Security Boulevard

Discover the top DCIM software trends shaping the future of data centers in 2025. From AI-powered predictive maintenance to sustainability-focused tools, hybrid cloud management, and real-time monitoring, these advancements are redefining data center operations. Learn how next-gen DCIM solutions can optimize efficiency, reduce costs, and ensure compliance while driving scalability and innovation.

The post Data Sovereignty: What Infrastructure Leaders Must Know appeared first on Hyperview.

The post Data Sovereignty: What Infrastructure Leaders Must Know appeared first on Security Boulevard.

The post Vulnerability Management vs. Patch Management Explained appeared first on AI Security Automation.

The post Vulnerability Management vs. Patch Management Explained appeared first on Security Boulevard.

Articles related to cyber risk quantification, cyber risk management, and cyber resilience.

The post Singapore AI Risk Guidelines and Capital Resilience | Kovrr appeared first on Security Boulevard.

Discover how the integration of large language models is transforming software security, lowering barriers for attackers, and necessitating autonomous defense platforms to keep pace with emerging threats.

The post The New Security Reality: When AI Accelerates Both Attack and Defense  appeared first on Security Boulevard.

As AI adoption accelerates, organizations must evolve their security strategies from prompt filtering to comprehensive behavioral monitoring. This shift is critical to safeguarding against adaptive threats and ensuring safe AI deployment in production environments.

The post The Attack Chain Your AI System is Already Missing  appeared first on Security Boulevard.

Modern enterprises are rapidly shifting toward API-centric architectures, leveraging APIs to connect internal systems, external partners, and digital services. With 74% of organizations adopting API-first development models, APIs now drive critical business logic and data exchanges at scale. However, this API proliferation also dramatically increases the attack surface, exposing sensitive data and business processes to […]

The post Why Every Enterprise Needs a Strong API Security Strategy? appeared first on Kratikal Blogs.

The post Why Every Enterprise Needs a Strong API Security Strategy? appeared first on Security Boulevard.

Following the joint military operation known as Operation Epic Fury, the Tenable Research Special Operations (RSO) team is providing an update regarding potential cyber counteroffensive operations conducted by Iran-linked threat actors.

Key takeaways:

1. Following Operation Epic Fury, Iran-linked threat actors are expected to launch counteroffensive operations against critical infrastructure and opportunistic targets.
    
2. Several Iranian-linked threat groups are affiliated with organizations including the IRGC and MOIS, including the revived Altoufan Team and HANDALA.
    
3. Review and patch the known vulnerabilities exploited by these threat actors and prepare for heightened DDoS and botnet activity in the near term.
    

Background

On February 28, 2026, the United States and Israel launched Operation Epic Fury, a series of military operations against Iran. As a result, Iran-linked threat actors are expected to launch cyber counteroffensive operations against the United States, Israel and other countries. Critical infrastructure providers as well as other opportunistic targets are likely at risk.

Analysis

Over the last several years, Iranian-nexus threat groups have shifted from stealthy espionage activity to destructive and retaliatory attacks as geopolitical tensions have risen. Wiper malware and ransomware attacks have ramped up in frequency and destructive capabilities as attackers have pivoted to targeting critical infrastructure, including those in Western countries.

Iranian Threat Actor Affiliations

Iranian state-sponsored cyber operations span across multiple groups, from advanced persistent threat (APT) actors to hacktivist fronts linked to both military and civilian agencies. These groups operate under, or maintain ties to, the following organizations:

• Islamic Revolutionary Guard Corps (IRGC): Parallel military force separate from Iran's regular armed forces
• IRGC Intelligence Organization (IRGC-IO): The intelligence arm within the IRGC, focused on surveillance and counterintelligence
• IRGC Cyber-Electronic Command (IRGC-CEC): The IRGC's dedicated cyberwarfare unit
• Ministry of Intelligence and Security (MOIS): Iran's civilian intelligence ministry, combining roles analogous to the CIA and FBI

