How Secure Are Your Organization’s Machine Identities? Have you ever considered the sheer number of machine identities roaming within your organization’s networks, each carrying sensitive secrets that require careful management? Where threats are evolving faster than ever before, Non-Human Identities…
Category: Security Boulevard
DEF CON 33: One Modem To Brick Them All -Vulns In EV Charging Comms
Creators, Authors and Presenters: Jan Berens, Marcell Szakaly Our sincere appreciation to DEF CON, and the Creators/Presenters/Authors for publishing their timely DEF CON 33 outstanding content. Originating from the conference’s events located at the Las Vegas Convention Center; and via…
MY TAKE: Here’s how content farms, click-baiters are leveraging GenAI to smother authentic content
Earlier this year, my YouTube feed began filling up with provocative videos dressed up to sound authoritative but somehow off. Related: The cadences of GenAI disruption A gravelly narrator whispered Shaolin monk longevity secrets over looping monastery footage. Another voice…
Building a Scalable Secrets Management Framework
Why is Scalable Secrets Management the Key to Robust Cybersecurity? Where the interconnectivity of technology expands, managing and protecting Non-Human Identities (NHIs) becomes a crucial factor in securing organizational data. The question arising now is: what role does a scalable…
Stay Ahead with Advanced NHI Monitoring
How Secure is Your Organization’s Cloud Environment? Could your organization be overlooking the vital role of Non-Human Identities (NHIs) in cybersecurity? Where cloud environments are ubiquitous, ensuring their security is paramount. NHIs, which are essentially machine identities, facilitate critical functions…
Gain Confidence with Stronger Cloud Defenses
How Can Non-Human Identities Fortify Your Cloud Security Strategy? When thinking about cybersecurity, how often do you consider the role of Non-Human Identities (NHIs)? With more organizations migrate to cloud-based systems, managing these machine identities has become critical to maintaining…
Randall Munroe’s XKCD ‘’Pull”
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘’Pull” appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article: Randall Munroe’s XKCD…
DEF CON 33: Retro Tech Community & Badge Life LIVE
Creators, Authors and Presenters: d3dbot x psyop x grrrizzzz Our sincere appreciation to DEF CON, and the Creators/Presenters/Authors for publishing their timely DEF CON 33 outstanding content. Originating from the conference’s events located at the Las Vegas Convention Center; and…
Why DevOps Still Struggles with Least Privilege (Even in 2025)
5 min readWhile least privilege remains a fundamental security principle, DevOps teams consistently fail to apply it to non-human identities, like CI/CD pipelines and applications. This struggle stems from a reliance on outdated, static credentials and a tension between development…
Frictionless Security: What DevOps Teams Really Need from Identity Management
5 min readThe core challenge isn’t secrets; it’s access. Instead of treating access as a secrets problem, teams should treat it as an identity problem. This simple shift flips the script entirely. With ephemeral credentials tied to workload identity, authentication…
Why Human IAM Strategies Fail for Machines
5 min readThe core problem is that human IAM was never built for machine scale or behavior… The amount of non-human identities continues growing—10 to 1 will turn into 45 to 1, then 100 to 1, then 200 to 1.…
Why Attackers Still Hoard Encrypted Data (and Why That Should Worry You)
Ron Zayas, CEO of Ironwall, tackles a sobering question: why do attackers keep harvesting encrypted data—and why are organizations so complacent about it? Zayas notes that it’s not just “foreign” apps scooping up information; domestic platforms often collect just as…
When Business Moves Fast, Security Gets Left Behind in M&A
Mergers and acquisitions (M&A) often unfold at breakneck speed, driven by business opportunity and shareholder expectations. But as Dave Lewis, global advisory CISO at 1Password, explains, cybersecurity risks are still too often left as an afterthought. Lewis points to a…
Why Attackers Still Hoard Encrypted Data
Ron Zayas, CEO of Ironwall, tackles a sobering question: why do attackers keep harvesting encrypted data—and why are organizations so complacent about it? Zayas notes that it’s not just “foreign” apps scooping up information; domestic platforms often collect just as…
New Wave of Self-Replicating NPM Malware Exposes Critical Gaps in Software Supply Chain Security
The Shai-Hulud NPM worm highlights rising open-source supply chain threats. Secure builds with SBOMs, MFA, signed packages, and zero-trust defenses. The post New Wave of Self-Replicating NPM Malware Exposes Critical Gaps in Software Supply Chain Security appeared first on Security…
Recap of Our “Passkeys Pwned” Talk at DEF CON
What the ”Passkeys Pwned” talk is and isn’t about, and what it reveals about the importance of correct implementation of the standard The Passkeys Pwned Talk Summary As outlined in the DEF CON abstract below, the Passkeys Pwned attack highlights a passkey…
News alert: Palo Alto flags threats that evade Secure Web Gateways — echoing SquareX research
Palo Alto, Calif., Sept. 18, 2025, CyberNewswire: SquareX first discovered and disclosed Last Mile Reassembly attacks at DEF CON 32 last year, warning the security community of 20+ attacks that allow attackers to bypass all major SASE/SSE solutions and smuggle…
The Messy Middle: Where SOC Automation Breaks (and How Morpheus AI Fixes It)
SOC automation breaks in the messy middle of triage and investigation. Learn how Morpheus AI fixes it with transparent, adaptive playbooks. The post The Messy Middle: Where SOC Automation Breaks (and How Morpheus AI Fixes It) appeared first on D3…
DEF CON 33: AIxCC With ShellPhish
Creators, Authors and Presenters: Silk Interviews Members ShellPhish Our sincere appreciation to DEF CON, and the Creators/Presenters/Authors for publishing their timely DEF CON 33 outstanding content. Originating from the conference’s events located at the Las Vegas Convention Center; and via…
What’s New in Tenable Cloud Security: A More Personalized, Global and Comprehensive Experience
Check out the latest enhancements to our CNAPP product, including a more intuitive user experience with customizable dashboards, and stronger workload protection and data security. These improvements are designed to help you personalize workflows and gain deeper visibility across workloads,…