Episode 142: Learning Covert Entry with Brian Harris

In Episode 142 of the Layer 8 Podcast, host dives deep into the world of covert physical penetration testing with Brian Harris, a seasoned expert with over 20 years of experience in both cyber and physical offensive operations. Harris shares insights from his flagship course, the Covert Access Team (CAT) program, which simulates real-world building intrusions through hands-on training in badge cloning, lockpicking, social engineering, drone reconnaissance, and team-based missions. He emphasizes that physical security is foundational—without it, cybersecurity is meaningless—and argues that the most effective assessments go beyond a single breach to uncover systemic vulnerabilities. Harris stresses the importance of tailoring tests to client needs, whether for budget justification, compliance, or due diligence, and warns against the 'James Bond' mindset of stealthy one-off breaches. Instead, he advocates for thorough audits, ethical data collection, and constant communication with clients. He also highlights the psychological aspect of security: attackers often succeed not through force, but through trust—like the 'box of donuts' social engineering tactic. The episode concludes with a call to action: develop one core skill, master the 'escape clause' of social engineering, and always prioritize the client’s long-term security over a flashy one-time win.