WE'RE IN!

This conversation explores how AI is transforming the offensive security landscape, focusing on the rise of AI-driven vulnerabilities, the evolution of pen testing, and the integration of human and AI efforts in cybersecurity. The discussion highlights the importance of adapting to new threats and the role of Synack's Autonomous Red Agent in enhancing vulnerability detection and remediation processes.
Timestamps
04:51
Traditional vs. Modern Pen Testing Approaches
07:55
The Role of Human Analysts in AI-Driven Security
10:57
Introducing Sara Pentest: A New Era in Testing
13:16
Executing a Sara Pentest: A Step-by-Step Guide
20:13
Real-Time Insights from Sara Pentest
23:20
Technical Difficulties and Collaboration
23:25
Exploring Pen Test Engagements
27:00
Successful Pen Test Outcomes and Future Implications

Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

Synack Red Team member Bloodtyper reveals his journey from the DMZ to discovering critical AI prompt injection vulnerabilities. Learn how he creates bug bounty reports that get accepted, as well as other golden nuggets of advice to learn and grow your penetration testing skills.
CHAPTERS:
0:00 Introduction
01:03 Military Origins & The DMZ
01:58 Hacker Origin Story
04:06 Transitioning from Infantry to Tech
07:22 Joining the Synack Red Team (SRT)
08:04 Learning with Hack The Box
09:52 Bug Bounty Reporting Strategy
12:14 Synack Vuln Ops
16:03 Advice for New Pentesters
18:44 AI Prompt Injection Deep Dive
21:35 Retesting & Patch Verification
23:25 How to Improve Patching
26:02 Advice to Learn Cyber Security

Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

Adam Logue, Independent Security Researcher and Synack Red Teamer, discusses his experiences with responsible disclosure and bug bounty programs, and provides a fascinating technical deep dive into a vulnerability he found in Microsoft 365 Copilot during a client-facing engagement.
Timestamps:
00:49 - Adam's background with responsible disclosure and bug bounty programs
04:33 - Description of M365 vulnerability
12:34 - Demo of the vulnerability
17:53 - How to pentest AI
20:45 - Getting started in pentesting
23:07 - Benefits of hacking with Synack

Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

Blake and Cynthia take an in-depth look at the evolving ransomware threat landscape, the interplay between government and private sector in cybersecurity, and the challenges and opportunities presented by new technologies like AI.
Timestamps: 
00:19 - Halcyon’s Ransomware Research Center
07:24 - Actors behind ransomware campaigns
11:22 - Will AI help offense or defense? 
17:29 - Known vulnerabilities
21:10 - Where do you fall on ransomware payments?
28:24 - How to stop bad actors
30:44 - Guest fun fact

Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

Rob and Blake discuss vulnerability and exploit discover in the age of AI and increasingly intelligent cyber threats. 
Rob Lee is the Chief of Research and Head of Faculty at SANS Institute and runs his own consulting business specializing in information security, incident response, threat hunting, and digital forensics. With more than 20 years of experience in digital forensics, vulnerability and exploit discovery, intrusion detection/prevention, and incident response, he is known as “The Godfather of DFIR”. Rob co-authored the book Know Your Enemy, 2nd Edition, and is course co-author of FOR500: Windows Forensic Analysis and FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics.
Rob graduated from the U.S. Air Force Academy and served as a founding member of the 609th Information Warfare Squadron, the first U.S. military operational unit focused on information operations. Later, he was a member of the Air Force Office of Special Investigations (AFOSI) where he led a team conducting computer crime investigations, incident response, and computer forensics.

Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.