Security Boulevard

How Can Non-Human Identities Transform AI Security in Travel? The rapid integration of artificial intelligence (AI) across industries is reshaping how organizations manage security, especially in travel. But how can Non-Human Identities (NHIs) be a game-changer in AI security? With machine identities underpin the secure operation of AI systems, understanding their role is essential for […]

The post What makes AI in travel industry security powerful appeared first on Entro.

The post What makes AI in travel industry security powerful appeared first on Security Boulevard.

Can Machine Identities Be the Key to Greater Security in Healthcare Data Systems? Where data breaches are alarmingly frequent, the role of Non-Human Identities (NHIs) in safeguarding healthcare data systems has garnered increased attention. Understanding and harnessing the power of NHIs can significantly mitigate risks, enhance compliance, and improve operational efficiency across various industries, including […]

The post Are healthcare data systems supported by NHIs effectively appeared first on Entro.

The post Are healthcare data systems supported by NHIs effectively appeared first on Security Boulevard.

Are Your Cloud Security Strategies Providing the Reassurance You Need? Achieving confidence requires more than just traditional measures. Non-Human Identities (NHIs) are a pivotal component of robust cloud security strategies. These machine identities offer an evolved approach to managing cybersecurity risks, specifically addressing the gaps that often exist between security teams and research and development […]

The post How reassured can we be with our current cloud security strategies appeared first on Entro.

The post How reassured can we be with our current cloud security strategies appeared first on Security Boulevard.

I ran an experiment this week that I did not expect to be instructive, and it was.

Related: How ChatGPT is becoming Microsoft Office

The setup was simple. I had been working through a spontaneous personal essay — about cognitive … (more…)

The post MY TAKE: The AI magic is back — whether it endured depends on Amazon’s next moves first appeared on The Last Watchdog.

The post MY TAKE: The AI magic is back — whether it endured depends on Amazon’s next moves appeared first on Security Boulevard.

Presenter: Stacey Higginbotham, Consumer Reports

Our thanks to USENIX Security '25 (Enigma Track) (USENIX '25 for publishing their Creators, Authors and Presenter’s tremendous USENIX Security '25 (Enigma Track) (USENIX '25 content on the Organizations' YouTube Channel.

Permalink

The post USENIX Security ’25 (Enigma Track) – Zombie Devices Are Running Amuck! appeared first on Security Boulevard.

Cyber threats are evolving at a pace that traditional security testing methods struggle to keep up with. Organizations today operate in highly complex digital environments with cloud platforms, APIs, microservices, and rapidly deployed applications. In such environments, manual security testing alone is no longer enough. This is where an AI pentesting tool becomes a critical […]

The post Best 5 AI Pentesting Tools in 2026 appeared first on Kratikal Blogs.

The post Best 5 AI Pentesting Tools in 2026 appeared first on Security Boulevard.

You have Sentinel. You have Defender. Here is what fills the autonomous investigation gap between detection and autonomous resolution.

The post D3 Morpheus for Your Microsoft Security Environment appeared first on D3 Security.

The post D3 Morpheus for Your Microsoft Security Environment appeared first on Security Boulevard.

This week’s McKinsey incident should be a wake-up call for every enterprise moving fast to deploy AI.

Not because AI itself is inherently insecure.

But because too many organizations are still thinking about AI security at the model layer, while the real enterprise risk sits in the action layer: the APIs, MCP servers, internal services, and shadow integrations that AI agents can reach, invoke, and manipulate.

That is the part most companies still do not see.

The technical details matter here. Public reporting described an internal AI platform with a broad API footprint, including more than 200 documented endpoints and a set of unauthenticated APIs that could allegedly be reached externally. The same reporting described potential exposure paths to tens of millions of chat messages, hundreds of thousands of files, user accounts, and system prompts. Whether or not every possible impact was realized, the takeaway for security leaders is clear: when internal AI systems are wired into weakly governed APIs, the blast radius can become enormous very quickly.

And this is not an isolated case.