Group Aliases Affiliation Operational Focus Banished Kitten Void Manticore, Red Sandstorm, Storm-0842, Dune MOIS Conducts destructive operations under hacktivist-style personas including HomeLand Justice, Karma, and HANDALA CyberAv3ngers - IRGC-CEC Targets operational technology (OT) and programmable logic controllers (PLCs) in water and wastewater systems APT34 OilRig, Helix Kitten, Hazel Sandstorm, Earth Simnavaz, COBALT GYPSY, Crambus, TA452, Evasive Serpens, ITG13 MOIS Exploits internet-facing infrastructure to conduct espionage against energy, telecommunications and government targets MuddyWater Mango Sandstorm, Static Kitten, Seedworm, Earth Vetala, MERCURY, TEMP.Zagros, TA450 MOIS Uses legitimate remote monitoring and management (RMM) tools to target telecommunications and government organizations APT42 Damselfly, UNC788, Yellow Garuda, CharmingCypress, Educated Manticore, Mint Sandstorm* IRGC-IO Harvests credentials from journalists, academics, activists and policy researchers through social engineering Cotton Sandstorm Haywire Kitten, Marnanbridge, NEPTUNIUM IRGC-CEC Conducts hack-and-leak campaigns and influence operations under personas including Altoufan Team APT35 Charming Kitten, Mint Sandstorm*, TA453, ITG18, Newscaster, COBALT ILLUSION, Agent Serpens IRGC Conducts espionage campaigns targeting government, defense and energy organizations Pioneer Kitten Fox Kitten, Lemon Sandstorm, UNC757, Parisite, RUBIDIUM, Br0k3r, xplfinder IRGC Exploits internet-facing devices and brokers access to ransomware affiliates Agrius Pink Sandstorm, Agonizing Serpens, AMERICIUM, BlackShadow, Spectral Kitten MOIS Deploys wiper malware disguised as ransomware against Israeli organizations Imperial Kitten Tortoiseshell, Crimson Sandstorm, TA456, Yellow Liderc, CURIUM IRGC Uses social engineering to target Israeli transportation and logistics organizations CyberToufan - Unknown Targets Israeli corporations with data theft and leak operations

* Note: Mint Sandstorm is a composite label spanning both APT35 and APT42

Recent reports of Iranian cyber-operations activity

Following the military operations on February 28, researchers have reported probing and staging activities linked to Iranian threat actors, including the revival of the ALTOUFAN TEAM persona tied to Cotton Sandstorm. There have been reports on social media from Iran government-linked hackers warning of “massive cyber attacks in the coming hours.” It’s unclear if successful attacks have taken place. Cyber-analysts should expect increased botnet and distributed denial-of-service (DDoS) activity.

Ongoing monitoring

Tenable’s RSO continues to monitor for new intelligence on counteroffensive attacks by Iran-linked threat actors. We will publish updates as these developments are confirmed.

Identifying affected systems

Iranian threat actors have historically exploited known vulnerabilities in internet-facing devices and applications. A list of Tenable plugins for the vulnerabilities known to be associated with Iranian threat actors can be found here.

Get more information

• Frequently Asked Questions About Iranian Cyber Operations

Join Tenable's Research Special Operations (RSO) Team on Tenable Connect for further discussions on the latest cyber threats.

Learn more about Tenable One, the Exposure Management Platform for the modern attack surface.

The post Operation Epic Fury: Potential Iranian Cyber Counteroffensive Operations appeared first on Security Boulevard.

Learn how to integrate HSMs for Post-Quantum Key Encapsulation in MCP environments. Protect AI infrastructure with ML-KEM and quantum-resistant hardware.

The post Hardware Security Module Integration for Post-Quantum Key Encapsulation appeared first on Security Boulevard.

FRANKFURT, Mar. 2, 2026, CyberNewswire — Link11 has published its European Cyber Report 2026, revealing that DDoS attacks reached a new level in 2025 and have become a permanent stress factor for digital infrastructures.

The report shows that the … (more…)

The post News alert: DDoS attacks surge 75% in 2025; Link11 says attacks now sustained, not sporadic first appeared on The Last Watchdog.

The post News alert: DDoS attacks surge 75% in 2025; Link11 says attacks now sustained, not sporadic appeared first on Security Boulevard.

Is AI the Key to Cybersecurity Stability? Where digital threats are becoming increasingly sophisticated, one might ask: can artificial intelligence be the linchpin in fortifying our defenses and achieving cybersecurity stability? With industries like financial services, healthcare, travel, and technology double down on using innovative systems, including DevOps and security operations centers (SOC), it becomes […]

The post How does AI contribute to cybersecurity stability appeared first on Entro.

The post How does AI contribute to cybersecurity stability appeared first on Security Boulevard.

How Can Non-Human Identities Enhance AI Protection? Have you ever considered the crucial role Non-Human Identities (NHIs) play in AI security? With capable AI systems become integral to various industries, ensuring their protection is paramount. NHIs, essentially machine identities, form the backbone of cybersecurity strategies designed to protect these systems. Managing NHIs involves overseeing both […]

The post What makes an AI system capable of self-protection appeared first on Entro.

The post What makes an AI system capable of self-protection appeared first on Security Boulevard.

How Can Organizations Ensure AI-Driven Security Certainty? Are you confident in security your organization receives from AI-driven solutions? Ensuring the trustworthiness of AI-driven security mechanisms is vital. With machine identities, known as Non-Human Identities (NHIs), become more prevalent, the focus on safeguarding these entities becomes even more critical. Understanding the Role of NHIs in AI-Driven […]

The post How certain can you be of your AI-driven security appeared first on Entro.

The post How certain can you be of your AI-driven security appeared first on Security Boulevard.

