Securing the Cloud in the Age of AI with Andrew Krug

Existential Courage: The Hitchhiker's Guide to Surviving AI in Cloud🛝 Webcast Slides - https://www.blackhillsinfosec.com/wp-content/uploads/2026/03/SLIDES_The-Hitchhikers-Guide-to-Surviving-AI-in-Cloud.pdfCan AI really help secure the cloud, or is it quietly making things worse?Join Antisyphon instructor and security researcher Andrew Krug for a free one-hour Anti-cast on what really happens when AI collides with cloud security.Andrew will cut through the hype and look at how LLMs affect IAM, monitoring, governance, and real-world risk.Learn where AI helps, where it hallucinates, and how to defend cloud environments without panic.Expect practical insights, grounded strategy, and a bit of cosmic humor. Bring your towel. Don’t panic.Chapters(00:00) - Intro (02:33) - Our trip through the galaxy (03:27) - What kind of literature is the Hitchikerʼs Guide to the Galaxy? (04:18) - Don't Panic (05:07) - The Agentic Revolution (05:45) - Cast of Characters (07:33) - The State of AI in the Enterprise - Deloitte (10:42) - How do teams build agents? (12:00) - What are teams using agents for? (13:06) - Why build on Bedrock + AWS (14:06) - Are we learning? Or not learning? (15:47) - Are you the fixed point in a shifting universe? (16:50) - TL;DR the majority of these are the same threats we have been dealing with (18:05) - Prompt Injection is the new SQL Injection (19:02) - Sandbox Escape (20:09) - Shared Structure: General Software & AI Supply Chains (22:52) - The Bad News (24:18) - Threate Vector Coverage (25:13) - The Expanding Universe of Secrets (28:04) - Hope is not a strategy! But a strategy can give us hope. (28:25) - (Yes we AI-Removed Andrew's Coughs) (29:29) - back to: Hope is not a strategy! But a strategy can give us hope. (30:36) - Plan for maximum risk scenarios (32:52) - Squishy Stuff (34:27) - KIRO (37:00) - Infrastructure and Data Protection (39:00) - Priveledge Escalation Paths – https://pathfinding.cloud (40:47) - The AI Stuff (41:50) - So anyway, here's Firewall (43:23) - OpenTelementry (46:36) - You still have to have logs (48:11) - MCP (49:11) - Learn more from Andrew in: Securing the Cloud Foundations (50:12) - Post Show Q&A CreditsCreators & Guests Andrew Krug - Guest Jason Blanchard - Host Deb Wigley - Host Chat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhisin the #🔴live-chat channel🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.comClick here to watch a video of this episode. Brought to you by:Black Hills Information Security https://www.blackhillsinfosec.comAntisyphon Traininghttps://www.antisyphontraining.com/Active Countermeasureshttps://www.activecountermeasures.comWild West Hackin Festhttps://wildwesthackinfest.comClick here to view the episode transcript.