Thomas Richard talks to Mike Wilkes, Enterprise CISO at Aikido Security

Mythos, Autonomous Pen Testing, and the Future of Self-Securing Software, with Mike Wilkes, Enterprise CISO at Aikido Security.

On the Cyber Security Recruiter podcast, Mike Wilkes discusses a busy week of CISO events at Google (Mythos/Glasswing gathering), the Harvard Club, and Meta’s OSAC cybersecurity committee, plus an NYSE TV interview about Aikido Security’s Series B and growth.

He explains Mythos Preview’s implications, including rapid vulnerability discovery (citing Firefox fixing 271 issues vs 20–30 historically), Anthropic’s restrictions, and the need for prioritization (EPSS) rather than chasing raw CVE volume.

Mike describes autonomous pen testing where a $7,000, two-week API test was replicated for $4 in 80 minutes, arguing the “harness” and orchestration matter most.

He emphasizes soft skills, listening, and translating security into business impact for boards, warns about privacy erosion, token-cost waste, supply-chain/model risks, and advocates small local models for privacy and resilience.