Security Boulevard

Is Your Cybersecurity Strategy Adapting to the Latest Innovations in Cloud NHI Security? Cloud security is a paramount concern for every organization employing cloud-based services. It’s no secret that as technology advances, so does the sophistication of cyber threats. But have you paused to consider how the latest innovations in cloud Non-Human Identities (NHIs) security […]

The post What innovations are shaping cloud NHI security today? appeared first on Entro.

The post What innovations are shaping cloud NHI security today? appeared first on Security Boulevard.

Palo Alto, Calif., Mar. 18, 2025, CyberNewswire — SquareX, a pioneer in Browser Detection and Response (BDR) space, announced the launch of the “Year of Browser Bugs” (YOBB) project today, a year-long initiative to draw attention to the lack … (more…)

The post News alert: SquareX’s “Year of Browser Bugs” project exposes critical cybersecurity blind spots first appeared on The Last Watchdog.

The post News alert: SquareX’s “Year of Browser Bugs” project exposes critical cybersecurity blind spots appeared first on Security Boulevard.

A new study adds force to the argument that organizations need to look beyond vulnerability remediation when it comes to managing and mitigating software cyber-risk.

The post EPSS is not foolproof: Shift your AppSec beyond vulnerabilities appeared first on Security Boulevard.

Instructor: Carlos Fragoso

Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite []DEF CON 32]2 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post Recon Village – Maltego Community Workshop: OSINT & Custom Transforms appeared first on Security Boulevard.

 

Cyber
Crime Junkies podcast

Breaking
Down Risks in Cybersecurity – A great conversation on the Cyber Crime Junkies
podcast with David Mauro! 

We
covered so many different topics that the CISOs are struggling with:

•          Generative
  vs Agentic AI risks and opportunities

•          How
  cyber attackers leverage powerful tools like AI

•          Why
  defenders are slower than attackers in using AI

•          How
  attackers adapt with AI advantages

•          Why
  the value of security is a blind spot

•          The
  difficulty of cybersecurity metrics

•          Not
  all incidents are equal – preparedness matters

•          CISO
  and Board collaboration on common goals

•          Why
  CISOs are now business leaders

•          Different
  types of cybersecurity business value

•          Understanding
  the difference: Obstacles versus Opposition problems

•          The
  importance of good strategic goals

•          Why
  CISOs must be a good story teller

•          Examples
  of Board level metrics

Check
out the podcast on YouTube https://www.youtube.com/watch?v=Y60C5u6lzdI
and Spotify https://open.spotify.com/show/5y4U2v51gztlenr8TJ2LJs?si=537680ec262545b3&nd=1&dlsi=0bebeabd1b974a0d

 

Shameless
Plug: If you are interested in a CISO mentor or advisory help on the Board,
drop me a line. 

The post Breaking Down Risks in Cybersecurity appeared first on Security Boulevard.

Cyber threats are growing in sophistication, and adversaries are continually evolving their methods, targeting businesses, governments, and individuals with precision. For network defenders and fraud prevention teams, understanding this evolving landscape is critical to preempt attacks, mitigate risks, and protect key assets. But how do you stay ahead of these relentless attackers? The answer lies in HYAS's Infrastructure Intelligence.

This blog defines the concept of Infrastructure Intelligence, and establishes its components and how they empower security teams with unmatched visibility into adversary infrastructure. By leveraging Infrastructure Intelligence, organizations can turn raw data into actionable insights to detect, prevent, and respond to threats better than ever before.

Understanding Infrastructure Intelligence

At its core, Infrastructure Intelligence provides a detailed view of the infrastructure used by adversaries to plan and execute cyberattacks. It includes data related to adversary techniques and operations, enabling organizations to uncover critical details of attack campaigns.

Infrastructure Intelligence goes beyond traditional datasets offered by most threat intelligence feeds. It consolidates multiple layers of information and correlates them to deliver a contextualized understanding of cyber threats.

Here are the five key elements that define Infrastructure Intelligence:

1. Details on Attacker Infrastructure

The foundation of Infrastructure Intelligence lies in identifying the infrastructure footprint of malicious actors. This includes:

• Passive DNS Data: Historical records of DNS queries, enabling investigators to trace domains used in past attacks.
• WhoIs Records: Ownership and registration details of domains involved in malicious activities.
• Certificate Data: SSL certificates that shed light on the configuration of adversary infrastructure and shared resources.

Such information serves as the bedrock for tracing adversary origins and methods, and is not unlike the internet intelligence providers going back to the early days of companies like RiskIQ.

2. Enhanced Datasets for Advanced Threat Analysis

While traditional internet intelligence (e.g., passive DNS or WhoIs data) remains valuable, Infrastructure Intelligence extends far beyond this:

• Command and Control (C2) Infrastructure: Insights into adversaries’ malicious servers and tools used for attack coordination.
• Specialized WhoIs and Geospatial Data: Granular exclusive datasets offering unmatched visibility into attacker identify, location, and behavior.
• Internal Account Details: Data from private sources to link threat activity to specific aliases and unique IOCs.
• Malware Infrastructure: Comprehensive details on new malware infrastructure, providing teams with better information on malware families and related context to effectively block new and existing threats.

