Send us Fan Mail

A guest who once wrestled a 750-pound bear joins us to talk about something even harder to pin down: trust. Phillip Wiley walks us through how he moved from system administration into application security and then full-time penetration testing, and why that “boring IT background” ends up being a serious edge when you’re trying to break things responsibly. We get practical about what actually helped him get hired, including self-driven learning, building real projects, and using OSCP-style training to close the gap between theory and hands-on hacking.

Then we go straight into social engineering and phishing. Phillip shares how believable pretexts work best when they sound like normal corporate life, why you should only impersonate roles you truly understand, and how nerves and ethics show up during real engagements. We also talk about the uncomfortable side of the job: even when a test is authorized, some people still struggle with the feeling of deceiving another human being.

Finally, we tackle deepfakes and voice cloning. We discuss why being on podcasts or speaking publicly can increase your risk, attempt a quick live deepfake experiment, and break down the small visual tells that gave it away. From there, we zoom out to AI in penetration testing, what automation can scale today, where human testers still matter most, and why mentoring is the best way to strengthen the next generation and your own legacy. If this conversation helps, subscribe, share it with a friend in security, and leave a review with the biggest risk you think most teams still ignore.

🔗 Connect with Us & Get in Touch

Tune in to Simplifying Cyber wherever you get your podcasts, or watch exclusive video content right here on the channel. Subscribe for hot takes on emerging technologies, tips and tricks for everyone looking to stay secure, and in-depth conversations about complex cybersecurity topics.

No gatekeeping and no BS. We’re here to simplify.

Official Website: www.revealrisk.com

LinkedIn: https://www.linkedin.com/company/reveal-risk

🤘 Stay Secure with Us

If this content helped you understand cybersecurity better, please give it a thumbs up, subscribe to our channel for more expert insights, and hit the notification bell so you don't miss our latest updates.

Reveal Risk delivers cybersecurity results, not just reports.

Send us Fan Mail

A champagne bottle, a blade, and a clean strike turns into one of the clearest cybersecurity conversations we’ve had. We’re joined by attorney and cyber contracting veteran Drew Tharp, with Todd Wilkinson stepping in as guest host, and we use swords and fencing to unpack why breaches happen and why “just add more tools” rarely fixes the root problem.

Drew walks us through the four quadrant fencing model (active vs passive, offense vs defense) and how most security programs camp out in the obvious corners. We connect the overlooked zones to modern cybersecurity strategy: applying steady pressure that limits attacker options, building aggressive defensive moves that anticipate human behavior, and spotting the “seam” where urgency and confusion let a threat actor land one clean strike. If you work in healthcare cybersecurity, we also dig into why ransomware and business email compromise keep hitting so hard and how internal business pressure makes incidents worse.

On the legal and vendor risk side, we get real about cyber insurance requirements, unlimited liability, and how BAAs and data sharing agreements can smuggle in heavy terms that the wrong reviewer might sign. Then we pivot to AI in legal work, including Harvey AI, and explain the key limitation that matters for both lawyers and CISOs: AI can speed up review, but it cannot understand business context, risk appetite, or which deal is worth the exception.

If you liked this one, subscribe for more practical cybersecurity conversations, share it with a teammate who lives in contracts or incident response, and leave us a review with your biggest “how did that term get in there” story.

🔗 Connect with Us & Get in Touch

Tune in to Simplifying Cyber wherever you get your podcasts, or watch exclusive video content right here on the channel. Subscribe for hot takes on emerging technologies, tips and tricks for everyone looking to stay secure, and in-depth conversations about complex cybersecurity topics.

No gatekeeping and no BS. We’re here to simplify.

Official Website: www.revealrisk.com

LinkedIn: https://www.linkedin.com/company/reveal-risk

🤘 Stay Secure with Us

If this content helped you understand cybersecurity better, please give it a thumbs up, subscribe to our channel for more expert insights, and hit the notification bell so you don't miss our latest updates.

Reveal Risk delivers cybersecurity results, not just reports.

Send us Fan Mail

A champagne bottle can teach you more about cybersecurity than you’d expect. We start with sabrage, the old French tradition of opening champagne with a saber, and we get hands-on with the real mechanics: finding the bottle seam, aiming at the pressure-focused weak spot under the lip, and using a controlled slide instead of raw strength. When it works, it’s clean, safe, and oddly satisfying. When it doesn’t, it’s a fast lesson in why technique beats confidence.

From there, we turn the physics into a security mindset. Attackers rarely “cut through the whole bottle” they hunt for the one weak point that breaks everything open. We talk about what that means for cybersecurity leadership, preparedness, and incident response: practice before you’re under pressure, keep your defenses sharp on campaign, and avoid the expensive pattern of procrastinating until an incident forces a rushed buying spree. Readiness is a balance, not a single obsession.

Then we nerd out on the blades themselves, from a Napoleonic-era hanger built for this kind of work to a Scottish basket-hilted broadsword and a stunning 1600s katana. We get into why European swords often chase flexibility while Japanese blades lean on differential hardening for a harder edge, plus the cultural story behind foreign steel and expressive fittings. We wrap by cutting fruit and confronting the final lesson: hesitation changes outcomes, so train your form until decisive action feels normal.

If you enjoyed the mix of history, hands-on technique, and practical cybersecurity takeaways, subscribe, share this with a friend who’d try sabrage, and leave a review with your favorite “weak spot” lesson from the conversation.

🔗 Connect with Us & Get in Touch

Tune in to Simplifying Cyber wherever you get your podcasts, or watch exclusive video content right here on the channel. Subscribe for hot takes on emerging technologies, tips and tricks for everyone looking to stay secure, and in-depth conversations about complex cybersecurity topics.

No gatekeeping and no BS. We’re here to simplify.

Official Website: www.revealrisk.com

LinkedIn: https://www.linkedin.com/company/reveal-risk

🤘 Stay Secure with Us

If this content helped you understand cybersecurity better, please give it a thumbs up, subscribe to our channel for more expert insights, and hit the notification bell so you don't miss our latest updates.

Reveal Risk delivers cybersecurity results, not just reports.