Insights for the Modern Frontier

Suzu Labs Blog

Exploring the breakthroughs and challenges shaping our industry. Stay informed, stay secure, and stay ahead.

Get the Brief

Evolve Defend Lead

MCP Security

Jul 24, 2026 Jacob Krell

The Agent Identity Problem: Non-Human Identities Outnumber Humans 45 to 1 and AI Agents Are Making It Worse

The Agent Identity Problem: Non-Human Identities Outnumber Humans 45 to 1 and AI Agents Are Making It Worse At a Glance Non-human identities already ...

Government Security

Jul 20, 2026 Denis Calderone

CMMC's Third-Party Assessments Are Paused. The Standard of Care Isn't

On July 13 the Department of War suspended Phase 2 of CMMC, the third party certification requirement that was set to start this November. Half the ...

AI Economics

Jul 20, 2026 Jacob Krell

The Training Tax

At a Glance Training is a one-time bill. Inference compounds.GPT-4 cost over $100M to train. Serving GPT-4o at ChatGPT-scale usage costs over $350M ...

Cybersecurity

Jul 20, 2026 Suzu Labs

Why Mobile Applications Need Real Penetration Testing

Mobile applications have become a primary interface between organizations and their customers, handling everything from authentication and payments ...

Penetration Testing

Jul 16, 2026 Suzu Labs

Cloud Security Means More Than Securing the Cloud

As organizations connect more IoT devices to cloud platforms, the attack surface expands well beyond the device itself. APIs, cloud identities, ...

Penetration Testing

Jul 16, 2026 Suzu Labs

Third-Party Risks: When Trusted Connections Become Attack Paths

Modern applications rarely operate alone. They rely on API gateways, webhooks, cloud services, SaaS platforms, and partner integrations to exchange ...

Cybersecurity

Jul 14, 2026 Suzu Labs

VPNs Aren't the Risk. The Network Paths Around Them Are.

Virtual Private Networks (VPNs) remain one of the most common ways organizations provide secure remote access to internal systems. When configured ...

Cybersecurity

Jul 10, 2026 Hannah Perez

Top 7 AI Security Risks in 2026

Quick guide: 7 AI security risks every CISO should know Data poisoning: Attackers corrupt training datasets to manipulate AI model behavior Prompt ...

Penetration Testing

Jul 09, 2026 Suzu Labs

Pipeline Security Testing: Securing Your Software Supply Chain

Modern development teams rely on CI/CD pipelines to build, test, and deploy software faster than ever before. But the same automation that ...

Penetration Testing

Jul 08, 2026 Suzu Labs

Understanding API Risk: Focus on What Attackers Actually Use

Application Programming Interfaces (APIs) have become the backbone of modern software. They connect web applications, mobile apps, cloud services, ...

AI Security

Jul 08, 2026 Hannah Perez

Enterprise AI Security Solutions for Mid-Sized Tech 2026

Finding the Right AI Security Partner for Your Growing Tech Company Your engineering team just deployed a new AI-powered customer support system. ...

MFA

Jul 06, 2026 Suzu Labs

MFA Gaps: Why Strong Authentication Doesn't Always Mean Strong Security

Multi-factor authentication (MFA) has become a foundational security control, and for good reason. It significantly reduces the risk of account ...

Penetration Testing

Jul 03, 2026 Suzu Labs

Understanding Application Attack Paths: Beyond the Vulnerability List

Modern web applications are made up of countless interactions between users, APIs, databases, and third-party services. While automated scanners can ...

Cybersecurity

Jul 01, 2026 Suzu Labs

AI Jailbreaking: Finding the Gaps Before Attackers Do

As organizations rapidly integrate large language models into customer-facing applications, internal tools, and automated workflows, securing the AI ...

Penetration Testing

Jul 01, 2026 Suzu Labs

Understanding Attack Paths: Seeing Security the Way an Attacker Does

When a security incident occurs, an audit identifies gaps, or your organization introduces new applications, cloud services, or infrastructure, one ...

LLM

Jun 30, 2026 Jacob Krell

The AI Industry's Prescott Moment

Intel killed its fastest chip in 2004 because clock speed had become the wrong metric. AI is approaching the same inflection. For the majority of ...

Data Privacy

Jun 30, 2026 Hannah Perez

The Kylie Effect: How Meta Just Normed the Smart Glasses Privacy Dilemma

When tech companies first tried to put cameras on our faces, the public reaction was loud, clear, and overwhelmingly resistant. Early iterations of ...

Threat Intelligence

Jun 25, 2026 Denis Calderone

The Extortion Market Has Matured, And the Response Industry Is Part of It

In May, a criminal extortion group told 9,000 schools to hire breach coaches and negotiate ransom payments individually. A week later, the ed-tech ...

