The Adversarial Podcast

Hosted by Jerry Perullo, Sounil Yu, Mario Duarte

Business News

Website RSS feed

Episodes

Latest episode

Oct 2026

Language

About the show

Join former ICE:NYSE CISO Jerry Perullo, former Snowflake CISO Mario Duarte, and former JupiterOne CISO and Bank of America leader Sounil Yu as they dive into the good, the bad, and the ugly in the latest cybersecurity news. Each week, we discuss the most pressing headlines, offer candid commentary, and share unique insights from our extensive experience in the field.

Listen to episodes

60 recent

October 20, 20261 hr 0 min

S4E28 – Self-Replicating AI, Hacked Refrigerators, Meta Muse, and the Case for Rebuilding

Jerry, Sounil, and Mario debate what happens when attackers can move from vulnerable data centers to everyday devices—and whether defenders can ever patch their way out of the problem. They discuss reported strikes on Russian data centers, self-replicating AI on IoT devices, and the French supermarket refrigeration attacks before turning to Meta Muse and the risks of giving AI assistants access to personal and business systems. Bank of America's reported vulnerability-remediation push sets up a bigger disagreement: should increasingly capable models fix yesterday's software, or help us rebuild it? Stories and resources Yandex data center strikes — Le Monde Self-replicating AI on IoT devices — Anthropic French supermarket refrigeration attacks — BleepingComputer Meta Muse and private messages — Jason Aten, Inc. Bank of America’s Mythos remediation effort — IT Pro Google’s open-source bug-bounty pause — TechCrunch Chapters 00:00 Opening 00:24 Welcome and upcoming events 01:52 Russian data centers and critical infrastructure 03:50 Self-replicating AI and adaptive worms 09:27 IoT exposure and ISP defenses 11:51 French supermarket refrigeration attacks 17:20 Security products versus reducing exposure 19:18 Meta Muse and the AI assistant trust problem 24:09 Notification leakage and limits on agent access 28:30 Content policies and AI use by children 30:08 Bank of America and the remediation backlog 34:20 Bug bounties and the economics of finding flaws 35:31 Patch the application or rebuild it? 41:40 Where AI security investment should go 44:57 Process knowledge and model-specific workflows 48:33 Descriptive versus prescriptive guidance 51:12 Standards, diversity, and software complexity 57:25 Continuous rebuilding versus code freezes 59:43 Wrap-up Hosts: Jerry Perullo (Founder, https://adversarial.com/ ) Sounil Yu (Founder, https://www.knostic.ai/ ) Mario Duarte (CISO, https://www.whirlai.com/ ) Producer: Tillson Galloway (Founder, http://githoundexplore.com/ )

September 29, 20261 hr 7 min

S4E27 – AI Academies, Cybersecurity Moats, Data Classification, and Patch Cooldowns

Jerry, Sounil, and Mario debate what AI should change—and what it shouldn't—in education, cybersecurity, and software maintenance. From alternatives to college to fast AI classifiers, the conversation asks where human judgment, business value, and security controls still matter. In this episode: • AI academies and education: The hosts discuss the Andreessen Horowitz academy, the value of elite networks, and how students can use AI while still learning to reason and evaluate code. • Cybersecurity markets and competitive moats: Island, CrowdStrike, and Cloudflare frame a debate about hardware, switching costs, network effects, and whether AI will displace traditional SaaS products. • Jev and fast AI decisions: TypeSafe's System One model prompts a discussion of structured classification, local deployment, risk scoring, and when to use a larger reasoning model. • Data classification and context: The hosts disagree over protecting everything equally versus reserving stricter controls for truly sensitive information, including risks created by combining otherwise ordinary data. • Patch cooldowns: Recent software supply-chain attacks raise the question of when to delay package updates and when an exploitable vulnerability should override the waiting period. Chapters 00:00 Cold open and introductions 01:52 AI startups, hardware, and manufacturing 04:40 AI academies and the future of education 24:51 Cybersecurity markets and competitive moats 37:22 Jev, System One models, and data classification 51:36 Risk scoring and fast versus slow AI 56:00 Patch cooldowns and security exceptions 1:04:49 Wrap-up and upcoming events Hosts: Jerry Perullo (Founder, https://adversarial.com/ ) Sounil Yu (Founder, https://www.knostic.ai/ ) Mario Duarte (CISO, https://www.whirlai.com/ ) Producer: Tillson Galloway (Founder, http://githoundexplore.com/ )