These expanded datasets enable investigators with an ability to detect and respond to threat actor activity with new levels of precision.

3. Correlating Data to Manufacture Better Context

Infrastructure Intelligence is not just about collecting data; it’s about connecting the dots. It correlates diverse intelligence "nuggets" and generates a more unified view of threats.

For example, imagine uncovering a domain linked to phishing attacks. Infrastructure Intelligence fingerprints past DNS resolutions and connects that domain to command-and-control servers, associated IP addresses, and related malware samples. It provides details about the identity and behavior of attackers that can lead directly to the take-down of their infrastructure and follow-on law enforcement actions. This correlation helps security teams see not just isolated events but the broader adversary ecosystem, and take active threat actors off the grid.

4. Answering Key Questions with a Proven "VRA" Model

Effective Infrastructure Intelligence provides answers to three critical questions commonly posed by threat hunters, fraud prevention investigators, and mission-specific teams in federal agencies and law enforcement:

• Verdicts on Indicators of Compromise (IOCs): Is this IP, domain, or observable malicious, benign, or suspicious? What evidence is available to support this assertion?
• Related Infrastructure: What other domains, IPs, or networks are associated with this activity? Connecting a piece of known-bad intelligence into a larger picture can be priceless in terms of protecting your organization.
• Threat Actor Information: Who is behind the attack? What can we ascertain about their goals and motivations, and also their behavior and identity? When attribution matters (I am looking at you fraud investigators and government types), there is no substitute for Infrastructure Intelligence.

This framework, often referred to as the "VRA" model (Verdict, Related Infrastructure, Actor Information), makes HYAS Infrastructure Intelligence essential in uncovering threats and proactively mitigating risks.

5. Geospatial and Behavioral Insights

To truly elevate your understanding of your adversary, Infrastructure Intelligence matrixes additional intelligence layers against the insights described above in several other ways:

• Geospatial Data: Pinpoint attacker locations to understand geographic footprints of campaigns and the spatial correlation of attacker activity with wifi networks, other adversaries, and more.
• Behavior-Based Indicators: Identify unusual network behaviors and patterns linked to adversarial activity.

These insights put the cherry on top of the Infrastructure Intelligence sundae, transforming raw technical data into actionable intelligence, and making it easier to act decisively to protect your organization or realize your operational mission.

Infrastructure Intelligence is Vital for Effective, Modern Cybersecurity

The value of HYAS Infrastructure Intelligence lies in its ability to provide actionable, real-time context that amplifies an organization’s security posture. Here’s why it matters:

1. Proactive Threat Mitigation

Unlike much of the noisy intelligence available to organizations today, Infrastructure Intelligence equips teams with the tools to detect attacks in their early stages (and even before they are launched) by shining a light on adversary infrastructure. By seeing these connections you can anticipate the attacker's moves and proactively block attacks.

2. Improved Incident Response

By correlating infrastructure data with threat actor activity, organizations can quickly identify root causes, contain threats, and reduce response times. This expedites investigations and enhances the speed and accuracy of remediation efforts.

3. Enhanced Decision-Making

With enriched datasets and contextual insights, decision-makers gain a comprehensive view of the cyber threat landscape. This ensures not only precise actions but also informed long-term strategies for enterprise cybersecurity.

4. Greater ROI on Security Investments

Infrastructure Intelligence acts as a force multiplier for existing security tools. Integrating these insights with SIEMs, threat hunting platforms, or DNS security solutions enhances ROI by improving overall effectiveness.

How Organizations Are Applying Infrastructure Intelligence

Real-world use cases illustrate the tangible benefits of this intelligence. Here are two examples:

1. Fraud Prevention in Financial Institutions

A major European bank prevented twice the amount of fraud it had previously by leveraging Infrastructure Intelligence to identify and block suspicious account infrastructure, saving millions in downstream fraud costs.

2. Defending Against APT Groups

Organizations dealing with advanced persistent threat (APT) campaigns, such as Typhoon cyber groups targeting critical infrastructure, have used Infrastructure Intelligence to uncover C2 servers and disrupt adversary tactics before widespread damage occurs.

These stories underscore the importance of HYAS Infrastructure Intelligence in safeguarding digital assets, protecting customers, and staying resilient in the face of sophisticated adversaries.

Take the Next Step in Threat Defense

Adversaries are getting smarter, faster, and more resourceful. To stay ahead, security leaders must equip their threat hunting and cyber fraud teams with the best tools available. HYAS Infrastructure Intelligence offers unmatched insight into adversary infrastructure, empowering teams to act decisively and protect their organizations.

If you’re looking to enhance your threat intelligence capabilities and learn more about HYAS Infrastructure Intelligence, now’s the time. Rig out your team with the only provider of Infrastructure Intelligence to uncover hidden threats, preempt attacks, and achieve a higher level of operational resiliency.

