In a recent podcast interview with Cybercrime Magazine host, Heather Engel, Cimcor President and CEO, Robert E. Johnson, III discuss how organizations are starting to move away from treating IT operations and cybersecurity as two separate areas and are instead…
Tag: Security Boulevard
Distraction is the New Zero-Day: The Human Risk We Keep Ignoring
A few days ago, my friend Javvad Malik—a sharp voice in our industry and someone I trust—shared something that made me stop and think. Javvad, KnowBe4’s security awareness advocate, summed up the state of things beautifully: “Cyber risk is not…
Top CVEs & Vulnerabilities of August 2025- Risks, Impacts & Fixes
August 2025 saw critical CVEs surface, including high-impact flaws in WinRAR and Microsoft SharePoint. This blog highlights the most urgent vulnerabilities, their potential business risks, and the patch actions security teams should prioritize to stay ahead of threats. The post…
Patch Management vs Vulnerability Management: What’s the Difference?
Many organizations struggle with security gaps even after investing in different tools and processes. One of the most common reasons for breaches is the presence of unresolved weaknesses in systems…. The post Patch Management vs Vulnerability Management: What’s the Difference?…
The AI Vulnerability Crisis is Coming — Can Defenders Catch Up?
AI is becoming an autonomous exploit engine. Experts warn of an AI-driven vulnerability crisis — but resilience, alliances, and action can blunt the impact. The post The AI Vulnerability Crisis is Coming — Can Defenders Catch Up? appeared first on…
Who is a Chief Compliance Officer?
The role of a chief compliance officer (CCO) has become indispensable for organizations operating in diverse industries. The CCO is responsible for ensuring that the organization adheres to internal policies as well as external legal and regulatory requirements. This role…
Scammer Spoofs a City Supplier, Steals $1.5 Million from Baltimore
A scammer that spoofed a city supplier convinced employees in the City of Baltimore’s Accounts Payable Department to send two EFT payments totaling more than $1.5 million to a bank account they controlled and illustrating the ongoing threat posed by…
Achieving Stability in NHI Lifecycle Management
Why Is NHI Lifecycle Management Essential? Are you ever curious why managing Non-Human Identities (NHIs) and their secrets is considered a crucial aspect of cybersecurity? It’s not just about maintaining secure systems; it’s about creating stability throughout the entire lifecycle…
Are You Fully Satisfied with Your Secrets Rotation?
Are Your Secrets Rotation Standards Meeting Expectations? Does your organization have a comprehensive secrets rotation system that instills confidence and satisfaction? Secrets rotation is a pivotal aspect of data management, especially concerning Non-Human Identities (NHIs). NHIs and secrets security management…
Understanding the Two Sides of Infostealer Risk: Employees and Users
Co-authored by Constella Intelligence and Kineviz Infostealer malware dominates today’s cyber threat landscape. Designed to extract credentials, cookies, session tokens, autofill data, and other forms of digital identity, infostealers operate silently, persistently, and at industrial scale. They are no longer…
Super-Apps and Embedded Finance: The Innovation Battle for Customer Wallets
Forget downloading ten different apps for ten different needs. In 2025, the battle for your customer’s wallet isn’t happening in banks or retail stores. It…Read More The post Super-Apps and Embedded Finance: The Innovation Battle for Customer Wallets appeared first…
Penetration testing: All you need to know
At a breakneck pace, and with it, cyber threats are becoming more sophisticated and harder to detect. Organizations today face a heightened risk of data breaches, system compromises, and sophisticated cyberattacks. To counteract these risks, penetration testing has become a…
South Korea AI Act
What is the South Korea AI Act? South Korea’s Framework Act on the Development of Artificial Intelligence and Creation of a Trust Foundation, often referred to simply as the AI Framework Act or the AI Basic Act, is the country’s…
Hackers Threaten Google Following Data Exposure
A recent breach involving a third-party Salesforce system used by Google has sparked an unusual escalation. Although no Gmail inboxes, passwords, or internal Google systems were accessed, attackers gained entry to a sales database that included names, phone numbers, email…
United States Labor Day 2025
Permalink The post United States Labor Day 2025 appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article: United States Labor Day 2025
Convenience vs. Privacy: Can We Have Both?
In this episode, we discuss if the convenience of modern technology compromises our privacy. Inspired by a thought-provoking Reddit post, we explore how everyday actions like saving passwords, enabling location tracking, and using cloud backups put our personal data at…
Russian-Linked ATP29 Makes Another Run at Microsoft Credentials
Amazon researchers disrupted a watering hole campaign by Russian-linked cyberespionage group APT29 designed to use compromised websites to trick users into giving the threat actors access to their Microsoft accounts and data via the tech giant’s device code authentication flow.…
AI-Powered Cybercrime Is Here: Massive Breaches & Dark Web Dumps
Cyber threats are escalating fast—and now AI is making them faster, smarter, and more dangerous than ever. As August 2025 wraps up, here’s what you need to know: ✅ Anthropic reports that cybercriminals are using Claude AI to automate data…
BSidesSF 2025: Centralizing Egress Access Controls Across A Hybrid Environment At Block
Creator, Author and Presenter: Ramesh Ramani Our deep appreciation to Security BSides – San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView…
TransUnion Data Breach Exposes 4.5 Million Records Through Third-Party App
TransUnion, one of the nation’s three major credit reporting agencies, has confirmed a cyberattack that exposed sensitive personal information for more than 4.4 million U.S. consumers. The incident, discovered on July 30, traces back to vulnerabilities in a third-party application…