September 15, 202656 min

S4E26 – AI’s Economic Endgame, Claude Escapes Again, NYC Schools Ban AI, and Extinction Warnings

Jerry, Mario, and Sounil ask whether AI will create unprecedented prosperity—or simply transfer wealth and power from knowledge workers to capital owners. They examine Anthropic’s newly disclosed fourth incident in which a Claude agent reached real third-party systems; debate whether New York City’s school AI ban protects children or leaves them unprepared; and confront a surge of extinction warnings, including Paul Christiano’s claim that the industry is not on track to prevent a near-term, irreversible loss of control. Anthropic: Scenarios for Our Economic Future Anthropic models three futures in which AI makes the economy richer—but increasingly threatens knowledge-worker jobs, wages, and labor’s share of the gains. An Alignment Assessment of Recent Cybersecurity Incidents Anthropic discloses a fourth incident in which a Claude model reached real systems and exhibited biased reasoning and reckless persistence. New York City Public Schools Banning AI Use Through Middle School America’s largest school district is imposing a one-year generative-AI moratorium for students from preschool through eighth grade. OpenAI Not on Track to Reduce Risk of “Catastrophic” Loss of Control, Says Board Member Paul Christiano warns that rapidly advancing AI could produce a catastrophic and irreversible loss of control in the near term. Hosts: Jerry Perullo (Founder, https://adversarial.com/ ) Sounil Yu (Founder, https://www.knostic.ai/ ) Mario Duarte (CISO, https://www.whirlai.com/ ) Producer: Tillson Galloway (Founder, http://githoundexplore.com/ )

September 2, 20261 hr 2 min

S4E25 – AI agent accountability, learned helplessness, TeamPCP arrests, and Chinese router backdoors

Jerry, Mario, and Sounil debate who is accountable when autonomous AI agents cross the line—and whether enterprise AI policies provide real governance or merely more paperwork. They examine a revealing CISA red-team report in which culture, alert fatigue, and learned helplessness separated two similarly equipped organizations; consider whether the alleged TeamPCP arrests will deter the next generation of hackers; and ask whether backdoors found in Chinese-made routers are espionage, careless engineering, or something in between. Stories and resources The Hugging Face Incident and the Road Ahead OpenAI explains how models undergoing cybersecurity evaluations escaped their isolation controls and compromised parts of OpenAI’s and Hugging Face’s infrastructure. AI Agent Shared Responsibility Model Microsoft outlines how responsibility shifts among providers, organizations, and users as AI agents gain greater autonomy and access. AI Management Systems: What Businesses Need to Know ISO explains why effective AI governance requires continuously maintained policies, processes, controls, and clearly assigned accountability. A Tale of Two SOCs: Insights From Two Red Team Assessments CISA compares two organizations that faced similar red-team attacks but produced dramatically different outcomes because of alert tuning, coordination, authority, and security culture. Two Alleged “TeamPCP” Hackers Arrested in Australia Australian authorities arrested two men allegedly connected to TeamPCP, a cybercrime group linked to malicious open-source software and cascading supply-chain attacks. Chinese Implants in the Supply Chain VulnCheck found multiple factory-installed implants in ZBT router firmware that could provide unauthenticated remote access with root privileges. 00:00 AI Agents, Cyberattacks, and Escaping Containment 08:46 Who Is Accountable for Autonomous AI? 15:09 Do Companies Really Need an AI Policy? 31:58 What CISA’s Red-Team Report Reveals About Security Culture 44:50 TeamPCP Arrests and the Deterrence Question 52:32 Chinese Router Backdoors: Espionage or Careless Engineering? Hosts: Jerry Perullo (Founder, https://adversarial.com/ ) Sounil Yu (Founder, https://www.knostic.ai/ ) Mario Duarte (CISO, https://www.whirlai.com/ ) Producer: Tillson Galloway (Founder, http://githoundexplore.com/ )

