#280 - Mythos and the Future of Vulnerability Operations (with Gadi Evron)

In this episode of CISO Tradecraft, host G Mark Hardy speaks with Gadi Evron about the paper “The AI Vulnerability Storm Building: A Mythos Ready Security Program,” a community-driven draft produced in days with extensive input from security leaders. Evron explains how advances in LLMs and agents are accelerating vulnerability discovery and exploitation, shrinking time-to-exploit assumptions and likely increasing the volume of real vulnerability reports and patches. They discuss separating hype from real risk, the impact of Anthropic’s Mythos and limited access via Project Glasswing, and what CISOs should do now: adopt agents to operate at machine speed, use them defensively to find issues, build “vuln ops” capabilities, secure coding agents in the enterprise, and communicate shifting risk metrics to boards. They also preview the next Unprompted conference planned for September.

VulnAxis - https://vulnaxis.com/

Gadi Evron - https://www.linkedin.com/in/gadievron/

Knostic - https://www.knostic.ai/

The AI Vulnerability Storm Paper - https://labs.cloudsecurityalliance.org/mythos-ciso/

Unprompted - https://unpromptedcon.org/