Security Boulevard

How Does NHI Management Contribute to a Relaxed Security Stance? Can machine identities bring tranquility to your cybersecurity? InUnderstanding and managing Non-Human Identities (NHIs) can indeed create a calmer security environment for organizations. Designed to secure machine identities, NHIs play a pivotal role in fortifying an organization’s cybersecurity framework. By establishing a comprehensive NHI management […]

The post Stay Relaxed with Advanced NHIs in Compliance appeared first on Entro.

The post Stay Relaxed with Advanced NHIs in Compliance appeared first on Security Boulevard.

Strengthen Fiserv’s card fraud defense with Enzoic BIN Monitoring—real-time dark web alerts that help stop fraud before it starts.

The post Closing the Card Fraud Detection Gap appeared first on Security Boulevard.

The enterprise IT perimeter dissolved years ago, taking with it any illusion that security teams can dictate which applications employees use or which devices they work from. Today’s reality: employees install applications freely, work from anywhere, and routinely bypass VPN requirements to maintain productivity. At the recent Security Field Day, 1Password laid out its strategic..

The post Beyond the Vault: 1Password’s Strategic Pivot to Extended Access Management appeared first on Security Boulevard.

AttackIQ presents the fifth volume of Ransom Tales, an initiative focused on emulating the Tactics, Techniques, and Procedures (TTPs) exhibited by sophisticated and prominent ransomware families with the objective of empowering defenders to rigorously challenge their security controls and enhance resilience against disruptive and extortive threats. In this release, AttackIQ revisits historical ransomware operations with the introduction of three new attack graphs that emulate the operational behaviors exhibited by the REvil, DarkSide, and BlackMatter ransomware families.

The post Ransom Tales: Volume V — Throwback Edition! Emulating REvil, DarkSide, and BlackMatter Ransomware appeared first on AttackIQ.

The post Ransom Tales: Volume V — Throwback Edition! Emulating REvil, DarkSide, and BlackMatter Ransomware appeared first on Security Boulevard.

Static security tuning creates dangerous blind spots that attackers exploit. Learn how dynamic context awareness transforms security operations by reducing false positives, preserving signal fidelity, and eliminating the hidden risks of over-tuning detection systems.

The post Swiss Cheese Security: How Detection Tuning Creates Vulnerabilities  appeared first on Security Boulevard.

Learn how to implement Security Service Edge (SSE) effectively to enhance cybersecurity, reduce human risk, and maintain user productivity. Discover how a zero-trust approach, SSL inspection, and outcomes-based deployment can strengthen security without sacrificing user experience.

The post How to Unlock the Full Potential of SSE with an Outcomes-Based Approach appeared first on Security Boulevard.

As LLMs, agents and Model Context Protocols (MCPs) reshape software architecture, API sprawl is creating major security blind spots. The 2025 GenAI Application Security Report reveals why continuous API discovery, testing and governance are now critical to protecting AI-driven applications from emerging semantic and prompt-based attacks.

The post Why API Security Will Drive AppSec in 2026 and Beyond  appeared first on Security Boulevard.

As AI investments surge toward $1 trillion by 2027, many organizations still see zero ROI due to hidden security and cost risks. Discover how aligning FinOps with security practices helps identify AI-related vulnerabilities, control cloud costs, and build sustainable, secure AI operations.

The post Using FinOps to Detect AI-Created Security Risks  appeared first on Security Boulevard.

A global survey of 1,773 C-level executives, security professionals and security and technical directors finds nearly all (95%) are confident in their ability to recover from a ransomware attack. Conducted by OpenText, the survey also notes that 40% of respondents said their organization experienced a ransomware attack in the past year, with nearly half hit..

The post Survey: Organizations Are Too Confident in Their Cyber Resiliency appeared first on Security Boulevard.

How Do Non-Human Identities (NHIs) Enhance Data Integrity? Can NHIs play a pivotal role in enhancing data integrity? Where organizations increasingly migrate to cloud environments, the necessity for robust cybersecurity measures becomes paramount. Non-Human Identities, or NHIs, offer a promising solution. But what exactly are NHIs, and how do they contribute to safeguarding our data […]

The post Ensuring Data Integrity: Can NHIs Be the Key? appeared first on Entro.

The post Ensuring Data Integrity: Can NHIs Be the Key? appeared first on Security Boulevard.

How Can Organizations Seamlessly Enhance IAM with NHIs? An important consideration is how organizations can enhance Identity and Access Management (IAM) with Non-Human Identities (NHIs). With businesses accelerate their move to cloud environments, managing NHIs effectively becomes crucial for protecting digital assets and ensuring seamless operations. It is vital to develop a strategic approach to […]

The post Feel Supported: Enhancing IAM with NHIs appeared first on Entro.

The post Feel Supported: Enhancing IAM with NHIs appeared first on Security Boulevard.

How Secure Are Your Cloud-Based Systems With NHI Management? Where data breaches are becoming increasingly common, how secure are your organization’s machine identities? With the rise of Non-Human Identities (NHIs), ensuring airtight security for machine-based communications and transactions has become essential. NHIs, which essentially involve machine identities, are crucial in securing digital interactions, just as […]

The post Building an Impenetrable Cloud with NHI Strategies appeared first on Entro.

The post Building an Impenetrable Cloud with NHI Strategies appeared first on Security Boulevard.

Why Are Non-Human Identities the Key to Smart Secrets Management? Have you considered the role of Non-Human Identities (NHIs) in secrets management? Where digital ecosystems become increasingly complex, protecting these machine identities becomes paramount. NHIs, which comprise encrypted passwords, tokens, or keys—akin to a digital “passport”—play a critical role in risk reduction strategies across multiple […]

The post Smart Secrets Management for Effective Risk Reduction appeared first on Entro.

The post Smart Secrets Management for Effective Risk Reduction appeared first on Security Boulevard.

So this may suck, but I am hoping to at least earn some points for honesty here. I wanted to write something pithy and smart once I realized our Cloud Security Podcast by Google just aired our 250th episode (“EP250 The End of “Collect Everything”? Moving from Centralization to Data Access?”). Yet nothing sufficiently pithy came to my mind …

… so I went around and asked a whole bunch of AIs and agents and such. Then massaged and aggregated the outputs, then ran more AI on the result. And then lightly curated it. Then deleted the bottom 2 stupidest points they made.

So, here it comes … in all its sloppy glory!

1. The Foundational Roots and Unchanging Mission: Our show started with foundational cloud security topics — like Zero Trust, Data Security, and Cloud Migration Security which drew the initial large audiences. The core commitment since Episode 1 has been to question conventional wisdom, avoid “security theater” (EP248) and explore whether security measures truly benefit the user and the organization.
2. The AI Transformation: We had a sizable shift with the last 50 episodes, where AI became a central theme, or at least one of the themes we always come back to (and, yes, this covers our 3 pillars of securing AI, AI for security and countering the AI-armed attacker). The focus has moved past general hype to practical applications, securing AI systems, and asking challenging questions like “Data readiness for AI SOC” (EP249).
3. The Enduring Popularity of Detection & Response (D&R): We highlight that D&R and modernizing the SOC continue to be extremely popular with the audience (EP236 is epic). Trace the evolution of this topic from foundational engineering (like the very popular EP75 on scaling D&R at Google) to the architectural questions in EP250.
4. “How Google Does Security” Sells the Tickets: We love the episodes offering a candid look behind Google’s security curtain on topics like internal red teaming, detection scaling, and Cloud IR tabletops. They consistently remain perennial audience favorites (the latest in this series is EP238 on how we use AI agents for security).
5. The Centrality of People and Process: We emphasize the recurring lessons that the most challenging aspects of large-scale cloud (and now AI) security transformations are often the “people” and “process” elements, not the technical “tech” itself. EP237 is an epic example of this.
6. The Call for Intentionality: We reinforce the importance of having a clear purpose for every security activity and following an engineering-led approach (EP117). The “magical” advice from EP236 is: to ask of every security element, “what is it in service of?”
7. The Persistence of Old Problems: We often lament with a touch of humor on the industry’s tendency to repeat fundamental security mistakes (the SIEM Paradox in EP234 for instance or EP223 in general), underscoring the ongoing need to cover “boring” basics. We will absolutely continue this (a new episode on vulnerability management “stale” problems is coming soon)
8. Community and Format Growth: We continue to “sorta-kinda” (human wrote this, eh?) the development of the podcast beyond a purely audio medium, including the launch of live video sessions and a Community site to foster more dialogue and feedback.
9. The Unique Culture and Authenticity of the Show Stays: We remain obsessed about selecting high-energy, vocal, and knowledgeable guests and fun topics. We will keep on with our “inside jokes” like not allowing guests to recommend Anton’s blog as an episode resource and pokes about firewall appliances in the cloud (they are there).
10. A Glimpse at 300: We want to tease future topics that will define the next 50+ episodes, such as deeper dives into Agentic AI, challenges of cross-cloud incident response and forensics, or the geopolitical aspects of cloud security. Give us ideas, will ya? Otherwise, you will get to hear about AI and D&R much of the time…

Top 5 popular episodes (excluding the oldest 3)

1. EP75 How We Scale Detection and Response at Google: Automation, Metrics, Toil
2. EP153 Kevin Mandia on Cloud Breaches: New Threat Actors, Old Mistakes, and Lessons for All
3. EP47 Megatrends, Macro-changes, Microservices, Oh My! Changes in 2022 and Beyond in Cloud Security
4. EP8 Zero Trust: Fast Forward from 2010 to 2021
5. EP17 Modern Threat Detection at Google

Enjoy the show!

• Subscribe at Spotify
• Subscribe at Apple Podcasts
• Subscribe at YouTube

250 Episodes of Cloud Security Podcast by Google: From Confidential Computing to AI-Ready SOC was originally published in Anton on Security on Medium, where people are continuing the conversation by highlighting and responding to this story.

The post 250 Episodes of Cloud Security Podcast by Google: From Confidential Computing to AI-Ready SOC appeared first on Security Boulevard.

A survey of 400 cybersecurity leaders in the U.S. and United Kingdom published today finds all respondents reporting that AI tools are now generating code in their organization’s code base, with just under a third now seeing those tools being used to generate most of the code being created. Commissioned by Cycode, a provider of..

The post Survey: Cybersecurity Leaders Much More Concerned About AI Generated Code appeared first on Security Boulevard.

via the comic artistry and dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘’Physics Paths” appeared first on Security Boulevard.

5 min readAgentic AI systems need comprehensive guardrails to deploy safely at scale. Learn how access controls, policy frameworks, and visibility enable automation.

The post Why Agentic AI Needs Guardrails to Thrive appeared first on Aembit.

The post Why Agentic AI Needs Guardrails to Thrive appeared first on Security Boulevard.

7 min readExplore the profound shift to agentic AI, its unprecedented automation capabilities, and the critical security and governance challenges it introduces. Learn how to secure autonomous systems.

The post The Promise and Perils of Agentic AI: Autonomy at Scale appeared first on Aembit.

The post The Promise and Perils of Agentic AI: Autonomy at Scale appeared first on Security Boulevard.

AI has fundamentally changed how we think about both innovation and risk. It’s driving new breakthroughs in medicine, design, and productivity, but it’s also giving attackers a sharper edge. Ransomware isn’t just about encrypting data anymore. It’s about double extortion, data theft, and the erosion of trust that organizations depend on to operate. As threat..

The post Rethinking Cyber Resilience in the Age of AI appeared first on Security Boulevard.

Discover the best Application Security Testing (AST) services in 2025.

The post Best Application Security Testing Services to Know appeared first on Security Boulevard.