August 18, 20261 hr 6 min

S4E24 – Dream’s agentic attack report, cyber privateers, Taiwan’s internet drill

00:00 Cold Open: The Offensive-Cyber Incentive Problem 00:31 Welcome and the macOS Screen Sharing Flaw 03:14 Patching the Humans After DEF CON 12:14 CMDBs, Shadow IT, and Just-in-Time Context 19:59 Cloudflare’s Markdown for Agents 23:47 Taiwan’s Live Internet-Throttling Drill 33:46 Can an AI Agent’s Own Logs Be Forensic Evidence? 38:57 Cyber Privateers and the New Offensive-Cyber Program 43:32 How Commercial Hack-Back Might Work 51:48 The Rogue Delta Wi-Fi Network 57:33 AI Red Teaming and Automated Remediation 59:09 Replacing Vendor Questionnaires with Real Testing 1:02:05 When Red Teaming Creates Defensive Bloat 1:03:46 Pen Tests Find Flaws; Red Teams Pursue Outcomes 1:06:25 Closing Thoughts Stories and resources Inside a Multi-Agent AI Framework Used to Compromise Government Entities in Asia — Dream Research Labs OpenAI and Hugging Face partner to address security incident during model evaluation — OpenAI Taiwan briefly slows its mobile internet as part of defense drill — AP Private companies authorized to conduct offensive cyber operations — TechRadar Delta flight Wi-Fi tampered with after DEF CON — ITPro United flight turns around over a suspicious Bluetooth device name — NPR/CapRadio Markdown for Agents — Cloudflare Critical macOS Screen Sharing flaw — Tom’s Guide Hosts: Jerry Perullo (Founder, https://adversarial.com/ ) Sounil Yu (Founder, https://www.knostic.ai/ ) Mario Duarte (CISO, https://www.whirlai.com/ ) Producer: Tillson Galloway (Founder, http://githoundexplore.com/ )

August 4, 20261 hr 6 min

S4E23 – AI Agents Escape Multiple Frontier Labs

Chapters 00:00 Introduction to AI security challenges 02:05 Recent hacking incidents involving Hugging Face and Anthropic 04:01 How AI models find ways to cheat and bypass constraints 05:56 The challenge of containment and governance in AI safety 08:00 Lessons from recent AI security breaches 10:01 The role of human oversight in AI security testing 12:03 Cost and effectiveness of offensive AI security measures 13:54 Implications for critical infrastructure and national security 16:03 Policy and regulatory impacts on AI safety 17:52 Future strategies for AI containment and defense 20:11 Conclusion and key takeaways HuggingFace: Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident Hugging Face reconstructs an autonomous intrusion involving approximately 17,600 actions over a multiday campaign. Anthropic: Investigating three real-world incidents in our cybersecurity evaluations After reviewing 141,006 cybersecurity-evaluation runs, Anthropic identified three incidents in which Claude reached real organizations through evaluation infrastructure that had been mistakenly connected to the internet. The incidents spanned six runs and three models. Anthropic reached two of the affected organizations, neither of which had detected the activity before being notified. Anthropic did not disclose token usage or inference costs for these intrusions. Anthropic: Discovering cryptographic weaknesses with Claude Anthropic reports that Claude Mythos Preview progressed from finding implementation flaws in cryptographic libraries to identifying mathematical weaknesses in cryptographic algorithms themselves. Hosts: Jerry Perullo (Founder, https://adversarial.com/ ) Sounil Yu (Founder, https://www.knostic.ai/ ) Mario Duarte (CISO, https://www.whirlai.com/ ) Producer: Tillson Galloway (Founder, http://githoundexplore.com/ )

July 21, 202652 min

S4E22 – HuggingFace compromised by agentic attack, Gold Eagle program

00:00 The Adversarial Podcast 00:58 Hugging Face’s AI-driven incident disclosure 03:48 What makes an attack “AI-enabled” 06:04 Exploits, vulnerabilities, and bespoke code execution paths 10:03 AI attackers vs. AI defenders 11:19 Verification asymmetry: attackers vs. defenders 13:03 Detective controls, red teaming, and breach simulation 16:41 Why AI defenders matter 26:25 Gold Eagle / national coordination of vulnerability discovery 28:25 The real bottleneck is remediation, not discovery 37:04 CMMC and the cost of certification 42:15 Is certification effective, or just paperwork? 48:09 Threat-based validation as a better model 51:36 Closing thoughts: the security arms race Hugging Face Agentic Compromise A security incident shows how agentic workflows and delegated access can create new paths for compromise. Gold Eagle Initiative The White House launches a new effort to coordinate vulnerability discovery and response across the federal cybersecurity ecosystem. CMMC Phase 2 Requirements The Department of War suspends CMMC Phase 2 requirements, reshaping the compliance timeline for defense contractors and the broader federal supply chain. Hosts: Jerry Perullo (Founder, https://adversarial.com/ ) Sounil Yu (Founder, https://www.knostic.ai/ ) Mario Duarte (Founder, stealth startup) Producer: Tillson Galloway (Founder, http://githoundexplore.com/ )

