Security Boulevard

It’s that time of year again: Verizon Business has released the 2025 edition of the Data Breach Investigations Report (DBIR), its 18th-annual report on cybercrime. The DBIR is famous for how well it captures the current state of things, analyzing tens of thousands of security incidents to understand the current threat landscape.

The post Verizon 2025 DBIR: Third-party software risk takes the spotlight appeared first on Security Boulevard.

Harness today unfurled a cloud web application and application programming interface (API) protection (WAAP) platform that makes it simpler for security operation (SecOps) teams to defend application environments.

The post Harness Adds Traceable WAAP to Secure Web Apps and APIs appeared first on Security Boulevard.

Authors/Presenters: Arun Vishwanath, Fred Heiding, Simon Lermen

Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel.

Permalink

The post BSidesLV24 – Ground Truth – Devising And Detecting Spear Phishing appeared first on Security Boulevard.

Learn how SonarQube detected a Cross-Site Scripting (XSS) vulnerability in Grafana, a popular open-source data observability platform.

The post Data in Danger: Detecting Cross-Site Scripting in Grafana appeared first on Security Boulevard.

As RSAC 2025 convenes next week in San Francisco, digital trust is poised to take center stage.

Related: PKI and the IoT cloud

One quiet but consequential development now taking root in the financial sector could prove pivotal: the emergence … (more…)

The post RSAC Fireside Chat: X9 PKI emerges to help financial sector interoperate, get ready for ‘Q-Day’ first appeared on The Last Watchdog.

The post RSAC Fireside Chat: X9 PKI emerges to help financial sector interoperate, get ready for ‘Q-Day’ appeared first on Security Boulevard.

HYCU introduces R-Shield to provide comprehensive cyber resilience across SaaS, cloud, and on-premises environments as organizations face growing supply chain attacks.

The post HYCU Tackles SaaS Data Protection With New R-Shield Solution appeared first on Security Boulevard.

Organizations must avoid relying solely on traditional backups because ransomware attacks are occurring more often and becoming more expensive and complex.

The post Beyond Backups: Building a Ransomware Response Playbook That Works appeared first on Security Boulevard.

As cyber threats in healthcare continue to evolve, GitGuardian strengthens its commitment to the sector by joining Health-ISAC and offering members enhanced secrets detection capabilities to protect sensitive data.

The post GitGuardian Joins Health-ISAC: Strengthening Cybersecurity in Healthcare Through Secrets Detection appeared first on Security Boulevard.

CTEM consistsof multiple processes to help organizations scope, discover, prioritize, validate, and mobilize to mitigate risk. It also includes capabilities like Threat-Informed Defense (TID) and Breach and Attack Simulation (BAS) that work together to advance your CTEM strategy.  

The post All Exposures Aren’t Equal: The More Effective Path to CTEM appeared first on Security Boulevard.

Adversary-in-the-middle fraud (AiTM) represents a significant, ongoing challenge for businesses, with tactics like email hijacking, AI attacks and account takeovers becoming increasingly complex.

The post Adversary-in-the-Middle Attacks Persist – Strategies to Lessen the Impact  appeared first on Security Boulevard.

Let's explore how four key elements can significantly improve how organizations find and use compliance documentation. 

The post Why Smart Retrieval is Critical for Compliance Success  appeared first on Security Boulevard.

Our excessive reliance on technology has disabled us from crossing the barriers to experience, sense, and relate with others the way we used to. 

The post The Human Advantage in the Age of Technological Uncertainties appeared first on Security Boulevard.

Is your email health hurting deliverability? Learn how to fix bounce rates, set up SPF, DKIM, and DMARC, and boost inbox placement with this step-by-step guide.

The post Email Health Checklist: How to Boost Inbox Placement appeared first on Security Boulevard.

