Adversarial Podcast S4E10 – AI impact on cyber jobs, SOC 2 fraud, CISA polygraph failure | The Adversarial Podcast

The podcast episode explores the impact of AI on cybersecurity, questioning whether it will displace jobs or merely serve as a convenient excuse for staff reductions. The hosts analyze a Wall Street Journal article on the outlook for cyber jobs amid AI advancements, with Sounil Yu referencing a Washington Post study showing AI's limited task completion rate. Jerry shares his experience using AI for a repetitive task, highlighting its unreliability. The discussion shifts to CISO liability, particularly concerning statements made to investors, using Coupang as a case study. The hosts also examine the cyber attack on Jaguar Land Rover and debate whether it's the sole cause of their wholesale volume decline. The episode further discusses AI's potential in security operations, vulnerability management, and the risks associated with AI-driven tools.

Outlines

Part 1: AI Hype, Reality, and Job Impact

Part 2: Risk Management and Technical Limitations

Part 3: CISO Liability and Corporate Consequences

Part 4: AI Security Models and Emerging Threats

Part 5: Trust, Governance, and Personnel Security

Part 6: Compliance, Frameworks, and SOC 2

Sign in to continue reading, translating and more.

Continue

Adversarial Podcast S4E10 – AI impact on cyber jobs, SOC 2 fraud, CISA polygraph failure

The Adversarial Podcast

Part 1: AI Hype, Reality, and Job Impact

AI's Impact on Cybersecurity Jobs: Reality vs. Hype in 2026

AI Task Completion Rates and Practical Limitations in Cybersecurity

AI's Role in Cybersecurity: Fluff vs. Practical Applications and ROI Challenges

Part 2: Risk Management and Technical Limitations

AI and Third-Party Risk Management: Ironies and Verifiability in Cybersecurity

AI's Impact on SOC Teams and the Importance of Senior Expertise

Part 3: CISO Liability and Corporate Consequences

CISO Liability and the Coupang Case: Investor Lawsuits and Misleading Statements

CISO Liability: Investor Statements, Risk Disclosure, and the Importance of Hedging

CISO Indemnification, Lawsuits, and the Material Impact of Cyber Attacks

Cyber Attacks vs. Market Competitiveness: Analyzing Jaguar Land Rover's Sales Decline

Part 4: AI Security Models and Emerging Threats

AI in Security: New Uses, Vulnerability Detection, and Risk Triaging

AI's Operating Models: Incremental Improvement vs. Fundamental Change

Prompt Injection, Attack Surface Expansion, and the Slow Arrival of AI-Specific Attacks

Part 5: Trust, Governance, and Personnel Security

CISA Director's Polygraph Failure: Trust and Governance in Security

Trust in Security: Lying Employees and the Polygraph Process

Governance and Security: The Importance of Watching the Watchers

Remote Security Teams and the Importance of Behavioral Detections

Part 6: Compliance, Frameworks, and SOC 2

SOC 2 Fraud and the Diploma Mill Certification Process

SOC 2 Compliance: Misrepresentation and the Importance of Doing the Right Thing

Frameworks vs. Security: Prioritizing Tactical Actions and Stopping Actual TTPs

Adversarial Podcast S4E10 – AI impact on cyber jobs, SOC 2 fraud, CISA polygraph failure

The Adversarial Podcast

Part 1: AI Hype, Reality, and Job Impact

00:00AI's Impact on Cybersecurity Jobs: Reality vs. Hype in 2026

AI's Impact on Cybersecurity Jobs: Reality vs. Hype in 2026

05:50AI Task Completion Rates and Practical Limitations in Cybersecurity

AI Task Completion Rates and Practical Limitations in Cybersecurity

10:41AI's Role in Cybersecurity: Fluff vs. Practical Applications and ROI Challenges

AI's Role in Cybersecurity: Fluff vs. Practical Applications and ROI Challenges

Part 2: Risk Management and Technical Limitations

13:41AI and Third-Party Risk Management: Ironies and Verifiability in Cybersecurity

AI and Third-Party Risk Management: Ironies and Verifiability in Cybersecurity

17:05AI's Impact on SOC Teams and the Importance of Senior Expertise

AI's Impact on SOC Teams and the Importance of Senior Expertise

Part 3: CISO Liability and Corporate Consequences

21:31CISO Liability and the Coupang Case: Investor Lawsuits and Misleading Statements

CISO Liability and the Coupang Case: Investor Lawsuits and Misleading Statements

24:42CISO Liability: Investor Statements, Risk Disclosure, and the Importance of Hedging

CISO Liability: Investor Statements, Risk Disclosure, and the Importance of Hedging

29:47CISO Indemnification, Lawsuits, and the Material Impact of Cyber Attacks

CISO Indemnification, Lawsuits, and the Material Impact of Cyber Attacks

32:12Cyber Attacks vs. Market Competitiveness: Analyzing Jaguar Land Rover's Sales Decline

Cyber Attacks vs. Market Competitiveness: Analyzing Jaguar Land Rover's Sales Decline

Part 4: AI Security Models and Emerging Threats

35:12AI in Security: New Uses, Vulnerability Detection, and Risk Triaging

AI in Security: New Uses, Vulnerability Detection, and Risk Triaging

37:10AI's Operating Models: Incremental Improvement vs. Fundamental Change

AI's Operating Models: Incremental Improvement vs. Fundamental Change

40:31Prompt Injection, Attack Surface Expansion, and the Slow Arrival of AI-Specific Attacks

Prompt Injection, Attack Surface Expansion, and the Slow Arrival of AI-Specific Attacks

Part 5: Trust, Governance, and Personnel Security

44:31CISA Director's Polygraph Failure: Trust and Governance in Security

CISA Director's Polygraph Failure: Trust and Governance in Security

49:30Trust in Security: Lying Employees and the Polygraph Process

Trust in Security: Lying Employees and the Polygraph Process

52:33Governance and Security: The Importance of Watching the Watchers

Governance and Security: The Importance of Watching the Watchers

55:27Remote Security Teams and the Importance of Behavioral Detections

Remote Security Teams and the Importance of Behavioral Detections

Part 6: Compliance, Frameworks, and SOC 2

57:32SOC 2 Fraud and the Diploma Mill Certification Process

SOC 2 Fraud and the Diploma Mill Certification Process

1:00:26SOC 2 Compliance: Misrepresentation and the Importance of Doing the Right Thing

SOC 2 Compliance: Misrepresentation and the Importance of Doing the Right Thing

1:03:32Frameworks vs. Security: Prioritizing Tactical Actions and Stopping Actual TTPs

Frameworks vs. Security: Prioritizing Tactical Actions and Stopping Actual TTPs