In this conversation, Mike Lisi shares his journey into the cybersecurity field, detailing his early interest in computers, the challenges he faced while obtaining his OSCP certification, and his transition into consulting. He discusses the importance of understanding client needs incybersecurity assessments and his leadership role in the Red Team Village. Mike also elaborates on the NCAE Cyber Games and the design of Capture The Flag (CTF) challenges, providing insights into effective content development for cybersecurity education. The conversation concludes with Mike sharing unique experiences from cybersecurity events and his thoughts on future engagements.

TIMESTAMPS:

00:00 - Introduction to Cybersecurity Journey

03:23 - The Path to OSCP Certification

06:13 - Transitioning to Consulting in Cybersecurity

09:14 - Understanding Client Needs in Cybersecurity

11:56 - Leadership in Red Team Village

14:32 - NCAE Cyber Games and CTF Design

17:26 - Creating Effective CTF Challenges

20:04 Resources for Aspiring CTF Participants

22:57 Content Development for Cybersecurity Education

25:49 Unique Experiences in Cybersecurity Events

28:25 Closing Thoughts and Future Engagements

SYMLINKS:

[Maltek Solutions Website] - https://malteksolutions.com/
A cybersecurity consulting firm specializing in offensive security services, penetration testing, and risk assessments, founded by Mike Lisi.

[Mike Lisi LinkedIn] - https://www.linkedin.com/in/mikelisi/
Mike Lisi's official LinkedIn profile, where he shares insights on cybersecurity, offensive security consulting, and industry trends.

[Red Team Village (RTV) Website] - https://redteamvillage.io
A nonprofit organization dedicated to providing educational experiences in offensive security. RTV organizes workshops, talks, and training opportunities, primarily at DEF CON and other cybersecurity conferences.

[Red Team Village Discord] - https://discord.com/invite/redteamvillage
The official Red Team Village Discord server where members can connect, discuss offensive security topics, and stay updated on upcoming events and volunteer opportunities.

[Red Team Village X (Twitter)]- https://twitter.com/redteamvillage_
RTV's official social media account for announcements, event updates, and cybersecurity-related discussions.

[MetaCTF Website] - https://metactf.com
A platform offering cybersecurity competitions and Capture The Flag (CTF) events designed to help participants develop their cybersecurity skills through hands-on challenges.

[CTF Time Website] - https://ctftime.org
A website that tracks cybersecurity Capture The Flag (CTF) competitions worldwide, providing schedules, rankings, and resources for both beginners and experienced competitors.

[Hack The Box Website] - https://www.hackthebox.com
A cybersecurity training platform offering hands-on, gamified hacking labs and challenges to develop penetration testing skills.

[TryHackMe Website] - https://tryhackme.com
An interactive cybersecurity learning platform that provides guided tutorials and virtual labs for security professionals and beginners.

CONNECT WITH US ⁠
www.barcodesecurity.com⁠
Become a Sponsor
Follow us on LinkedIn
Tweet us at @BarCodeSecurity
Email us at info@barcodesecurity.com

Cybersecurity is a battle fought in the shadows, where threats emerge unseen, and defenses must anticipate the unpredictable. From threat modeling to AI-driven security shifts, this episode explores the evolving tactics of attackers and defenders, the future of automation in cyber risk, and the challenges of building resilient security architectures in an ever-changing landscape.

Derek Fisher is a cybersecurity and engineering expert with nearly 30 years of experience across financial, healthcare, military, and commercial sectors. Beyond his extensive career, Derek has made a lasting impact through his authorship, teaching, and contributions to the security community. We discuss the art and science of threat modeling, the future of AI in security, and what it really takes to break into the industry today.

In this conversation, Derek discusses his 30 years of experience and the impact of AI and cloud computing on cybersecurity. Derek emphasizes the importance of secure design, the challenges in the job market, and the gap between academic education and real-world skills. He also highlights his efforts to inspire the next generation through children's books and shares insights on future trends like robotics and quantum computing.

TIMESTAMPS:

00:00 Introduction to Cybersecurity and Derek Fisher's Background

10:09 The Impact of AI and Cloud on Cybersecurity

19:19 Understanding Threat Modeling in Cybersecurity

27:47 Navigating the Security Hiring Process

35:48 Navigating the Job Market in Cybersecurity

36:40 Breaking into Cybersecurity: Finding Your Path

44:16 Bridging the Gap: Academia vs. Industry

47:24 Inspiring the Next Generation: Writing for Kids

50:46 The Challenges of Parenting in a Digital Age

54:08 Future Trends in Cybersecurity and Technology

56:52 Creating a Cybersecurity-Themed Bar: A Fun Concept

SYMLINKS:

[Derek Fisher's LinkedIn Profile ]- https://www.linkedin.com/in/derek-fisher-sec-archConnect with Derek Fisher on LinkedIn to learn more about his professional background and expertise in cybersecurity.

