Penetration Tests: useful, pointless, harmful, required, ineffective? - Phillip Wylie - ESW #398

Security Weekly Podcast Network (Video)

Innhold levert av Security Weekly Productions and Security Weekly. Alt podcastinnhold, inkludert episoder, grafikk og podcastbeskrivelser, lastes opp og leveres direkte av Security Weekly Productions and Security Weekly eller deres podcastplattformpartner. Hvis du tror at noen bruker det opphavsrettsbeskyttede verket ditt uten din tillatelse, kan du følge prosessen skissert her https://no.player.fm/legal.

1M ago 32:12

MP4•Episoder hjem

Fetch error

Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on April 27, 2025 09:17 (2d ago)

What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.

Penetration tests are probably the most common and recognized cybersecurity consulting services. Nearly every business above a certain size has had at least one pentest by an external firm.

Here's the thing, though - the average ransomware attack looks an awful lot like the bog standard pentest we've all been purchasing or delivering for years. Yet thousands of orgs every year fall victim to these attacks. What's going on here? Why are we so bad at stopping the very thing we've been training against for so long?

This Interview with Phillip Wylie will provide some insight into this! Spoiler: a lot of the issues we had 10, even 15 years ago remain today.

Segment resources:

Phillip's talk, Optimal Offensive Security Programs from Dia de los Hackers last fall

Show Notes: https://securityweekly.com/esw-398

4508 episoder

#Tech #Tech News #Hacking #Hackingnews #Security #Securitynews #Security Weekly #News #Video #Security Weekly Productions #SecurityWeek