Vulnerability Management

Jun 22, 2026 Jacob Krell

The ICS Exploit Pipeline Is Built for Destruction, Not Theft

The vulnerability pipeline feeding ICS attackers is structurally optimized for breaking infrastructure, not stealing from it. In 2025, pure ...

Prompt Injection

Jun 17, 2026 Jacob Krell

973 MCP Packages, 71% Single-Maintainer: A Practitioner's Guide to AI Developer Security

At a Glance AI security tooling adoption lags behind AI coding tool adoption by an order of magnitude. Download ratios: 10:1 on PyPI, 28:1 on npm. ...

AI Governance

May 28, 2026 Jacob Krell

The AI Governance Gap: Verizon's 2026 DBIR Shows Attackers Scaling AI While Employees Leak Data Through It

On May 20, 2026, Verizon published the 2026 Data Breach Investigations Report with a dedicated AI section built on original research conducted with ...

Mean Time to Exploit

May 21, 2026 Jacob Krell

The Remediation Paradox: Verizon's 2026 DBIR Shows Exploitation Winning While Defenders Patch Slower

On May 20, 2026, Verizon published the [2026 Data Breach Investigations Report](https://www.verizon.com/business/resources/reports/dbir/). The ...

Cybersecurity

May 20, 2026 Jacob Krell

The Extension Blind Spot: How One VS Code Plugin Gave Attackers GitHub's Source Code

GitHub's 3,800 Repositories Stolen Through a Single IDE Extension On May 19, 2026, a single VS Code extension on a single employee's device gave ...

May 20, 2026 Hannah Perez

The Cost of a Click: Why Passive Cookie Consent Is Your Biggest Compliance Liability

If you think a basic pop-up banner that reads "By continuing to browse this site, you accept cookies" protects your business, you are sitting on a ...

Data Privacy

May 19, 2026 Jacob Krell

Five Years of US Privacy Breach Data Tell a Story Security Leaders Cannot Ignore

In April 2026 alone, the ShinyHunters extortion group breached ADT (5.5 million customers), Amtrak (2.1 million confirmed records), and McGraw-Hill ...

Vulnerability Management

May 05, 2026 Jacob Krell

Mean Time to Exploit Has Gone Negative. Security Strategy Has to Change.

Mandiant's M-Trends 2026 report puts estimated mean time to exploit at negative seven days. That number should reset how security leaders think about ...

Prompt Injection

Apr 30, 2026 Hannah Perez

When AI Billing Breaks Trust: What the Claude Code Backlash Says About AI Governance

When AI Billing Breaks Trust: Lessons from the Claude Code Backlash AI adoption is accelerating, but trust is still fragile. Recently, users of ...

Cybersecurity

Apr 29, 2026 Suzu Labs

From Army Ranger to Ethical Hacker: What Cybersecurity Can Learn from the Battlefield

Cybersecurity doesn’t start with tools, it starts with mindset. In this episode featuring Aaron Colclough, we get a rare look at how military ...

Cybersecurity

Apr 23, 2026 Jacob Krell

When Elite Cyber Teams Can't Crack Web Security

HTB's 2025 benchmark tested 796 security teams. Only 21% passed web security challenges. The Security Illusion Security certifications line your ...

Cybersecurity

Apr 22, 2026 Jacob Krell

The Invisible Threat: Business Logic Flaws in Modern Applications and Why Scanners Miss Them

In today's security landscape, some of the most dangerous vulnerabilities aren't flagged by automated scanners at all. These are the business logic ...

Apr 20, 2026 Hannah Perez

Suzu Labs Acquires Emulated Criminals

Bridging the gap between theory and the threat reality, Suzu Labs is proud to announce the acquisition of Emulated Criminals. This strategic merger ...

Cybersecurity

Apr 17, 2026 Suzu Labs

The Wall Around Claude 4.7 Does Not Extend to Dread

Anthropic released Claude Opus 4.7 on April 16, 2026 with automated cybersecurity safeguards and a Cyber Verification Program. Dark web intelligence ...

youtube

Apr 10, 2026 Jacob Krell

The Engagement Ratchet: How YouTube, Instagram, and Amazon Trained Users to Accept Less Control

Earlier this year, YouTube began rolling out a row of algorithmically recommended videos at the top of the Subscriptions page. The section, labeled ...

Cybersecurity

Apr 07, 2026 Suzu Labs

The AI Revolution: How Jobs Will Change by 2030

Host Phillip Wylie sits down with Nicolas Chaillan to discuss the sobering reality of AI replacement, the critical need for technical urgency in the ...

Generative AI

Apr 01, 2026 Hannah Perez

The Rosie Protocol: Is AI-Driven Personalized Medicine Finally Here?

In late 2024, Sydney tech entrepreneur Paul Conyngham was told his rescue dog, Rosie, had months to live. She was battling a tennis ball-sized mast ...

Cybersecurity

Mar 30, 2026 Suzu Labs

From Analog Hacks to Agentic AI: The Evolution of Offensive Security with Denis Calderone

The world of cybersecurity has undergone a massive transformation in just a few decades. In this episode of Simply Offensive, host Phillip Wylie is ...

Critical Infrastructure

Mar 30, 2026 Jacob Krell

While TSA Made Headlines, CISA Went Dark

The Department of Homeland Security has been partially shut down for over 45 days. In that time, 460 TSA officers have quit, absences at major ...

AI Security

Mar 30, 2026 Suzu Labs

The Purple Team Advantage: Bridging the Gap Between Hacking and Management with Chris Marks

In cybersecurity, we often operate in silos. The red team breaks things, the blue team fixes them, and management focuses on compliance. But what ...

Threat Intelligence

Mar 27, 2026 Jacob Krell

Claude Mythos and the Cybersecurity Risk That Was Already Here

On March 26, Anthropic confirmed the existence of Claude Mythos, an unreleased AI model described internally as "a step change" in capabilities, ...

Critical Infrastructure

Mar 26, 2026 Mike Bell

BPFdoor in Telecom Networks: The FCC Is Securing the Edge, but China's Hackers Are Already Past It

Rapid7's research reveals China-linked kernel implants deep inside telecom signaling infrastructure. Here's what BPFdoor is, how it evolved, and what ...

Cybersecurity

Mar 23, 2026 Hannah Perez

Securing the AI Frontier: Suzu Labs Sweeps 4 Global InfoSec Awards 2026

We are incredibly proud to announce a monumental achievement. At this year’s Global InfoSec Awards 2026, hosted by Cyber Defense Magazine, Suzu Labs ...

Cybersecurity

Mar 17, 2026 Suzu Labs

From Cockpits to Code: Josh Mason on Bridging the Gap Between Military and Cybersecurity

In the world of cybersecurity, we often talk about "gatekeeping" or the "skills gap," but rarely do we find individuals dedicated to building the ...

Cybersecurity

Mar 16, 2026 Phillip Wylie

Simply Offensive Podcast: The Future of Pentesting: AI, Automation, and Better Reporting with Dan DeCloss

The Future of Pentesting: AI, Automation, and Better Reporting with Dan DeCloss In this episode of Simply Offensive, Philip Wylie welcomes Dan ...

Critical Infrastructure

Mar 13, 2026 Denis Calderone

From Silence to Strike: Tracking Iran's Cyber Escalation in Real Time

On March 12, medical technology giant Stryker confirmed a cyberattack that wiped devices across 79 countries. The pro-Iran group Handala claimed ...

Social Engineering

Mar 09, 2026 Suzu Labs Intelligence

Internal Analysis: Even Realities G2 Smart Glasses Security & Privacy Investigation

Executive Summary Even Realities markets its G2 smart glasses as the privacy-conscious alternative to Meta Ray-Bans. The core pitch: no camera, no ...

Threat Intelligence

Mar 06, 2026 Mike Bell

The Company Reviewing Your Meta Glasses Footage Has a Security Problem

Last week, Swedish journalists revealed that Meta sends video footage from Meta Ray-Ban smart glasses to human data annotators at Sama, a San ...

CTF

Mar 03, 2026 Jacob Krell

The Death of the CTF: How Agentic AI Is Reshaping Competitive Hacking

View White Paper Abstract: Agentic AI systems are compressing competitive hacking timelines faster than the cybersecurity community has acknowledged. ...

Cybersecurity

Mar 03, 2026 Phillip Wylie

Simply Offensive Podcast: AI Killed the CTF Star with Jacob Krell

In this thought-provoking episode of Simply Offensive, host Philip Wylie sits down with Jacob Krell, a penetration tester and researcher at Suzu ...

Supply Chain Security

Feb 26, 2026 Hannah Perez

Anthropic and Claude: 2026 AI Powerhouse

In early 2026, the image of Anthropic as a cautious, safety-oriented "research lab" has effectively been replaced by its reality: a $380 billion ...

Cybersecurity

Feb 24, 2026 Phillip Wylie

Simply Offensive Podcast: Navigating AI's Challenges in Problem Solving with Darius Houle

In this episode of Simply Offensive, host Philip Wylie welcomes Darius Houle, an Application Security (AppSec) and Assurance expert at Trail of Bits. ...

Search & Filter