Apr 23, 2025 - - AI security is a crtical issue in today’s landscape. With developers, teams, employees and lines of business racing ahead to compete, security teams consistently fall short in an ecosystem where new risks are rising up every day. The result is that we are seeing an unprecedented amount of AI breaches in 2025.According to Capgemini, 97% of organizations suffered incidents related to generative AI initiatives in the past year. It is unclear whether these incidents were all breaches, or whether some were merely vulnerabilities, however, around half of these organizations reported the loss impact would be estimated at $50M+ per incident. This shows the scale of data involved, as well as that each incident would indicate a systemic flaw, likely exposing an entire data set.So how do developers and security teams work together to continue innovating in the AI space, without sacrificing security? The issue is complicated and requires a multilayered approach.From Code to Cloud…One of the best ways to ensure your AI is secure is to start in the design phase. At FireTail, we talk a lot about protecting your cyber assets from “code to cloud.” Designing your models with security in mind enables you to stay ahead of threats instead of having to play a constant game of whackamole when new risks pop up. Security should be a prime concern from code to cloud.Development teams and security teams need to work together on the design phase to ensure the mutual success of them both. We’ve talked before about the growing developer/security team gap, but in order to have a holistic security posture, this gap needs to be bridged from the beginning by involving security teams in the early stages of design and development.Visibility- If you can't see it, you can't secure it.It is common knowledge that visibility and discovery are the cornerstones of any strong cybersecurity posture. Having full visibility allows security teams to stay ahead of threats by spotting vulnerabilities and misconfigurations before they pop up.Everyone in your team should know what AI models you are using, what they are being used for, what information is okay to input into them and what is not, et cetera. And security teams need to be vigilant in monitoring AI interactions and activity. A centralized dashboard can help to keep all of these interactions in one place, in order to ensure nothing slips between the cracks.MonitoringAny strong AI security posture should involve constant monitoring to see how things change. Usage cases for AI change over time, with new technologies, et cetera, so it is essential to stay on top of which models are being used for what functions in your team, and what data is being fed to them. Visibility is only the first step into keeping track of your AI use and interactions. But with consistent monitoring and alerting systems, security teams and developers alike can see changes in real-time and respond immediately, staying ahead of threats.The Challenges of AI LoggingAI logging is one of the biggest challenges for AI security. One of the reasons for this is that new AI providers will often create novel log formats based on their own LLMs. Security teams can try to learn about and understand their known LLMs, but each time they adopt a new model, they have to essentially relearn the wheel, slowing the pace of innovation. As tedious as it may seem, the only way to stay on top of logging is to log each LLM on a case-by-case basis, to avoid errors and ensure that each log is accurate before moving on. Prioritizing accuracy over efficiency may seem counterintuitive, but in the long run, if teams do not pay attention to proper logging protocols, they will end up wasting more time fixing mistakes and spending just as long as they would have meticulously doing it right in the first place.ComplianceMany organizations rush to test AI with their own data, but some of this data may be subject to regulatory compliance requirements.So sending this data to third-parties, such as an LLM, may require user consent.Compliance frameworks such as GDPR and CCPA (California Consumer Protection Act) dictate terms around things like data sharing, which developers may not realize they are subject to until it’s too late. Often specific criteria slip through the cracks when they are listed in small print, and do not result in immediate consequences.So what is the solution, with compliance constantly updating and changing? The best method for ensuring compliance is to continually monitor your landscape and every interaction as you go. It may seem tedious, but it’s the only surefire way to avoid consequences.The OWASP Top Ten for LLMThe OWASP Top Ten Risk List for LLMs was assembled by AI security experts and based on real-world understanding of threats and vulnerabilities. The list provides information and mitigation techniques for the top ten most urgent risks to LLMs today, from prompt injection to sensitive information disclosure, and more. The OWASP LLM Top Ten can serve as a risk model for teams to measure their LLMs against.While the OWASP Top Ten list is extensive, it is not complete nor is it a framework that teams can follow. However, it is a great jumping off point for developers and security teams alike to learn about the most prevalent risks in the ecosystem and how to protect against them.FireTailFireTail’s AI security platform can help developers and security teams alike stay ahead of threats. FireTail provides a centralized dashboard to see all your AI interactions and activity, as well as your API endpoints and more so you can stay on top of visibility and discovery from the design phase onward. To see how it works, set up a demo or try the platform out for free, here.

The post Securing AI Innovation Without Sacrificing Pace – FireTail Blog appeared first on Security Boulevard.

