Phillip Wylie Show

Latest Episodes:

Cloud-Centric Permission Management: A Conversation with Ron Nissim Jul 27, 2023

Show notes

About The Guest:

Ron Nissim is the CEO of Entitle, a company that focuses on permission management and access control. He has a background in cybersecurity and intelligence, having served in the Israel Defense Forces in a cybersecurity role. Ron and his co-founder, Avi, started Entitle to address the need for better permission management in cloud environments.

Summary:

Ron Nissim, CEO of Entitle, joins Phillip Wylie on The Phillip Wylie Show to discuss the importance of permission management and access control in cybersecurity. Ron shares his background in cybersecurity and intelligence and how he and his co-founder started Entitle to address the gaps in permission management in cloud environments. They discuss the challenges of manual permission management, the need for automation, and the evolving landscape of authentication and access control. Ron also emphasizes the importance of networking and collaboration in the industry.

Key Takeaways:

1. Permission management is a critical aspect of cybersecurity, and the challenges in this area are vast and complex.

2. The traditional approach to permission management is often manual and time-consuming, leading to delays and inefficiencies.

3. Cloud-centric solutions like Entitle offer quick implementation and value, making permission management more accessible and cost-effective.

4. The industry is experiencing a shift in the access management landscape, with a focus on automation and simplification.

5. Collaboration and networking with industry leaders are essential for learning and staying on the cutting edge of permission management.

Quotes:

- "Everyone was starting companies around all this next-gen AI stuff, and the most basic stuff of an admin having too much access is still uncovered." - Ron Nissim

- "The more people have access to more resources, the bigger the risk." - Ron Nissim

- "The tolerance for manual work has gone down significantly. People are always looking to automate themselves out of the manual work." - Ron Nissim

- "The thirst or hunger for companies to be more efficient, especially in these days, to be more efficient, to utilize their manpower in the right way, puts their chips on the right areas, again, just emphasizes the importance of automation." - Ron Nissim

- "The fact that I still have to remember passwords is so 1997." - Ron Nissim

Ron and Entitle resources:

https://www.linkedin.com/in/ron-nissim/

https://www.linkedin.com/company/entitle/

https://twitter.com/EntitleIO

A Conversation with Chloé Messdaghi Jul 25, 2023

Show notes

About The Guest:
Chloé Messdaghi is a prominent figure in the cybersecurity industry, known for her work in promoting inclusiveness and diversity. She has been a speaker at various conferences and is the host of the podcast "The Change Making Podcast" and "Secure Your Strategy." Chloé is passionate about raising awareness about hacker rights and supporting security researchers and bug bounty hunters.

Summary:
Chloé Messdaghi joins Phillip Wylie in this episode to discuss the importance of inclusiveness and diversity in the cybersecurity industry. Chloé shares her experiences as a woman in the industry and how it initially made her want to leave, but also motivated her to stay and make a difference. They discuss the need for leaders in the industry to be more inclusive and the impact of gender bias in language. Chloé also talks about the importance of addressing burnout and mental health in the industry, especially in the context of the pandemic. She shares tips for avoiding burnout and emphasizes the need for self-care and seeking therapy when needed. The conversation also touches on the topic of climate change and its potential impact on the cybersecurity industry.

Key Takeaways:

Inclusiveness and diversity are crucial for the cybersecurity industry to thrive and make a positive impact.
Gender bias in language can perpetuate stereotypes and exclude certain groups from leadership roles.
Burnout and mental health issues are prevalent in the industry, and it is important to seek therapy and practice self-care.
The cybersecurity industry needs to address the impact of climate change and prepare for potential security threats arising from it.

