Key Takeaways

  • Sarah Guo points out that respected technologists now argue critical systems should be air-gapped because the public internet will collapse under AI attacks within twelve months.
  • CrowdStrike CEO George Kurtz rejects that panic as nonsense, arguing that autonomous agents rely on standard attack vectors rather than inventing impossible physics.
  • The real operational danger is velocity: automated software executes established exploitation playbooks in seconds instead of days, giving novice attackers nation-state reach.
  • Defense is shifting toward machine-speed response, including red and blue digital twin testing developed through partnerships like CrowdStrike and Nvidia on Project Safe Mind.
  • Enterprise strategy centers on securing AI deployments to maintain speed rather than retreating into disconnected infrastructure.

The Disagreement

Silicon Valley has developed a vocal faction of doom-sayers who believe the web is already lost. On No Priors, Sarah Guo framed the argument directly: “This is the first time in my career in technology where some very smart well-educated technologists are like we need to turn the internet off. We just got to air gap everything because the internet is gonna fall apart in the next year and will be unsafe for critical systems to touch it.”

Kurtz dismissed the idea outright. “I mean, I think it's nonsense,” he answered. The panic, he explained, stems from treating automated software as supernatural. “When you look at what the agents are doing, I think there's this sort of mythical view of what an agent does. It's like an agent doesn't just beam itself from your computer to another computer. It actually just does the same thing a human would do just better and faster.”

In Kurtz's view, the threat surface expands in volume rather than creating unblockable categories of physics. “So what has AI done? It's created more vulnerability so you have more of them, and you know you have more exploitation coming faster. But there isn't like a unique class that all of a sudden an agent just beams itself somewhere, and I think people just get wrapped around the axle.”

Who's Right (and When They're Wrong)

Kurtz has the technical reality on his side: software still runs on operating systems with defined memory spaces, network stacks, and identity boundaries. An autonomous agent cannot bypass an air gap without physical media, and it cannot cross an authenticated network boundary without valid credentials, misconfigured access, or unpatched code. The underlying mechanics of penetration testing, social engineering, and remote code execution remain identical to what security teams have fought for decades.

Where the doomers have a valid warning is operational reaction time. When an intrusion sequence drops from days to seconds, human monitoring teams fail. An entry-level hacker armed with an agent can probe an entire subnet, identify zero-days, and exfiltrate data before an on-call engineer checks a pager. If your defense model relies on a human reading a dashboard and approving a firewall rule, you will lose every time.

Enterprise defense depends on building automated digital twin defenses, such as Project Safe Mind with Nvidia, to simulate attacks and patch vulnerabilities before agentic software strikes. Kurtz's stance holds true only when security teams replace manual incident triage with automated runtime instrumentation.

What to Do With This

Audit your public API endpoints and token expirations by Friday. If your incident response plan requires a human engineer to revoke credentials or block a suspicious IP address, replace that manual step with an automated rule that severs access when request frequency spikes. Assume attackers operate at machine speed, and match their reaction loop directly in your production runtime.