AI Security Podcast· Staffel 4· Folge 22
How Visa Secures Trillions Using AI Agents & Open-Source Harnesses
Freitag, 2. Oktober 2026 · 55 min
Kapitelklicken springt direkt hin
Shownotes
How does a global financial engine moving trillions annually manage cyber risk in the age of AI?
In this episode, Ashish sits down with Subra Kumaraswamy (linkedin.com/in/subrak), CISO of Visa (visa.com/en-us). Subra discusses Visa's journey as part of Anthropic's Glasswing Project testing the Mythos model, revealing why a majority of Mythos-discovered vulnerabilities were non-exploitable due to robust zero-trust architecture and micro-segmentation.
Subra explains why Visa open-sourced VVAH (Visa Vulnerability Agentic Harness) to help security teams scale vulnerability discovery, prioritization, and remediation across any model. He also breaks down how Visa triages 98% of Level 1 SOC incidents with AI agents, why "Mean Time to Adapt" (MTTA) is replacing legacy patch timelines, and how cross-functional AI governance enables innovation while maintaining strict production controls
() Introduction: Securing $18 Trillion in Global Transactions() Subra Kumaraswamy’s 30-Year Career: Netscape, Sun, and Visa() Improving Visa’s Cyber Maturity Score from 3.2 to 4.9() Inside Project Glasswing and Testing Anthropic’s Mythos() Why Visa Open-Sourced VVAH (Visa Vulnerability Agentic Harness)() Mythos vs. Zero Trust: Why Only 0.03% of Vulns Were Exploitable() Defining MTTA: Mean Time to Adapt at Machine Speed() The Threat of Multi-Service Vulnerability Chaining() Prioritizing Exploits and Automating PRs with Developer Agents() Moving to Autonomous Defense in High-Stakes Environments() AI Governance: Balancing Vibe-Coding with Production Gates() Collapsing Silos: Unifying Endpoint, Identity, and AppSec Signals() Building Custom Control Planes with Agent Harnesses() Triaging 98% of Level 1 Incidents with AI Agents() Hiring for CQ (Curiosity Quotient) & Developer Mindsets() The "You Laugh, You Lose" Cybersecurity Joke Challenge
Resources spoken about during the episode:
VVAH - Visa Vulnerability Agentic Harness (corporate.visa.com/en/sites/visa-perspectives/…)
