Existential Courage: The Hitchhiker's Guide to Surviving AI in Cloud

🛝 Webcast Slides -
https://www.blackhillsinfosec.com/wp-content/uploads/2026/03/SLIDES_The-Hitchhikers-Guide-to-Surviving-AI-in-Cloud.pdf

Can AI really help secure the cloud, or is it quietly making things worse?

Join Antisyphon instructor and security researcher Andrew Krug for a free one-hour Anti-cast on what really happens when AI collides with cloud security.

  • Andrew will cut through the hype and look at how LLMs affect IAM, monitoring, governance, and real-world risk.
  • Learn where AI helps, where it hallucinates, and how to defend cloud environments without panic.
  • Expect practical insights, grounded strategy, and a bit of cosmic humor. Bring your towel. Don’t panic.


Chapters

  • (00:00) - Intro
  • (02:33) - Our trip through the galaxy
  • (03:27) - What kind of literature is the Hitchikerʼs Guide to the Galaxy?
  • (04:18) - Don't Panic
  • (05:07) - The Agentic Revolution
  • (05:45) - Cast of Characters
  • (07:33) - The State of AI in the Enterprise - Deloitte
  • (10:42) - How do teams build agents?
  • (12:00) - What are teams using agents for?
  • (13:06) - Why build on Bedrock + AWS
  • (14:06) - Are we learning? Or not learning?
  • (15:47) - Are you the fixed point in a shifting universe?
  • (16:50) - TL;DR the majority of these are the same threats we have been dealing with
  • (18:05) - Prompt Injection is the new SQL Injection
  • (19:02) - Sandbox Escape
  • (20:09) - Shared Structure: General Software & AI Supply Chains
  • (22:52) - The Bad News
  • (24:18) - Threate Vector Coverage
  • (25:13) - The Expanding Universe of Secrets
  • (28:04) - Hope is not a strategy! But a strategy can give us hope.
  • (28:25) - (Yes we AI-Removed Andrew's Coughs)
  • (29:29) - back to: Hope is not a strategy! But a strategy can give us hope.
  • (30:36) - Plan for maximum risk scenarios
  • (32:52) - Squishy Stuff
  • (34:27) - KIRO
  • (37:00) - Infrastructure and Data Protection
  • (39:00) - Priveledge Escalation Paths – https://pathfinding.cloud
  • (40:47) - The AI Stuff
  • (41:50) - So anyway, here's Firewall
  • (43:23) - OpenTelementry
  • (46:36) - You still have to have logs
  • (48:11) - MCP
  • (49:11) - Learn more from Andrew in: Securing the Cloud Foundations
  • (50:12) - Post Show Q&A


Credits
Creators & Guests


Chat with your fellow attendees in the BHIS Discord server:
https://discord.gg/bhis
in the #🔴live-chat channel

🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits –
https://poweredbybhis.com

Click here to watch a video of this episode.

Brought to you by:

Black Hills Information Security 

https://www.blackhillsinfosec.com


Antisyphon Training

https://www.antisyphontraining.com/


Active Countermeasures

https://www.activecountermeasures.com


Wild West Hackin Fest

https://wildwesthackinfest.com

Click here to view the episode transcript.

Podden och tillhörande omslagsbild på den här sidan tillhör Antisyphon Training. Innehållet i podden är skapat av Antisyphon Training och inte av, eller tillsammans med, Poddtoppen.