The McDonald’s AI hiring incident points to the same structural problem. Different companies. Different workflow. Same core mistake. Reporting on that case described exposed administrative access, weak authentication practices, and the potential exposure of a massive pool of applicant records. Again, the story was not just about the chatbot. It was about the application and API infrastructure around it.

That is the lesson the market needs to understand.

The real risk is not the LLM. It is what the agent can do.

A lot of the AI security market today is focused on prompts, model behavior, jailbreaks, and output controls.

Those matter.

But they are only one layer.

In the enterprise, AI agents do not create value by talking. They create value by taking action. They retrieve data, call APIs, invoke tools, access systems, trigger workflows, and increasingly operate through MCP servers and connected services.

That means the real blast radius of AI is determined by the action layer.

• If an internal API is left exposed without authentication, an agent can find it.
• If a shadow service is internet-accessible, an agent can reach it.
• If an MCP server is misconfigured, an agent can use it.
• If sensitive business logic is sitting behind undocumented or forgotten endpoints, an agent can chain those calls together at machine speed.

This is why the industry framing of “AI security” is still too narrow. The attack surface is no longer just the model. It is the full connected system around it.

McKinsey and McDonald’s security breaches are the same story

At first glance, these incidents look different. McKinsey was an internal AI platform. McDonald’s was an AI-powered hiring workflow.

But structurally they are the same. Both point to a growing enterprise reality: organizations are connecting AI systems to internal and external application infrastructure faster than they are securing that infrastructure.

And in many cases, the weakest point is not a sophisticated model exploit. It is a plain old exposed API, weak authentication, forgotten endpoint, misconfigured access control, or third-party integration that quietly became internet reachable.

That is exactly why I believe one of the most dangerous categories emerging right now is shadow APIs connected to agents.

These are internal or lightly governed APIs that were never meant to become part of an external attack surface, but once they are connected to copilots, workflows, MCP servers, browser agents, coding agents, or AI applications, they effectively become part of one.

The company still thinks of them as “internal.” The attacker does not.

The blind spot: shadow APIs plus agent connectivity

This is the gap I worry about most for enterprises today. Every company has APIs it knows about. Many also have APIs it has forgotten, never fully documented, or does not realize are externally reachable.

Now add AI. The moment an agent is connected to those systems, or an MCP server is exposed with access to them, the attack surface expands dramatically.

What used to be obscure, low traffic, and semi-internal becomes:

• Discoverable
• Callable
• Chainable
• Exploitable at machine speed

That is the shift. In the pre-agentic world, a hidden or weakly governed API might sit quietly for months or years. In the agentic world, it only needs to be reachable once.

The new security model enterprises need

If you are deploying AI, you need to stop asking only: Is the model safe? and start asking:

• What can this agent reach?
• What APIs back this workflow?
• Which endpoints are exposed externally?
• Which MCP servers exist across the company?

The next generation of AI incidents will come from agents sitting on top of weak action layers: exposed APIs, unauthenticated services, forgotten integrations, and misconfigured MCP servers.

This is exactly why we built Salt Surface

At Salt, we have spent years helping enterprises discover and secure APIs they did not know were exposed. That problem now matters even more in the age of AI.

With Salt Surface, organizations can map their exposed API footprint, including AI-related APIs and externally reachable services, without deploying an agent or installing anything in their environment.

If you are building with AI, the first question should not be whether your prompt is protected. It should be whether your action layer is exposed.

The model is not the whole attack surface. The API layer is.

Get your free exposure scan

If you want to know whether your company has exposed APIs, AI-connected endpoints, or internet-reachable services, we will show you. No installation. No heavy lift. Just a domain and you get visibility into the attack surface you need to understand now.

Request your free Salt Surface scan today.

Roey Eliyahu is the Co-Founder and CEO of Salt Security, the leader in Agentic Security.

‍

‍

The post An AI Agent Didn’t Hack McKinsey. Its Exposed APIs Did. appeared first on Security Boulevard.

