Show Notes
Anthropic released Claude Mythos Preview. The headline is "AI can now find zero-days." Yes, but the real story is the gap between what AI finds and what organizations can fix. About 99 percent of Mythos findings are still unpatched. We cover what Mythos is in plain English, why the patching gap matters most, what duty of care means when your board knows these tools exist, where AIR-MAP fits, and why most advisors skip data sovereignty. Hosts: Kip Boyle, CISO, Cyber Risk Opportunities; Jake Bernstein, Partner, K&L Gates.
Anthropic Claude Mythos Preview
https://red.anthropic.com/2026/mythos-preview/
AISLE / Stanislav Fort, "AI Cybersecurity After Mythos: The Jagged Frontier"
https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jagged-frontier
AIR-MAP overview
More from Cyber Risk Management Podcast
Your cyber strategy is only as strong as the people who carry it out. Deidre Diamond, founder and CEO of CyberSN, has spent more than 20 years studying the cybersecurity workforce. Learn the executive questions that reveal true capability, why burnout is an execution risk, and how a workforce map turns a headcount plea into a business case. Your hosts are Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.
Your firewalls, access rules, and least privilege all assume software behaves the same way every time. AI models don't. So what still works, what breaks, and what should you build next? Our guest Dan Stocker, Principal Cybersecurity Architect at JPMorgan Chase and a Cloud Security Alliance contributor, explains why every AI agent needs its own identity, what your assistant's memory costs you in privacy, and where human judgment still matters most. Your hosts are Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.
Every system you've ever governed is a gear. Same input, same output. AI is the first system that guesses back, and that's why your management instincts misfire on it. Kip's new book, Gears Don't Guess, is out Sept 28th. Jake interviews him on why he wrote it, who it's for (the CFO, the general counsel, the risk manager, and the CISO), and the practical tasks, templates, and self-assessment that make it work on the job. The Kindle version is free through Oct 2. Your hosts are Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.
Tired of swinging the “compliance hammer” and hitting people until they submit to you? Would you rather be influential, and not dictatorial? Let's find out how you can with your hosts Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.
When a hospital's systems go down, care does not stop. It goes back to pen and paper, and the first sign is quiet, because the alerts stop. Physician and CISSP Mark Yoffe explains clinical compensating controls: the steps clinicians take to keep patients safe during downtime. He covers who owns the clinical workflow, how to make controls workable and tested, how to recover information lost in the "memory hole," and what leaders should demand as proof. Paper is not the same as proof. Your hosts are Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.