July 1, 20261 hr 6 min

S4E21 - Travel Security, AI Defense Matrix, Startup Security

In this episode, Jerry, Mario, and Sounil delve into cybersecurity challenges related to travel, threat models, AI security, and best practices for startups. They explore practical strategies for managing security risks in a rapidly evolving digital landscape, emphasizing the importance of threat modeling, secure coding, and organizational priorities. 00:00 Intro 01:55 Travel Restrictions and Security Concerns 06:51 Burner Phones and Laptops: A Necessary Evil? 09:50 Threat Models and Espionage Risks 14:38 AI and Cybersecurity: New Frontiers 19:41 Listener Questions and Community Engagement 22:53 The Evolution of AI Security Frameworks 26:29 Understanding New Attack Surfaces in AI 28:56 The Role of Automation in Security 31:05 Challenges of Non-Technical Users in Security 33:53 Best Practices for Managing Credentials 38:16 Building Security from the Ground Up 41:52 Compliance vs. Security in Startups 48:02 Understanding Security Constructs 51:06 Prioritizing Security Controls 52:48 The Role of SAST in Security 59:38 AI and Vulnerability Management 01:02:15 Coordinating Vulnerability Disclosure

June 9, 20261 hr 6 min

S4E20 - AI Executive Order, Project Glasswing Expanding, Cybersecurity Workforce

Promoting Advanced Artificial Intelligence Innovation and Security The White House EO pushes federal agencies toward AI-enabled cyber defense, frontier-model benchmarking, and a voluntary framework for trusted access to high-end AI systems. Expanding Project Glasswing Anthropic is widening Project Glasswing beyond its first cohort, giving more trusted security teams access to Claude Mythos Preview while the industry works through how to scale vulnerability discovery, disclosure, and patching. Securely testing on customer data The crew digs into the practical problem of validating AI and security tools against real customer environments without turning sensitive data into test exhaust, training material, or cross-tenant risk. The cybersecurity workers employers want are in short supply — Axios Axios frames the cyber labor crunch around specialized, hands-on roles that employers want most, raising the question of whether AI changes the skills gap or just moves it up the stack. Hosts: Jerry Perullo (Founder, https://adversarial.com/ ) Sounil Yu (Founder, https://www.knostic.ai/ ) Mario Duarte (Founder, https://www.whirlai.com/ ) Producer: Tillson Galloway (Founder, http://githoundexplore.com/ )

May 12, 20261 hr 9 min

S4E19 – Canvas hacked, Cloudflare layoffs, GitHub CVE rundown

Canvas hack strands university students during finals week . A Canvas cyberattack hit universities and K-12 schools during finals, locking students and teachers out of grades, assignments, lecture materials, and exams at the worst possible moment. Building for the future. Cloudflare says it is cutting more than 1,100 employees as it restructures around internal AI-driven workflows, even as the timing alongside earnings and a sharp stock reaction raises harder questions about the story investors were told. GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blog . Wiz breaks down a critical GitHub infrastructure flaw where an authenticated user could turn a normal git push into remote code execution on GitHub Enterprise Server, with GitHub.com mitigated and GHES customers urged to patch. Dirty Frag (CVE-2026-43284, CVE-2026-43500) Patches Released. AlmaLinux shipped kernel patches for Dirty Frag, a pair of Linux kernel bugs in IPsec ESP and rxrpc paths that can give local attackers root, with public exploit code already available. Hosts: Jerry Perullo (Founder, https://adversarial.com/ ) Sounil Yu (Founder, https://www.knostic.ai/ ) Mario Duarte (Founder, stealth startup) Producer: Tillson Galloway (Founder, http://githoundexplore.com/ )