
Talking Content Creation and Marketing with Zach Hill
06/22/23 • 34 min
Previous Episode

A Conversation with Red Team Expert Manit Sahib
Manit Sahib, Director of Global Intelligence and Offensive Operations at Picnic, spoke on the Phillip Wylie Show about the importance of experience and certifications in red teaming and social engineering. He highlighted the significance of CBEST, a framework jointly created by Crest and the UK Central Bank, for financial regulated firms to undergo assurance testing every three years to simulate an adversary's attack and test their detection and response capabilities. Manit also mentioned TCM Academy, which is gaining traction in the industry. The conversation covered the changing landscape of the industry, with more awareness and accessibility to certifications such as OSCP. Manit explained the difference between pen testing and red teaming, with the latter being a more comprehensive and end-to-end style of testing that assesses an organization's detection and response capabilities. Manit emphasized the importance of testing an organization's security posture multiple times and simulating attacks from advanced persistent threat groups to ensure that the organization is prepared to isolate and contain breaches. He also shared anecdotes about the challenges of working as an internal or external tester and the importance of building relationships with stakeholders and technical staff. Manit emphasized the importance of using visuals to help stakeholders understand the impact of vulnerabilities and the value of red teaming and pen testing reports in improving an organization's security posture. He recommended networking, keeping up to date with research, and practicing on red team labs to gain experience in the field. Manit closed by sharing his YouTube channel, Red Team Raw, where he interviews hackers and like-minded individuals about their experience and journey in the industry. Manit also offered his help and advice to anyone who is struggling in their career and wants to reach out to him on LinkedIn. Manit's social media and YouTube: https://www.linkedin.com/in/manitsahib/ https://twitter.com/redteamraw https://www.youtube.com/c/RedTeamRaw
Next Episode

Hacking Past and Present: A Conversation with Moses Frost
Moses Frost, an offensive security expert, shares his journey into cybersecurity in this episode of the Phillip Wylie Show. Frost's interest in computers started in elementary school when he taught himself how to use an old IBM 8088 and read about DOS. He later discovered bulletin board systems (BBS) and began exploring the world of hacking. Frost's curiosity and passion for computers led him to pursue a career in offensive security, where he helps companies prevent cyber attacks.
Frost discusses his early experiences with BBS, including learning how to manipulate phone lines and bypass security systems. He also shares a story about getting doxxed after logging into an elite bulletin board and angering the admin. After high school, Frost became an auto mechanic but eventually returned to his love of computers and signed up for an A+ class. He started building systems for a company but was treated poorly and decided to better himself by learning how to use Windows NT four on his own laptop.
Later, Frost talks about his early experiences with Linux and how he figured out how to get drivers on his laptop. He eventually got a job at a hospital as a temp worker for PC support, where he developed a process to make desktop imaging faster and migrated 10,000 desktops to the system. Despite being in his teens, Frost was able to lead his senior colleagues and eventually got hired by the hospital.
The conversation also touches on the early days of cybersecurity when people were not aware of the risks and how easy it was for threat actors to exploit vulnerabilities. However, with the industry growing and maturing, the tools have become more sophisticated, and it takes a lot more to be a good pen tester now than it did in the past. Frost explains the complexity of hospital systems and the various technologies used in them. He also talks about the hospital's network, which was on the internet in 92-93 and was given a slash 16. Frost was tasked with upgrading the hospital's firewalls, which were originally Windows NT, to Nokia boxes.
Frost recommends starting small and expanding one's skillset to get into pen testing. He advises against trying to learn everything and instead encourages people to focus on what they enjoy and are good at. He also cautions against trying to become someone important or famous on social media, as it can be a trap that distracts from learning and growth. Frost's story highlights the importance of pursuing one's passions and constantly striving to improve oneself.
Moses' social media:
If you like this episode you’ll love
Episode Comments
Generate a badge
Get a badge for your website that links back to this episode
<a href="https://goodpods.com/podcasts/phillip-wylie-show-259013/talking-content-creation-and-marketing-with-zach-hill-31157540"> <img src="https://storage.googleapis.com/goodpods-images-bucket/badges/generic-badge-1.svg" alt="listen to talking content creation and marketing with zach hill on goodpods" style="width: 225px" /> </a>
Copy