How Do Non-Human Identities Impact Cloud Security? What role do non-human identities (NHIs) play in strengthening cloud security for your organization? Where businesses increasingly migrate operations to the cloud, ensuring robust security becomes essential. Non-human identities, or NHIs, are pivotal, representing machine identities that interact within your digital. By effectively managing these identities, businesses ensure […]

The post Are businesses free to choose their AI-driven solutions appeared first on Entro.

The post Are businesses free to choose their AI-driven solutions appeared first on Security Boulevard.

Are Non-Human Identities the Key to Securing the Financial Sector? One topic gaining notable traction is the management of Non-Human Identities (NHIs). With financial institutions increasingly migrate to cloud-based operations, securing machine identities becomes pivotal. These NHIs—consisting of encrypted passwords, tokens, or keys that define machine identities—are critical to ensuring secure operations and protecting sensitive […]

The post How is Agentic AI innovating financial sector practices appeared first on Entro.

The post How is Agentic AI innovating financial sector practices appeared first on Security Boulevard.

Are Your Machine Identities Securely Managed? Understanding Non-Human Identities Imagine the complexities involved in managing something that can’t think, act, or even decide on its own. Yet, this is the reality of dealing with Non-Human Identities (NHIs)—machine identities that play a crucial role in cybersecurity. These identities are not just strings of code; they’re pivotal […]

The post How relieved are teams with managed machine identities appeared first on Entro.

The post How relieved are teams with managed machine identities appeared first on Security Boulevard.

A few months ago, I wrote about the Phishing Renaissance and how AI hasn't invented new attack types so much as perfected the classics. Credential theft, vendor impersonation, executive fraud. Same playbook, exponentially better execution.

The post IRONSCALES Winter ’26 Release: Preemptive Email Security appeared first on Security Boulevard.

Artificial intelligence (AI) agents, once touted as the next frontier of corporate efficiency, are increasingly exhibiting deceptive and rogue behaviors that could overwhelm traditional cybersecurity. New research shows autonomous systems are now capable of collaborating to smuggle sensitive data, forge credentials, and even peer-pressure other AIs into bypassing safety protocols. According to findings from Irregular,..

The post AI Agents Present ‘Insider Threat’ as Rogue Behaviors Bypass Cyber Defenses: Study appeared first on Security Boulevard.

Everyone knows that one person on the team who’s inexplicably lucky, the one who stumbles upon a random vulnerability seemingly by chance. A few days ago, my coworker Michael Weber was telling me about a friend like this who, on a recent penetration test, pressed the shift key five times at an RDP login screen […]

The post Et Tu, RDP? Detecting Sticky Keys Backdoors with Brutus and WebAssembly appeared first on Praetorian.

The post Et Tu, RDP? Detecting Sticky Keys Backdoors with Brutus and WebAssembly appeared first on Security Boulevard.

Presenter: Zach Steindler, GitHub

Our thanks to USENIX Security '25 (Enigma Track) (USENIX '25 for publishing their Creators, Authors and Presenter’s tremendous USENIX Security '25 (Enigma Track) (USENIX '25 content on the Organizations' YouTube Channel.

Permalink

The post USENIX Security ’25 (Enigma Track) – Securing Packages In npm, Homebrew, PyPI, Maven Central, And RubyGems appeared first on Security Boulevard.

 

Cyber attackers increasingly target SMBs because they are often the easiest path into larger supply chains. As cyberattacks are ramping up, specifically against Critical Infrastructure sectors, Small and Medium Businesses (SMBs) are feeling the pressure and asking what they can do to better protect themselves in reasonable ways.

Don’t Accept Failure

SMBs often feel overwhelmed when trying to address rising cyber risks.