What Makes for Effective IAM Strategies? IAM (Identity and Access Management) strategies have become a cornerstone element, focusing on the protection of critical assets through superior access control and user authentication. But the question is, how can organizations incorporate IAM into their cybersecurity strategy to create a safer, more reliable digital environment? Understanding the Role […]

The post Gain Confidence in Your IAM Strategies appeared first on Entro.

The post Gain Confidence in Your IAM Strategies appeared first on Security Boulevard.

Why is Proactive Cybersecurity Crucial? Where machine identities take center stage, the need for advanced secrets management is more crucial than ever. The rise of key management failures, token compromises, and password leaks are some of the telltale signs of a flawed cybersecurity strategy. With an alarming increase in data breaches, how can organizations stay […]

The post Stay Proactive with Advanced Secrets Management appeared first on Entro.

The post Stay Proactive with Advanced Secrets Management appeared first on Security Boulevard.

Implementing Strategic Non-Human Identity Management for Sensitive Data Protection Are your organization’s secrets safe? How comprehensive is your strategy for securing your Non-Human Identities (NHIs) and their secrets? Businesses must aim to eliminate data leaks and security breaches by incorporating NHI and Secrets management as a core part of their cybersecurity strategy. Understanding Non-Human Identities […]

The post Are Your Secrets Properly Protected? appeared first on Entro.

The post Are Your Secrets Properly Protected? appeared first on Security Boulevard.

Something happened this weekend — starting on Monday my cellphone has been lighting up with unknown callers — a 30x increase! 

I rarely give out the number so I assume one of the following:

1. Ended up on a cybercriminal call-list because of a Data Breach from one of the few vendors that actually do have my cell number. Might have been Hertz or perhaps one of the databases on Oracle. Could be an unannounced breach. Not sure.
2. Cybersecurity sales vendors, preparing for RSA somehow acquired my number as part of a purchased marketing list (if I ever find out who did this I will call them out and advise everyone to never use their products), making a massive unethical call campaign that I somehow got caught up in.
3. Perhaps a Nation State actor that I perturbed is seeking to compromise my phone. I have been talking and doing media interviews calling out aggressive state sponsored hacking from China, Russia, North Korea, and Iran. The calls are highly persistent, even though they are not getting anywhere. Given the vastly dispersed number range (looks to be a prodigious use of spoofed CallerID numbers) they are determined even though I do not answer. A sales team or criminal should have moved on by now.

I do find it amusing and intellectually intriguing, from a cybersecurity perspective! 

- So far I see a 30x increase in calls, all starting Monday
- A huge range of numbers, one after the other but never at the same time
- All the numbers are from the US. Appears to be spoofed Caller ID numbers
- Never leaves a voicemail
- Are not sending SMS text messages — which is interesting…
- I don’t see any equitable rise in email phishing, this is only phone calls

1. I NEVER answer my cell unless it is a number I know. Never. I follow a whitelist methodology when it comes to calls
2. I immediately BLOCK the number. Yup, I force them to spoof another CallerID number
3. If a salesperson does cold-call my cell I make a note and will NEVER use their products
4. Shields-Up! Now I am on-guard. 

• I am paying extra attention to every DM, text, and email. I am even vetting known numbers. 
•  I am double checking all my OS & apps patch levels across my all my PC’s and servers, and will do an unscheduled full backup of critical data (that I store offline is a safe). 
• Lastly, I am scanning my systems, removing any old or unneeded apps, and scrutinizing every running Process and device on my network.

…these are all things I like to do anyways, so it really is no bother. 

Overall, it has been interesting and I am so tempted to answer a call to just to investigate. But that would be in opposition to what I preach. 

Anyone else experiencing such a flood of undesired calls the past few days?

The post Massive Increase to Unwanted Cell Calls appeared first on Security Boulevard.

At IRONSCALES, we believe trust is the bedrock of every business conversation. Whether it's a deal being negotiated, a partner being onboarded, or a CEO addressing their workforce, trust underpins it all. Yet, as we step into the era of Phishing 3.0, that trust is under siege.

The post Restoring Trust in Business Communications appeared first on Security Boulevard.

Author/Presenter: Emma Fang

Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel.

Permalink

The post BSidesLV24 – Common Ground – Securing Your Cloud-Native DevOps: A Zero Trust Approach appeared first on Security Boulevard.