The Adversarial Podcast cover art

The Adversarial Podcast

The Adversarial Podcast

Written by: Jerry Perullo Sounil Yu Mario Duarte
Listen for free

About this listen

Join former ICE:NYSE CISO Jerry Perullo, former Snowflake CISO Mario Duarte, and former JupiterOne CISO and Bank of America leader Sounil Yu as they dive into the good, the bad, and the ugly in the latest cybersecurity news. Each week, we discuss the most pressing headlines, offer candid commentary, and share unique insights from our extensive experience in the field.

Adversarial Risk Management
Economics
Episodes
  • S4E18 – Mythos and TPRM, does SOC 2 really work?
    Apr 28 2026

    00:34 - Introduction

    03:33 - Enterprise Challenges

    07:08 - End User and Browsers

    21:55 - Vulnerability Metrics

    40:37 - Approaching Leadership

    42:09 - TPRM Discussion

    46:40 - Sharing Findings

    01:03:04 - Conclusion

    Mozilla: Anthropic’s Mythos found 271 security vulnerabilities in Firefox 150

    Anthropic’s Mythos found 271 zero-day vulnerabilities in Firefox 150 Mozilla let Anthropic’s Mythos loose on Firefox 150’s codebase, harvesting 271 shippable fixes in one sweep and forcing the security team to reckon with AI-scale fuzzing, triage, and patch velocity. https://arstechnica.com/ai/2026/04/mozilla-anthropics-mythos-found-271-zero-day-vulnerabilities-in-firefox-150/

    Hosts:

    Jerry Perullo (Founder, https://adversarial.com/)

    Sounil Yu (Founder, https://www.knostic.ai/)

    Mario Duarte (Founder, stealth startup)

    Producer: Tillson Galloway (Founder, http://githoundexplore.com/)

    Show More Show Less
    1 hr and 5 mins
  • S4E17 – Mythos, Delve's downfall, and supply chain attacks
    Apr 23 2026

    Project Glasswing (https://www.anthropic.com/glasswing) Anthropic is letting AWS, Apple, Google, Microsoft, JPMorgan, Cisco, NVIDIA, and friends point Claude Mythos at their shared attack surface while backing it with $100M in credits and $4M for OSS security groups so blue teams can burn down latent vulns before the offense gets equivalent AI.

    Inside the TeamPCP cascading supply chain attack (https://www.reversinglabs.com/blog/teampcp-supply-chain-attack-spreads) Hijacked Trivy GitHub Actions poisoned Docker images, stole CI secrets, and daisy-chained through Checkmarx workflows, npm packages, and VS Code extensions, seeding thousands of tenants with infostealers and proving CI creds are the new crown jewels.

    Delve – Fake Compliance as a Service - Part I (https://substack.com/home/post/p-191342187) A report says Delve mass-produced fake SOC 2 artifacts and funneled them through shell auditors, leaving customers—from indie apps to a Nasdaq firm—waving fraudulent attestations that crater their legal compliance.

    Hosts: Jerry Perullo (Founder, https://adversarial.com/)

    Sounil Yu (Founder, https://www.knostic.ai/)

    Mario Duarte (Founder, stealth startup)

    Producer: Tillson Galloway (Founder, http://githoundexplore.com/)

    Show More Show Less
    1 hr and 9 mins
  • Special RSAC episode with Cloudflare - Cybersecurity and AI, CISO/Board dynamics, future of cybersecurity
    Apr 14 2026

    The Adversarial Podcast brings you a special episode in collaboration with Cloudflare's Security Signal Podcast.

    0:39 - 3:33 AI Governance and Autonomy

    6:26 - 8:49 Human in the Loop

    9:17 - 11:40 Cybersecurity and AI

    15:26 - 18:19 Resilience and Anti-Fragility

    28:24 - 33:05 Threat Intelligence

    33:31 - 36:50 Board and CISO Dynamics

    41:09 - 42:35 Future of Cybersecurity

    42:35 - 44:14 Books and Resources

    Security Signal Podcast: https://podcasts.apple.com/us/podcast/security-signal/id1815513800

    Cloudflare; http://cloudflare.com/

    Hosts:

    Jerry Perullo (Founder, https://adversarial.com/)

    Sounil Yu (Founder, https://www.knostic.ai/)

    Mario Duarte (Founder, stealth startup)

    Producer: Tillson Galloway (Founder, http://githoundexplore.com/)

    Show More Show Less
    45 mins
adbl_web_anon_alc_button_suppression_c
No reviews yet