Session 5D: Side Channels 1 Authors, Creators & Presenters: Jonas Juffinger (Graz University of Technology), Fabian Rauscher (Graz University of Technology), Giuseppe La Manna (Amazon), Daniel Gruss (Graz University of Technology) PAPER Secret Spilling Drive: Leaking User Behavior through SSD…
Category: Security Boulevard
2025: The Year Cybersecurity Crossed the AI Rubicon
How can we describe the past year in cybersecurity? No doubt, AI was front and center in so many conversations, and now there’s no going back. Here’s why. The post 2025: The Year Cybersecurity Crossed the AI Rubicon appeared first…
How does NHI support the implementation of least privilege?
What Are Non-Human Identities and Why Are They Essential for Cybersecurity? Have you ever pondered the complexity of cybersecurity beyond human interactions? Non-Human Identities (NHIs) are becoming a cornerstone in securing digital environments. With the guardians of machine identities, NHIs…
How are secrets scanning technologies getting better?
How Can Organizations Enhance Their Cloud Security Through Non-Human Identities? Have you ever wondered about the unseen challenges within your cybersecurity framework? Managing Non-Human Identities (NHIs) and their associated secrets has emerged as a vital component in establishing a robust…
Can Agentic AI provide solutions that make stakeholders feel assured?
How Are Non-Human Identities Transforming Cybersecurity Practices? Are you aware of the increasing importance of Non-Human Identities (NHIs)? Where organizations transition towards more automated and cloud-based environments, managing NHIs and secrets security becomes vital. These machine identities serve as the…
Why are companies free to choose their own AI-driven security solutions?
What Makes AI-Driven Security Solutions Crucial in Modern Cloud Environments? How can organizations navigate the complexities of cybersecurity to ensure robust protection, particularly when dealing with Non-Human Identities (NHIs) in cloud environments? The answer lies in leveraging AI-driven security solutions,…
NDSS 2025 – A Systematic Evaluation Of Novel And Existing Cache Side Channels
Session 5D: Side Channels 1 Authors, Creators & Presenters: Fabian Rauscher (Graz University of Technology), Carina Fiedler (Graz University of Technology), Andreas Kogler (Graz University of Technology), Daniel Gruss (Graz University of Technology) PAPER A Systematic Evaluation Of Novel And…
The Autonomous MSSP: How to Turn XDR Volume into a Competitive Advantage
Turn XDR volume into revenue. Morpheus investigates 100% of alerts and triages 95% in under 2 minutes, letting MSSPs scale without adding headcount. The post The Autonomous MSSP: How to Turn XDR Volume into a Competitive Advantage appeared first on…
Friday Squid Blogging: Giant Squid Eating a Diamondback Squid
I have no context for this video—it’s from Reddit—but one of the commenters adds some context: Hey everyone, squid biologist here! Wanted to add some stuff you might find interesting. With so many people carrying around cameras, we’re getting more…
NDSS 2025 – KernelSnitch: Side Channel-Attacks On Kernel Data Structures
Session 5D: Side Channels 1 Authors, Creators & Presenters: Lukas Maar (Graz University of Technology), Jonas Juffinger (Graz University of Technology), Thomas Steinbauer (Graz University of Technology), Daniel Gruss (Graz University of Technology), Stefan Mangard (Graz University of Technology) PAPER…
Microsoft Expands its Bug Bounty Program to Include Third-Party Code
In a nod to the evolving threat landscape that comes with cloud computing and AI and the growing supply chain threats, Microsoft is broadening its bug bounty program to reward researchers who uncover threats to its users that come from…
What Tech Leaders Need to Know About MCP Authentication in 2025
MCP is transforming AI agent connectivity, but authentication is the critical gap. Learn about Shadow IT risks, enterprise requirements, and solutions. The post What Tech Leaders Need to Know About MCP Authentication in 2025 appeared first on Security Boulevard. This…
Three New React Vulnerabilities Surface on the Heels of React2Shell
CVE-2025-55183, CVE-2025-55184, and CVE-2025-67779 require immediate attention The post Three New React Vulnerabilities Surface on the Heels of React2Shell appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article: Three New React Vulnerabilities…
As Capabilities Advance Quickly OpenAI Warns of High Cybersecurity Risk of Future AI Models
OpenAI warns that frontier AI models could escalate cyber threats, including zero-day exploits. Defense-in-depth, monitoring, and AI security by design are now essential. The post As Capabilities Advance Quickly OpenAI Warns of High Cybersecurity Risk of Future AI Models appeared…
Funding of Israeli Cybersecurity Soars to Record Levels
Israeli cybersecurity firms raised $4.4B in 2025 as funding rounds jumped 46%. Record seed and Series A activity signals a maturing, globally dominant cyber ecosystem. The post Funding of Israeli Cybersecurity Soars to Record Levels appeared first on Security Boulevard.…
Microsoft Expands Its Bug Bounty Program to Include Third-Party Code
In nod to the evolving threat landscape that comes with cloud computing and AI and the growing supply chain threats, Microsoft is broadening its bug bounty program to reward researchers who uncover threats to its users that come from third-party…
Prompt Injection Can’t Be Fully Mitigated, NCSC Says Reduce Impact Instead
The NCSC warns prompt injection is fundamentally different from SQL injection. Organizations must shift from prevention to impact reduction and defense-in-depth for LLM security. The post Prompt Injection Can’t Be Fully Mitigated, NCSC Says Reduce Impact Instead appeared first on…
Cyber Risk is Business Risk: Embedding Resilience into Corporate Strategy
To transform cyber risk into economic advantage, leaders must treat cyber as a board-level business risk and rehearse cross-border incidents with partners to build trust. The post Cyber Risk is Business Risk: Embedding Resilience into Corporate Strategy appeared first on Security Boulevard. This article has…
React Fixes Two New RSC Flaws as Security Teams Deal with React2Shell
As they work to fend off the rapidly expanding number of attempts by threat actors to exploit the dangerous React2Shell vulnerability, security teams are learning of two new flaws in React Server Components that could lead to denial-of-service attacks or…
3 Compliance Processes to Automate in 2026
For years, compliance has been one of the most resource-intensive responsibilities for cybersecurity teams. Despite growing investments in tools, the day-to-day reality of compliance is still dominated by manual, duplicative tasks. Teams chase down screenshots, review spreadsheets, and cross-check logs,…