Why Are Non-Human Identities Crucial in Combating Cyber Threats? Have you ever considered the importance of Non-Human Identities (NHIs)? Protecting these machine identities has become as critical as safeguarding human credentials, particularly with the rise of automation and cloud computing. NHIs serve as the backbone of authentication processes in various industries, including financial services, healthcare, […]

The post How safe are Non-Human Identities from cyber threats appeared first on Entro.

The post How safe are Non-Human Identities from cyber threats appeared first on Security Boulevard.

Earlier this year, we asked our team where they expect open source cyberattacks to go next. Sonatype Principal Security Researcher Garrett Calpouzos shared his thoughts about how he anticipated attackers won't simply use automation, but also abuse victims' AI tools:

The post SANDWORM_MODE: The Rise of Adaptive Supply Chain Worms appeared first on Security Boulevard.

Session 14B: Privacy & Cryptography 2

Authors, Creators & Presenters: Yunbo Yang (The State Key Laboratory of Blockchain and Data Security, Zhejiang University), Yuejia Cheng (Shanghai DeCareer Consulting Co., Ltd), Kailun Wang (Beijing Jiaotong University), Xiaoguo Li (College of Computer Science, Chongqing University), Jianfei Sun (School of Computing and Information Systems, Singapore Management University), Jiachen Shen (Shanghai Key Laboratory of Trustworthy Computing, East China Normal University), Xiaolei Dong (Shanghai Key Laboratory of Trustworthy Computing, East China Normal University), Zhenfu Cao (Shanghai Key Laboratory of Trustworthy Computing, East China Normal University), Guomin Yang (School of Computing and Information Systems, Singapore Management University), Robert H. Deng (School of Computing and Information Systems, Singapore Management University)

PAPER
Siniel: Distributed Privacy-Preserving zkSNARK

Zero-knowledge Succinct Non-interactive Argument of Knowledge (zkSNARK) is a powerful cryptographic primitive, in which a prover convinces a verifier that a given statement is true without leaking any additional information. However, existing zkSNARKs suffer from high computation overhead in the proof generation. This limits the applications of zkSNARKs, such as private payments, private smart contracts, and anonymous credentials. Private delegation has become a prominent way to accelerate proof generation. In this work, we propose Siniel, an efficient private delegation framework for zkSNARKs constructed from polynomial interactive oracle proof (PIOP) and polynomial commitment scheme (PCS). Our protocol allows a computationally limited prover (a.k.a. delegator) to delegate its expensive prover computation to several workers without leaking any information about the private witness. Most importantly, compared with the recent work EOS (USENIX'23), the state-of-the-art zkSNARK prover delegation framework, a prover in Siniel needs not to engage in the MPC protocol after sending its shares of private witness. This means that a Siniel prover can outsource the entire computation to the workers. We compare Siniel with EOS and show significant performance advantages of the former. The experimental results show that, under low bandwidth conditions (10 mbps), Siniel saves about 16% time for delegators than that of EOS, whereas under high bandwidth conditions (1000 mbps), Siniel saves about 80% than EOS.

ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.

Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.

Permalink

The post NDSS 2025 – Siniel: Distributed Privacy-Preserving zkSNARK appeared first on Security Boulevard.

Oasis Security researchers find another security problem with the OpenClaw autonomous AI agent, uncovering a vulnerability dubbed "ClawJacked" that allows malicious websites to silently take full control of a developer's system and steal data.

The post Latest OpenClaw Flaw Can Let Malicious Websites Hijack Local AI Agents appeared first on Security Boulevard.

Constella is pleased to announce that Andres Andreu, CEO has been named a finalist for the Resilient CISO Award as part of the 2026 SC Awards, presented by SC Media Awards and CyberRisk Alliance, and sponsored by Absolute Security. Now in its 29th year, the SC Awards recognize solutions, organizations, and leaders advancing the security …

The post Andres Andreu Named a Finalist for the 2026 SC Awards Resilient CISO Award appeared first on Security Boulevard.

via the comic artistry and dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Proof Without Content’ appeared first on Security Boulevard.

Active Directory remains the backbone of enterprise identity. Despite years of modernization efforts, many organizations still rely on legacy authentication protocols that were never designed for today’s threat landscape. New reporting from Dark Reading highlights how attackers continue to abuse NTLM and Kerberos within Microsoft Active Directory environments to escalate privileges, move laterally, and maintain

The post When Trusted Authentication Enables Privilege Escalation appeared first on Seceon Inc.

The post When Trusted Authentication Enables Privilege Escalation appeared first on Security Boulevard.

Open-source ecosystems power modern software development. Millions of developers rely on public repositories to accelerate innovation and reduce development time. That trust, however, is increasingly being weaponized. New reporting from The Hacker News reveals that North Korean threat actors have published 26 malicious packages to the npm registry in an attempt to compromise developer environments

The post North Korean Hackers Target Developers Through npm Packages appeared first on Seceon Inc.

The post North Korean Hackers Target Developers Through npm Packages appeared first on Security Boulevard.