• Some feel it is too complex or beyond what their capabilities and adopt a defeatist attitude (which will eventually be self-fulfilling)
• Most SMBs believe they lack the necessary resources, as many tools and services are prohibitively expensive
• Many see cybersecurity investment as a conflict with business priorities that focus on product release and sales
• A shrinking subset remains in denial, believing they won’t be targeted because they are too small (a belief that is increasingly being proven wrong)

A Reasonable Path Forward

The solution for SMBs is not a magic product or service, but rather to implement and vigilantly reinforce industry best practices. It is a practical approach that scales as SMBs grow. The objective is to make your organization a harder target, protect it from the most common attacks in your industry, and position yourself for rapid and confident recovery.

Cyber risk is managed, not eliminated. The goal is not to be impervious to attack, as even the biggest companies cannot achieve this, but rather to seek an optimal state of security based upon your business aspirations.

A reasonable investment, guided by the right expertise, can deliver a high return.

Cybersecurity is a synthesis of processes, behaviors, and tools that strengthen your operational environment, culture, and organizational practices.

Next Steps to Risk Management

To begin strengthening your security posture, consider a temporary fractional CISO or contract with security vendors who can help establish effective and efficient fundamental cybersecurity capabilities. This typically includes security policies, compliance, cloud/network/endpoint protections, identity and access management, patching, vendor risk coordination, and targeted employee training.

Ask your trusted community and peers for recommendations. Don’t make the mistake of selecting the first option. Instead, meet with a few vendors to evaluate and select the best for your business culture and security objectives.

If you need recommendations, check out the Clutch directory. I partnered with Clutch to curate a list of cybersecurity vendors based on actual customer ratings. Regardless of how you choose, pick a handful and schedule short exploration meetings to evaluate which is right for your organization.

Expert vendors bring the knowledge to assess and implement reasonable controls for SMBs to better manage cyber risks. Tell them your priorities, and good partners will work with you to find a combination of security controls to manage the right balance between costs, business friction, and the residual risks.

SMBs are actively targeted by cybercriminals because they are often easier prey and serve as entry points into larger supply chains. By adopting practical security best practices and leveraging expert guidance, SMBs can dramatically reduce their exposure and build resilience against the most common cyber threats.

The post How SMBs Can Proactively Strengthen Cybersecurity appeared first on Security Boulevard.

For companies running a modern, adaptive and defense-centered security program, threat modeling is not a new concept. In fact, it’s one of the core tenets of preventative cybersecurity best practices. Being able to find vulnerabilities within software or a network, map them out and remediate them – before an attacker can successfully orchestrate a breach..

The post Threat Modeling with AI: A Developer-Driven Boon for Enterprise Security  appeared first on Security Boulevard.

In 2025, Google, Amazon, Microsoft and Meta collectively spent US$380 billion on building artificial-intelligence tools. That number is expected to surge still higher this year, to $650 billion, to fund the building of physical infrastructure, such as data centers (see go.nature.com/3lzf79q). Moreover, these firms are spending lavishly on one particular segment: top technical talent.

Meta reportedly offered a single AI researcher, who had cofounded a start-up firm focused on training AI agents to use computers, a compensation package of $250 million over four years (see ...

The post Academia and the “AI Brain Drain” appeared first on Security Boulevard.

For SaaS providers, trust is a core part of the offering. Customers rely on software platforms to process data, support business operations, and integrate with wider technology ecosystems. As a result, demonstrating effective security and governance controls using frameworks like SOC 2 has become an increasingly important requirement when selling to enterprise customers. SOC 2…

The post Understanding SOC 2 Controls for SaaS Providers appeared first on Sentrium Security.

The post Understanding SOC 2 Controls for SaaS Providers appeared first on Security Boulevard.

America’s new National Cyber Strategy sends a very clear message that cybersecurity is now about resilience, not just defense. The strategy emphasizes modernizing federal networks, protecting critical infrastructure, and deploying AI-enabled cybersecurity capabilities to detect and disrupt threats at scale. It also reinforces long-standing priorities such as Zero Trust architecture and secure supply chains. But […]

The post Decoding the White House Cyber Strategy: Why Resilience Matters Now appeared first on ColorTokens.

The post Decoding the White House Cyber Strategy: Why Resilience Matters Now appeared first on Security Boulevard.