

Liron Mendel, a product marketing professional, joins the podcast to discuss the role of product marketing in the cybersecurity industry. She explains that product marketing serves as a bridge between the product and marketing teams, ensuring that the product's messaging accurately defines its value proposition. Liron emphasizes the importance of understanding customers and the market in order to effectively market a product. She also highlights the role of research in product marketing, including competitive analysis. Liron discusses how CYE's platform, Hyver, helps cybersecurity professionals quantify cyber risk and communicate it to the board in a way that resonates with business leaders. She advises aspiring product marketers to start in marketing roles and develop a passion for a specific product or industry. Liron concludes by encouraging listeners to believe in their ability to achieve their career goals.

Key Takeaways:

Product marketing is the bridge between the product and marketing teams, ensuring accurate messaging.
Understanding customers and the market is crucial for effective product marketing.
Research, including competitive analysis, is an important aspect of product marketing.
CYE's platform, Hyver, helps quantify cyber risk and communicate it to the board in a business-focused manner.
Aspiring product marketers should start in marketing roles and develop a passion for a specific product or industry.

Quotes:

"Product marketing is the bridge between product and marketing." - Liron Mendel
"You have to be really eager to learn and understand your customer base." - Liron Mendel
"CYE's platform, Hyver, simplifies cyber risk quantification for the board." - Liron Mendel
"If you're passionate and willing to work at it, anything is possible." - Liron Mendel

https://www.linkedin.com/in/leeron-walter-mendel-%F0%9F%92%A1-96113648/

https://www.linkedin.com/company/cyesec/mycompany/

The Evolution of Active Directory Security: A Conversation with James Potter Aug 03, 2023

Show notes

About The Guest: James Potter is the CEO and founder of DSE, a professional services firm specializing in Active Directory security. With over 25 years of experience in Active Directory work, James has a deep understanding of the challenges and vulnerabilities associated with this core piece of software. He is passionate about helping organizations secure their boundaries through Active Directory security. Summary: James Potter, CEO and founder of DSE, joins The Phillip Wylie Show to discuss the importance of Active Directory security and the evolving landscape of directory services. James shares his background in Active Directory work and explains how DSE helps organizations secure their Active Directory environments. He highlights the impact of the pandemic on remote work and the challenges faced by companies transitioning to a hybrid or cloud-based environment. James also offers advice for individuals looking to start a career in Active Directory security. Key Takeaways: 1. The pandemic has accelerated the adoption of remote work and highlighted the importance of nimble and flexible organizations. 2. Moving to the cloud can offer cost savings and scalability, but it requires skilled resources to ensure proper management and security. 3. Legacy accounts and configurations in Active Directory can pose significant security vulnerabilities and should be regularly audited and cleaned up. 4. Cloud environments provide resiliency and global availability, but cost considerations are driving organizations to reevaluate their cloud strategies. 5. Starting a career in Active Directory security requires a baseline understanding of networking and certifications such as Network+ and Security+ can provide a solid foundation. Quotes: - "The pandemic allowed us to blossom because we're very nimble. We don't have a lot of overhead office buildings." - James Potter - "Moving to the cloud doesn't automatically fix Active Directory issues. You still need skilled resources to manage and secure it." - James Potter - "Legacy accounts and configurations in Active Directory are low-hanging fruit for threat actors." - James Potter - "The cloud offers maneuverability and speed for startups, but it's important to evaluate cost and long-term scalability." - James Potter - "Imposter syndrome is huge. Don't give up. If you're motivated and pushing yourself, you deserve to be there." - James Potter

Socials and resources:

https://www.linkedin.com/in/jamesthesecurityguy/

https://www.linkedin.com/company/directoryservicesexpedited/

https://twitter.com/DSEteam

https://www.dse.team/

Introducing Amass v4.0 and the OAM: A Conversation with Jeff Foley Aug 01, 2023

Show notes

About The Guest

Jeff Foley is a security researcher and the Vice President of Research for ZeroFOX. He is also the project leader for OWASP Amass, a project focused on external cybersecurity. Jeff has a strong background in computer science and has been involved in the information security industry for many years.

Summary

In this episode, Jeff Foley discusses the evolution of OWASP Amass, a project he leads that focuses on external cybersecurity. He explains how he got started in information security and coding, and how his passion for automation led him to create Amass. Jeff also introduces the Open Asset Model (OAM), a new data model that allows users to represent and analyze the data collected by Amass. He highlights the importance of having visibility on one's attack surface and the need for a unified format to communicate about exposed assets on the internet. Jeff shares his plans for the future of Amass, including expanding the taxonomy and collection capabilities, and involving the community in the development process.

Key Takeaway

OWASP Amass is a project focused on external cybersecurity and provides visibility on exposed assets on the internet.
The Open Asset Model (OAM) is a new data model introduced in Amass version 4.0, which allows users to represent and analyze the collected data in a unified format.
The OAM aims to create a standard and unified way of communicating about attack surfaces and to make it easier for users to understand and analyze the data.
Amass is evolving to include more asset types and relationships, and the team is developing a collection engine to keep up with the expanding taxonomy.
The project welcomes contributions from the community and encourages users to get involved and provide feedback.

Quotes

"You can't be protecting things if you don't know they're there." - Jeff Foley
"The Open Asset Model is about creating a standard and unified way of communicating about exposed assets on the internet." - Jeff Foley

Socials and resources

- Twitter: @jeff_foley

- Amass Twitter: @owaspamass

- GitHub: https://github.com/caffix

- Amass GitHub: https://github.com/owasp-amass

- Mastodon: @caffix@infosec.exchange

- Amass Mastodon: @amass@infosec.exchange

- LinkedIn: https://www.linkedin.com/in/caffix/

- OWASP Amass: https://owasp.org/www-project-amass/

- Amass Discord: https://discord.gg/HNePVyX3cp