5 min readWhile least privilege remains a fundamental security principle, DevOps teams consistently fail to apply it to non-human identities, like CI/CD pipelines and applications. This struggle stems from a reliance on outdated, static credentials and a tension between development…
Tag: Security Boulevard
Frictionless Security: What DevOps Teams Really Need from Identity Management
5 min readThe core challenge isn’t secrets; it’s access. Instead of treating access as a secrets problem, teams should treat it as an identity problem. This simple shift flips the script entirely. With ephemeral credentials tied to workload identity, authentication…
Why Human IAM Strategies Fail for Machines
5 min readThe core problem is that human IAM was never built for machine scale or behavior… The amount of non-human identities continues growing—10 to 1 will turn into 45 to 1, then 100 to 1, then 200 to 1.…
Why Attackers Still Hoard Encrypted Data (and Why That Should Worry You)
Ron Zayas, CEO of Ironwall, tackles a sobering question: why do attackers keep harvesting encrypted data—and why are organizations so complacent about it? Zayas notes that it’s not just “foreign” apps scooping up information; domestic platforms often collect just as…
When Business Moves Fast, Security Gets Left Behind in M&A
Mergers and acquisitions (M&A) often unfold at breakneck speed, driven by business opportunity and shareholder expectations. But as Dave Lewis, global advisory CISO at 1Password, explains, cybersecurity risks are still too often left as an afterthought. Lewis points to a…
Why Attackers Still Hoard Encrypted Data
Ron Zayas, CEO of Ironwall, tackles a sobering question: why do attackers keep harvesting encrypted data—and why are organizations so complacent about it? Zayas notes that it’s not just “foreign” apps scooping up information; domestic platforms often collect just as…
New Wave of Self-Replicating NPM Malware Exposes Critical Gaps in Software Supply Chain Security
The Shai-Hulud NPM worm highlights rising open-source supply chain threats. Secure builds with SBOMs, MFA, signed packages, and zero-trust defenses. The post New Wave of Self-Replicating NPM Malware Exposes Critical Gaps in Software Supply Chain Security appeared first on Security…
Recap of Our “Passkeys Pwned” Talk at DEF CON
What the ”Passkeys Pwned” talk is and isn’t about, and what it reveals about the importance of correct implementation of the standard The Passkeys Pwned Talk Summary As outlined in the DEF CON abstract below, the Passkeys Pwned attack highlights a passkey…
News alert: Palo Alto flags threats that evade Secure Web Gateways — echoing SquareX research
Palo Alto, Calif., Sept. 18, 2025, CyberNewswire: SquareX first discovered and disclosed Last Mile Reassembly attacks at DEF CON 32 last year, warning the security community of 20+ attacks that allow attackers to bypass all major SASE/SSE solutions and smuggle…
The Messy Middle: Where SOC Automation Breaks (and How Morpheus AI Fixes It)
SOC automation breaks in the messy middle of triage and investigation. Learn how Morpheus AI fixes it with transparent, adaptive playbooks. The post The Messy Middle: Where SOC Automation Breaks (and How Morpheus AI Fixes It) appeared first on D3…
DEF CON 33: AIxCC With ShellPhish
Creators, Authors and Presenters: Silk Interviews Members ShellPhish Our sincere appreciation to DEF CON, and the Creators/Presenters/Authors for publishing their timely DEF CON 33 outstanding content. Originating from the conference’s events located at the Las Vegas Convention Center; and via…
What’s New in Tenable Cloud Security: A More Personalized, Global and Comprehensive Experience
Check out the latest enhancements to our CNAPP product, including a more intuitive user experience with customizable dashboards, and stronger workload protection and data security. These improvements are designed to help you personalize workflows and gain deeper visibility across workloads,…
CrowdStrike Aims to Define New Security Model Based on AI Agents
CrowdStrike unveiled its Falcon Agentic Security Platform at Fal.Con 2025, ushering in the “agentic era of cybersecurity.” With AI-powered agents, unified data governance, and threat intelligence, the platform aims to counter adversaries exploiting AI to accelerate attacks, securing identities, IT,…
The Quality Era: How CISA’s Roadmap Reflects Urgency for Modern Cybersecurity
The post The Quality Era: How CISA’s Roadmap Reflects Urgency for Modern Cybersecurity appeared first on AI Security Automation. The post The Quality Era: How CISA’s Roadmap Reflects Urgency for Modern Cybersecurity appeared first on Security Boulevard. This article has…
DEF CON 33: Torvik From Tulip Tree Tech
Creators, Authors and Presenters: Silk, Torvik Our sincere appreciation to DEF CON, and the Creators/Presenters/Authors for publishing their timely DEF CON 33 outstanding content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations…
The Hidden War Above: How GPS Jamming Exposes Our Digital Vulnerabilities
Every day, thousands of flights cross the skies above the Baltic Sea. Pilots expect their GPS systems to guide them safely through busy air corridors, just as they have for decades. But since Russia’s invasion of Ukraine in 2022, something…
Now Live: Monetize AI Traffic With DataDome & TollBit Integration
The DataDome + TollBit integration is now live. Start detecting, controlling, and monetizing AI traffic on your site in minutes—no dev work required. The post Now Live: Monetize AI Traffic With DataDome & TollBit Integration appeared first on Security Boulevard.…
How Blue Cube Secured Critical Client Communications with EasyDMARC
Originally published at How Blue Cube Secured Critical Client Communications with EasyDMARC by Sona Mirzoyan. About the Customer Headquarters: United Kingdom, BrentfordFounded: 2003Website: … The post How Blue Cube Secured Critical Client Communications with EasyDMARC appeared first on EasyDMARC. The post How…
AI in Schools: Pros, Cons, And Benefits For Teachers
If you ask K-12 teachers what they think about artificial intelligence (AI), some express optimism, while others are cautious, even worried. AI is a pressing topic today, and educators are at the center of its development for classroom environments. When…
Who Owns Threat and Exposure Management in Your Organization?
A study conducted by Enterprise Strategy Group, now part of Omdia, in partnership with Tenable shows responsibility for exposure management scattered across multiple teams with conflicting priorities. It’s time to build the team of the future — discover what ‘good’…