[Securely Built Website] - https://www.securelybuilt.com/Explore Securely Built, founded by Derek Fisher, offering tailored cybersecurity advisory services, training programs, and resources to help businesses develop robust cybersecurity programs.

[Secure Work Coach] - https://www.secureworkcoach.com/aboutAccess specialized cybersecurity courses and training materials provided by Secure Work Coach, founded by Derek Fisher, a seasoned cybersecurity expert with 30 years of engineering

[Derek Fisher's Udemy Instructor Profile] - https://www.udemy.com/user/derek-fisher-8/Enroll in cybersecurity courses taught by Derek Fisher on Udemy, covering topics such as application security and CISSP exam preparation.

[Ultimate Cybersecurity Course & CISSP Exam Prep] - https://www.udemy.com/course/ultimate-cyber-security-course/Develop your cybersecurity skills and prepare for the CISSP exam with this comprehensive course by Derek Fisher.

[The Application Security Program Handbook] - https://www.securelybuilt.com/mediaLearn about building an application security program through this comprehensive guide authored by Derek Fisher.

[Alicia Connected Series ] - https://www.aliciaconnected.com/Discover the "Alicia Connected" children's book series by Derek Fisher, focusing on safe technology usage for kids.

[Securely Built YouTube Channel] - https://www.youtube.com/@securelybuiltWatch cybersecurity tutorials and discussions on the Securely Built YouTube channel.

[Derek Fisher's Articles on SecureWorld News] - https://www.secureworld.io/industry-news/author/derek-fisherRead articles authored by Derek Fisher on SecureWorld News, covering various cybersecurity topics.

In this conversation, Perry Carpenter discusses the evolution of misinformation and disinformation in the age of AI and deepfakes. He explores the psychological principles that make individuals susceptible to deception, the ongoing arms race between detection and deception, and theregulatory landscape surrounding these issues. Carpenter emphasizes the importance of understanding narratives and cognitive biases in combating misinformation while also highlighting the challenges posed by rapidlyadvancing technology. In this conversation, Perry Carpenter discusses the implications of deepfakes and AI in cybersecurity, emphasizing the concept ofthe liar's dividend, the need for cognitive awareness training, and the ongoing arms race between AI-generated deception and truth verification. He highlights the erosion of trust in media and the necessity of understanding themotivations behind AI-generated content. Carpenter also shares insights on the future of deepfakes, ethical challenges, and the importance of focusing on the'why' behind AI technologies.

TIMESTAMPS:

00:00 Introduction to Perry Carpenter and His Work

02:37 The Evolution of Misinformation and Disinformation

06:42 The Arms Race: Detection vs. Deception

12:00 The Impact of Deepfakes on Society

17:41 Psychological Principles Behind Deepfakes

23:16 Regulatory Landscape and Future Implications

34:59 The Liar's Dividend and Its Implications

36:09 Defending Against AI-Powered Threats

40:06 The Arms Race of AI and Cybersecurity

46:17 Erosion of Trust in Media

52:38 The Future of Deepfakes and Society

57:38 Understanding the Why Behind AI and Deception

SYMLINKS:

[LinkedIn – Perry Carpenter Profile] - https://www.linkedin.com/in/perrycarpenter/
Perry Carpenter’s professional LinkedIn profile details his background in cybersecurity, his work on AI-generated deception, and his industry engagements. It serves as a hub for networking and accessing more informationon his projects.

[X (formerly Twitter) – Perry Carpenter Profile] - https://x.com/perrycarpenter?lang=en

Perry Carpenter’s profile on X is where he shares real-time insights, commentary on cybersecurity trends, and updates related to his work in AI and digital deception.

[Perry Carpenter’s Book “FAIK”] - https://www.thisbookisfaik.com/

This global retailer offers Perry Carpenter’s book, Fake:A Practical Guide to Living in a World of Deepfakes, Disinformation, and AI-Generated Deception, which explores modern digital deception andcybersecurity.

[YouTube – The Fake Files Channel] - https://www.youtube.com/@theFAIKfiles
YouTube hosts Perry Carpenter’s channel, “The Fake Files,” where he shares AI tutorials, deepfake detection tips, and cybersecurity insights related to synthetic media.