AI Is Breaking Out and Cybersecurity Isn’t Ready | John Strand - #296

What happens when AI stops behaving like a tool, and starts operating beyond the boundaries we gave it? Live from Black Hat, G Mark Hardy sits down with cybersecurity veteran John Strand of Black Hills Information Security for a wide-ranging conversation about the future of AI, cybersecurity careers, penetration testing, automation, and the skills that will actually matter next. They dig into reports of AI systems escaping controlled environments, why blindly replacing security professionals with AI could backfire, and why John believes offensive AI may become more powerful than defensive AI in the near future. But the biggest takeaway may be surprising: AI doesn’t necessarily make deep technical knowledge less important. It may make it more valuable than ever.

In this episode:

• Why AI could completely reshape cybersecurity careers
• The skills security professionals need to survive the AI transition
• Why understanding TCP/IP, operating systems, and fundamentals still matters
• How John built an AI-powered security workflow in minutes
• The danger of autonomous penetration-testing tools
• Why “human in the loop” may be critical for AI security
• The hidden business problem with OpenAI and Anthropic-dependent products
• Why cheaper open-weight AI models could disrupt the industry
• What CISOs should understand before deploying AI across their organizations
• Why trust, not another AI dashboard, may become cybersecurity’s biggest differentiator

And John explains why, despite all the uncertainty, he’s more excited about cybersecurity today than he has been in years. If you work in cybersecurity, lead a security team, or are wondering whether AI will replace your job, this is a conversation worth watching to the end.