Quotes:

"If you really want change to occur in an industry, you have to get the people at the top to get on board." - Chloé Messdaghi
"Seeing a therapist is not taboo. It is trendy. So go see a therapist." - Chloé Messdaghi

Chloé's socials and resources:

https://twitter.com/ChloeMessdaghi

https://www.linkedin.com/in/chloemessdaghi/

https://www.securebychloe.com/

https://www.youtube.com/@ChloeMessdaghi

The Evolution of Pen Testing: A Conversation with Tim Medin Jul 20, 2023

Show notes

About The Guest:
Tim Medin is the CEO and founder of Red Siege, a pen testing firm that specializes in offensive security. With over 15 years of experience in the field, Tim is also a lead author of the enterprise penetration testing course for the SANS Institute. He is known for his expertise in kerberoasting and has a background in electrical engineering.

Summary:
Tim Medin, CEO and founder of Red Siege, joins the podcast to discuss his background in pen testing and the evolution of the industry. He shares his experience with the Dallas Hackers Association and talks about his infamous talk on IoT hacking using a Bluetooth-enabled doll. Tim emphasizes the importance of pursuing what interests you in the field of cybersecurity and offers advice for aspiring offensive security professionals. He also addresses the question of whether AI will replace pen testers and highlights the value of manual testing in identifying complex security issues. The episode concludes with a discussion on Red Siege's recent acquisition of 40 North and the expansion of their services and training offerings.

Key Takeaways:

Tim Medin emphasizes the importance of pursuing what interests you in the field of cybersecurity.
Offensive security professionals should focus on specific areas of interest and seek out resources and communities to learn and grow.
AI is not yet capable of replacing pen testers, as manual testing is still necessary to identify complex security issues.
Red Siege's acquisition of 40 North expands their services and training offerings, providing additional expertise and resources to their clients.

Quotes:

"Pick the thing that's interesting to you. Pick the technology that you've got some experience with at work, with test systems, whatever it might be, and dig into that." - Tim Medin
"The more specific the question, the better answer you're going to get and the more likely you are to get an answer." - Tim Medin
"AI is great at processing large quantities of data, and if you can get that across many different organizations, we can really start to build some of these better profiles." - Tim Medin

Tim and Red Siege social media and website:

https://www.linkedin.com/in/timmedin/

https://twitter.com/TimMedin

https://redsiege.com/

https://www.linkedin.com/company/redsiege/

https://twitter.com/RedSiege

The Future of Cybersecurity: A Conversation with Julien Richard Jul 18, 2023

Show notes

About The Guest:
Julien Richard is a cybersecurity professional with a background in system administration and network administration. He is the founder of a cybersecurity collective and has extensive experience in penetration testing. Julien is passionate about sharing his knowledge and helping others succeed in the industry.

Summary:
Julien Richard joins Phillip Wylie on the podcast to discuss their journeys into the cybersecurity industry. They emphasize the importance of diversity in the field and the value of sharing different paths to success. They also discuss the role of certifications and the need for continuous learning in the ever-evolving cybersecurity landscape. Julien shares his thoughts on the future of offensive security and the potential impact of AI tools like ChatGPT.

Key Takeaways:

Diversity of stories and paths to success is important in the cybersecurity industry.
Continuous learning and curiosity are essential for success in offensive security.
AI tools like ChatGPT can be valuable for writing and research, but caution is needed to ensure accurate data sources.
Understanding the fundamentals of networking, systems, and Linux is crucial for offensive security professionals.

Quotes:

"Everybody has a different way of getting into the industry." - Julien Richard
"Don't just run something without understanding what's going on." - Julien Richard
"The more you're exposed to it, the better you'll become." - Julien Richard
"Continuous learning and curiosity are the most important qualities in this field." - Julien Richard

Julien's social media:

https://www.linkedin.com/in/julien-richard

https://bsky.app/profile/julien.bcksec.com

Discovering the Power of Mindfulness and Self-Awareness with Shawn Alexander Jul 17, 2023

Show notes

About The Guest:

Shawn Alexander is a personal trainer and meditation practitioner with over 20 years of experience. He has a background in competitive bodybuilding and powerlifting and has studied meditation and mindfulness extensively.

