AI Wire Cutters Make the Best AI Firewall

AI Wire Cutters Make the Best AI Firewall

Source: YouTube · Black Hills Information Security · published Sep 18, 2026 · 1:01:52

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

Black Hills Information Security's webcast argues AI doomsday claims are fear-mongering while showing how BHIS safely runs its offensive AI pentesting platform ("Fusion AI") via layered engineering controls 0:01.

Key Takeaways:
• The hosts dismiss doomsday headlines (e.g., a 10-70% chance AI wipes out humanity, an agent swarm "taking over the internet") as marketing 1:46
• A 700-agent "rogue" swarm would need 7.4 TB of memory (56 H200s, $168/hour in the cloud)—hard to miss on a bill, and GPU quotas limit stealthy scaling 9:01
• The Hugging Face hack used well-known techniques (SSRF, sandbox escape, leaked keys); AI speeds up human-style attacks but doesn't create novel ones 12:52
• Fusion AI uses disposable containers, pre-execution command filters, code-enforced scope, full logging, and turn limits 27:57
• Across 25+ engagements (100,000 tool calls), only 547 commands tripped filters and just 3 required killing an agent—no reverse shells or out-of-scope attacks 38:46
• AI pentesting creates more human validation work; AI-only pentest platforms are "snake oil" 22:23

Containing AI is an engineering problem—the speakers recommend knowing your external attack surface, local "sovereign" models, and deception technologies 40:14.

Sources:

  • 1:46 AI doomsday claims as fear-mongering
  • 9:01 Compute cost analysis debunking agent swarms
  • 27:57 Fusion AI security controls
  • 38:46 Engagement statistics

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Thank you for today's Black Hills webcast. Today we have John and Derek and they're talking about AI because it's doing some scary things and people are reacting very very surprised. So John, Derek, from this webcast I want to learn how Black Hills what are we doing to protect our customers but also just trying to protect people from AI and I'm really excited. So I'm let you guys take it away because it's always getting good. >> All right, Derek drive, sir. Drive. >> Good. I I'm not sharing. Can you see my slides? >> I sure can. Wire AI firewalls. Yeah. So, this uh John called me uh what on Friday of last week, maybe that's some Thursday or Friday, and said, "Hey, you're doing a webcast with me next week." And I said, "Ah, sweet. At least it wasn't a day's notice, right?" And so what he wa…