SquareX Be Fearless Podcast: Inside the Attacker Mindset

I have been a guest on SquareX's Be Fearless podcast, in conversation with Field CISO John Carse.

We talked about how attackers think and how their techniques have changed, how enterprises get targeted today, and a few war stories from my assessments. I also spoke about how I got into security, why I founded Adversary Village, and why I think a red team works a lot like a martial arts school. The second half covers red team vs purple team approaches, where browser security falls short, and my advice for people new to the field.

In this episode
1:04 How attacker techniques have evolved
10:16 How attackers target enterprises today
15:19 War stories from security assessments
19:44 My journey and founding Adversary Village
26:14 Conferences, and red teaming as a martial arts school
33:21 Red team vs purple team
40:41 Browser security challenges and attack vectors
48:16 Top recommendations for browser security
58:38 Working together in purple teaming
1:05:06 Advice for new security professionals at DEF CON

Watch the full episode on YouTube, or find it on Apple Podcasts, Spotify and more through the SquareX podcast page. Follow John Carse.

Go back to Talks and Webcast