Summary:
Shawn Alexander shares his personal journey of self-discovery and mindfulness through meditation. He discusses how his upbringing and experiences led him to seek validation through physical accomplishments, such as bodybuilding. However, he eventually faced the consequences of his extreme training and steroid use, which led to a life-threatening illness. This experience sparked his curiosity about the nature of consciousness and the mind. Shawn explains that there is a deeper awareness underneath our thoughts and emotions, which he refers to as pure awareness or consciousness. He emphasizes the importance of quieting the mind through meditation to tap into this awareness and experience inner peace and clarity. Shawn also discusses the interconnectedness of all beings and the power of manifestation through consciousness.

Key Takeaways:

Our thoughts and emotions are not who we truly are. There is a deeper awareness or consciousness underneath them.
Meditation and mindfulness can help quiet the mind and connect with the stillness and peace within.
We are all connected through a collective consciousness, and our thoughts and intentions can manifest our reality.

Quotes:

"There has to be something listening to the little voice in our heads. There has to be something that's aware of our emotions, aware of our thoughts, aware of all that." - Shawn Alexander
"In order for everything to exist, there has to be something aware of it. We are all connected through consciousness." - Shawn Alexander
"Be still and know that I am God. Be still doesn't mean sit still, even though that helps. It means quiet your mind. Be silent inside." - Shawn Alexander

How I Rob Banks: A Journey into the World of Ethical Hacking with Freakyclown Jul 13, 2023

Show notes

About The Guest:

FC Barker aka Freakyclown is an ethical hacker and professional cyber criminalist with over three decades of experience.
He is the co-founder of Sygenta, a company that specializes in ethical hacking and penetration testing.
Freakyclown has a background in offensive cyber research and has worked for major defense firms.

Summary:
Freakyclown shares his experience as an ethical hacker and professional cyber criminalist. He discusses the type of pen testing he does, which goes beyond the typical cookie-cutter approach. He emphasizes the importance of manual work and understanding the foundations of hacking. Freakyclown also talks about the evolution of hacking over the years and the changes he has witnessed. He provides advice for those interested in getting into offensive security, including participating in CTFs and bug bounty programs. Freakyclown also talks about his new book, "How I Rob Banks," which shares anecdotes and tips from his career in physical pen testing.

Key Takeaways:

Ethical hacking goes beyond automated tools and requires manual work and understanding of the foundations.
The barrier to entry in offensive security has lowered, but the threat landscape has expanded.
Participating in CTFs and bug bounty programs is a great way to gain skills and experience in offensive security.
Freakyclown's book, "How I Rob Banks," provides entertaining anecdotes and tips from his career in physical pen testing.

Freakyclown resources:

https://twitter.com/_Freakyclown_

https://www.linkedin.com/in/freakyclown/

https://www.cygenta.co.uk/

How I Rob Banks book:

https://www.wiley.com/en-us/How+I+Rob+Banks%3A+And+Other+Such+Places-p-9781119911517

The Evolution of Identity and Access Management with Adam Migus Jul 11, 2023

Show notes

About The Guest:

Adam Mingus is an expert in identity and access management (IAM) and privileged access management (PAM). With a background in network security and defense contracting, Adam has extensive experience in the field and has witnessed the evolution of IAM and PAM over the years. He is passionate about helping organizations strengthen their security posture and navigate the challenges of identity management in the modern digital landscape.

Summary:

Adam Migus, an expert in identity and access management (IAM) and privileged access management (PAM), joins Phillip Wylie on the show to discuss the evolving landscape of cybersecurity. Adam shares his journey in the industry, from working in defense contracting to focusing on IAM and PAM in the private sector. He emphasizes the importance of identity in security and highlights the growing need for strong access controls and authentication methods. Adam also touches on the challenges of securing operational technology (OT) and industrial control systems (ICS) and the increasing role of cyber insurance in driving cybersecurity improvements. He concludes by discussing the future of passwordless authentication and the potential impact of AI and quantum computing on cybersecurity.