Learn more aboutHYAS Insight andcontact HYAS today

The post What is Infrastructure Intelligence? appeared first on Security Boulevard.

Google acquires cloud security leader Wiz for $32B—the largest cybersecurity deal ever. This historic purchase boosts Google Cloud's security offerings, enhances its multicloud capabilities, and intensifies competition with Microsoft and AWS in the rapidly evolving cloud security landscape.

The post Google’s $32B Wiz Acquisition: A Watershed Moment in Cloud Security M&A appeared first on Security Boulevard.

via the comic humor & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Water Balloons’ appeared first on Security Boulevard.

5 min readCredential expiration is more than an SSL/TLS certificate problem.

The post How to Stop Expired Secrets from Disrupting Your Operations appeared first on Aembit.

The post How to Stop Expired Secrets from Disrupting Your Operations appeared first on Security Boulevard.

Instructor: Ram Ganesh

Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their erudite []DEF CON 32]2 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 32 – Recon Village – The Art Of Pivoting In OSINT Investigations appeared first on Security Boulevard.

We’re excited to announce that Veriti has been recognized in Forrester’s The Unified Vulnerability Management Solutions Landscape, Q1 2025. We believe this recognition highlights our commitment to enabling proactive security through exposure management, vulnerability prioritization, and safe remediation.  Why Unified Vulnerability Management (UVM) Matters  Security and risk professionals face an overwhelming volume of vulnerabilities across […]

The post Veriti Recognized in Forrester’s 2025 UVM Landscape Report  appeared first on VERITI.

The post Veriti Recognized in Forrester’s 2025 UVM Landscape Report  appeared first on Security Boulevard.

Google today revealed it has acquired Wiz, a provider of a cloud-native application protection platform (CNAPP) for $32 billion cash after initially being rebuffed last year.

The post Google Agrees to Acquire Wiz in $30B Deal appeared first on Security Boulevard.

Palo Alto, USA, 18th March 2025, CyberNewsWire

The post SquareX Launches “Year of Browser Bugs” (YOBB) to Expose Critical Security Blind Spots appeared first on Security Boulevard.

Prompt Security today extended its platform to enable organizations to implement policies that restrict the types of data surfaced by a large language model (LLM) that employees are allowed to access.

The post Prompt Security Adds Ability to Restrict Access to Data Generated by LLMs appeared first on Security Boulevard.

For any company involved in any facet of  payment card processing, March 31, 2025, looms as the deadline for meeting the updated Payment Card Industry Data Security Standard (PCI DSS) version 4.0, first issued April 1, 2024.

The post ADR for PCI DSS 4.0 Compliance | Contrast Security appeared first on Security Boulevard.

The rise of the extended Internet of Things (XIoT) across industrial (IIoT), healthcare (IoMT), commercial (OT, BMS/EMS/ACS/iBAS/FMS), and other sectors […]

The post Rethinking Risk: ICS & OT Security with Purdue 2.0 and GRC appeared first on Security Boulevard.

Organizations that adopt these AI-driven strategies will not only improve the accuracy and efficiency of their threat detection but also gain a competitive edge by making smarter, faster decisions in every aspect of their operations.

The post Transforming Security Operations With Generative AI  appeared first on Security Boulevard.

CISA, in collaboration with the FBI and NSA, identified and attributed multiple attacks to Russian entities, emphasizing the risks posed by state-backed Advanced Persistent Threats (APTs).

The post “My Vas Pokhoronim!” appeared first on Security Boulevard.

Really interesting research: “How WEIRD is Usable Privacy and Security Research?” by Ayako A. Hasegawa Daisuke Inoue, and Mitsuaki Akiyama:

Abstract: In human factor fields such as human-computer interaction (HCI) and psychology, researchers have been concerned that participants mostly come from WEIRD (Western, Educated, Industrialized, Rich, and Democratic) countries. This WEIRD skew may hinder understanding of diverse populations and their cultural differences. The usable privacy and security (UPS) field has inherited many research methodologies from research on human factor fields. We conducted a literature review to understand the extent to which participant samples in UPS papers were from WEIRD countries and the characteristics of the methodologies and research topics in each user study recruiting Western or non-Western participants. We found that the skew toward WEIRD countries in UPS is greater than that in HCI. Geographic and linguistic barriers in the study methods and recruitment methods may cause researchers to conduct user studies locally. In addition, many papers did not report participant demographics, which could hinder the replication of the reported studies, leading to low reproducibility. To improve geographic diversity, we provide the suggestions including facilitate replication studies, address geographic and linguistic issues of study/recruitment methods, and facilitate research on the topics for non-WEIRD populations...

The post Is Security Human Factors Research Skewed Towards Western Ideas and Habits? appeared first on Security Boulevard.

Attackers increasingly leverage AI-powered exploitation and can quickly identify vulnerable systems, infiltrate networks unnoticed and move laterally to compromise critical assets.

The post The Future of Enterprise Security: AI-powered Lateral Defense in a Dynamic Threat Landscape appeared first on Security Boulevard.