Local Chinese Model Seeks Nvidia Hardware – 2026-11-09
The BHIS crew welcomes Andrew Morgan and Eva to explore social engineering, AI security, and why the “human operating system” remains difficult to defend. The panel discusses allegations involving NVIDIA’s CEO as a starting point for examining emotional manipulation, security awareness training, and layered defenses. Other topics include an SSH authentication bypass, basic flaws uncovered through AI-assisted penetration testing, unreliable AI-generated patches, and the future of secure software development. The team debates Goldman Sachs’ restrictions on AI coding tools, the risks of shadow AI, and the tradeoffs of local versus hosted models. Closing stories cover developer-targeted fake job interviews tied to cryptocurrency theft and research into residential proxies on White House networks, plus a preview of Right of Boom.
Join us LIVE on Mondays, 4:30pm ET.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://www.youtube.com/@BlackHillsInformationSecurity
Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat
Chapters
- (00:00) - PreShow Banter™ — Un-patchable Humans
- (07:53) - Local Chinese Model Seeks Nvidia Hardware – 2026-11-09
- (09:38) - Plug: Right of Boom Conference and MSP Security Training
- (11:06) - Panel Discusses Allegations Involving NVIDIA’s CEO and Social Engineering
- (17:17) - Eroding Trust in Leadership and the AI Bubble
- (20:23) - Terminal2Shell: A Parody of Vulnerability Disclosure
- (21:31) - The Human Operating System: Security Training and Layered Defenses
- (30:44) - AI Regulation, Election Disinformation, and Bot Traffic
- (33:31) - SSH Authentication Bypass with Overlong Passwords
- (34:09) - AI and Software Security: Finding Vulnerabilities, Writing Code, and Fixing Flaws
- (40:36) - Goldman Sachs Restricts AI Coding Tools: Security, Productivity, and Shadow AI
- (48:47) - Local and Open-Weight AI: Corporate Adoption and Security Tradeoffs
- (58:13) - Goldman Sachs Follow-up: Why Restrict AI Coding?
- (01:03:57) - Plug: Right of Boom Conference, BHIS Training, and Eva’s Keynote
- (01:05:58) - Crypto Theft Follow-up: Fake Job Interviews Target Developers
- (01:07:53) - Residential Proxy Research Points to White House Networks
- (01:10:28) - Closing Remarks
Links
Right of Boom Conference
Right of Boom Conference; Eva’s Keynote
Allegations Involving NVIDIA’s CEO and Social Engineering
Terminal2Shell: A Parody of Vulnerability Disclosure
SSH Authentication Bypass with Overlong Passwords
Goldman Sachs Restricts AI Coding Tools: Security, Productivity, and Shadow AI
Crypto Theft Follow-up: Fake Job Interviews Target Developers
Residential Proxy Research Points to White House Networks
WHAT IN THE ACTUAL CYBER?! 2026 IN REVIEW
Creators & Guests
Click here to watch this episode on YouTube.
Click here to view the episode transcript.
🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits
Brought to you by:
Black Hills Information Security
https://www.blackhillsinfosec.com
☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/
Antisyphon Training
https://www.antisyphontraining.com/
Active Countermeasures
https://www.activecountermeasures.com
Wild West Hackin Fest