Key Takeaways:

IAM and PAM are crucial components of a strong security posture, with identity being at the forefront of cybersecurity challenges.
The convergence of physical and virtual security is driving the need for robust access controls and authentication methods.
The rise of cyber insurance is motivating organizations to invest in stronger cybersecurity measures.
OT and ICS environments present unique challenges for security professionals, but the importance of securing these systems is gaining recognition.
Passwordless authentication is gaining traction, especially in consumer applications, but passwords will likely remain prevalent in enterprise environments.
The use of biometrics and hardware tokens, such as Ubikeys, can enhance security and protect against credential theft.
The increasing use of AI and quantum computing poses new challenges for cybersecurity, requiring ongoing innovation and adaptation.

Adam and Migus resources:

https://www.linkedin.com/in/amigus/

https://twitter.com/amigus

https://www.linkedin.com/company/the-migus-group/

https://twitter.com/migusgroup

https://www.facebook.com/migusgroup/

https://migusgroup.com/

Ankita Dhakar: Revolutionizing Bug Bounty Platforms with AI Integration Jul 07, 2023

Show notes

About The Guest: Ankita Dhakar is the founder and CEO of Capture the Bug, Australia and New Zealand's first Vulnerability Intelligence Platform. She started her own cybersecurity consultancy firm specializing in penetration testing in late 2019. Ankita has worked with clients in New Zealand, Australia, Europe, and India. She is passionate about educating businesses and individuals about cybersecurity and fostering collaboration between ethical hackers and organizations. Summary: Ankita Dhakar, founder and CEO of Capture the Bug, joins Phillip Wylie on The Phillip Wylie Show to discuss her bug bounty platform and the importance of collaboration in cybersecurity. Ankita shares her background in cybersecurity and how she started her own company. She emphasizes the need for businesses to move beyond compliance and traditional security testing methods and highlights the benefits of bug bounty programs. Ankita also discusses the challenges of finding skilled cybersecurity professionals and offers advice for hiring and educating them. She concludes by inviting ethical hackers to join Capture the Bug and contribute to the growing community. Key Takeaways: Collaboration is key in protecting assets and businesses should seek to collaborate with ethical hackers. Compliance does not guarantee real security, and businesses should go beyond traditional security testing methods. Hiring skilled cybersecurity professionals requires a balanced approach, considering both technical expertise and the ability to communicate effectively. Bug bounty programs provide an opportunity for ethical hackers to contribute to cybersecurity and be rewarded for their findings. Capture the Bug aims to grow the female ethical hackers community and welcomes anyone interested in cybersecurity to reach out.

Ankita and Capture The Bug links:

https://www.linkedin.com/in/ankitadhakar/

https://twitter.com/expankita

https://twitter.com/capturethebugs

https://www.linkedin.com/company/capture-the-bug/

https://capturethebug.xyz/

Danny "Rand0h" Akacki discusses his love for streaming and community Jul 06, 2023

Show notes

About The Guest: Danny "Rand0h" Akacki is a cybersecurity professional with over 11 years of experience in the industry. He has worked at companies like Mandiant, GE, and Bank of America, focusing mainly on threat hunting. He is currently a Customer Success Manager at Trimark Security and also heads up their marketing and project management efforts. Danny is also a goon at Defcon and is passionate about streaming and content creation. Summary: Danny "Rand0h" Akacki joins Phillip Wylie on the podcast to discuss his background in cybersecurity, his love for streaming and content creation, and his experiences as a goon at Defcon. They also talk about the importance of community and giving back, as well as Danny's journey towards fitness and health during the pandemic. Key Takeaways: Streaming and content creation can be a great way to share knowledge and connect with others in the cybersecurity community. Defcon is a unique and special event that brings together people from all over the world who share a passion for hacking and cybersecurity. Failing is a natural part of the learning process, and it's important to embrace failure and learn from it. Building healthy habits and routines is key to maintaining fitness and overall well-being. It's important to be gentle with yourself and not be too hard on yourself when working towards personal goals. Danny's social media and website: https://www.linkedin.com/in/dakacki/

https://twitter.com/dakacki

https://www.randoh.net/

Phillip Wylie Show Trailer Jul 05, 2023

Show notes

This trailer for the Phillip Wylie Show shares the topics discussed in episodes of the podcast.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected