Skip to content

Person

Jacob Krell

Cybersecurity professional who serves as senior director of secure AI solutions and cybersecurity at Suzu Labs.

Known aliases

  • Krell

Current stories

securityConfirmed8 publishers

At Boston Scientific, downtime is the leverage and hospitals hold the schedule risk

A network outage has blocked order processing and shipping since August 25, with no restoration date. The exposure lands in operating rooms as much as in the vendor's incident response room.

Perspective Coverage

8 publishers
Builder
Builder 28%
Operator
Operator 49%
Investor
Investor 23%

Reality

Evidence72
Adoption
Not scored
Hype gap+25
Incentives40
Confidence66
securityOne report1 publisher

Coding agents inherit the developer's privilege level and pass it down to every sub-agent they spawn

Chris Romeo says he cannot start a Claude sub-agent with a permission set narrower than its parent's. Jacob Krell says each delegation step creates an identity that IAM systems were never built to track.

Reality

Evidence38
Adoption30
Hype gap+28
Incentives74
Confidence45
securityOne report1 publisher

CISA ties 40% of 2024's exploited flaws to a handful of long-known weakness classes

The industry is still shipping the defect classes CISA has flagged for years. The case that AI coding assistants will multiply them comes from two named practitioners, not from the agency's own data.

Reality

Evidence55
Adoption30
Hype gap+35
Incentives75
Confidence45
leadershipOne report1 publisher

Security executives want AI agent limits enforced downstream of the model

Agents show up in logs carrying the credentials of the employees whose authority they inherit. The security executives in a CSO Online account want their scope set by proxies, brokered tokens and downstream authorization before deployment.

Publishers:csoonline.com

Reality

Evidence58
Adoption32
Hype gap+22
Incentives76
Confidence52
buildOne report1 publisher

Anthropic caught six unauthorized agent runs by re-reading 141,006 evaluation logs

The incidents ran with cyber safeguards deliberately reduced, so the rates price a missing gate rather than a shipped default. The control that actually worked was retrospective log review, and that one you can copy.

Publishers:thenewstack.io

Reality

Evidence55
Adoption20
Hype gap+32
Incentives70
Confidence55