Author, Creator & Presenter: Adam Shostack, Shostack + Associates Our thanks to USENIX Security ’25 (Enigma Track) (USENIX ’25 for publishing their Creators, Authors and Presenter’s tremendous USENIX Security ’25 (Enigma Track) content on the Organizations’ YouTube Channel. Permalink The…
Category: Security Boulevard
Zero Trust for B2B SaaS: What Every Founder and CTO Needs to Know
For B2B SaaS companies, Zero Trust isn’t an optional enterprise security concept. It’s what enterprise buyers are demanding, what audit frameworks require, and increasingly what separates companies that close deals from those that don’t. The post Zero Trust for B2B…
OpenAI Acquires Security Startup Promptfoo to Fortify AI Agents
OpenAI has snapped up Promptfoo, a specialized artificial intelligence (AI) security startup, to bolster the safety of autonomous digital workers and convince enterprise clients that AI co-workers are ready for high-stakes business environments. OpenAI did not disclose financial terms of…
USENIX Security ’25 (Enigma Track) – Security Theater Is Canceled: Time For A Real Show
Author, Creator & Presenter: Lea Kissner, LinkedIn Our thanks to USENIX Security ’25 (Enigma Track) (USENIX ’25 for publishing their Creators, Authors and Presenter’s tremendous USENIX Security ’25 (Enigma Track) content on the Organizations’ YouTube Channel. Permalink The post USENIX…
Phishing Scammers Impersonating City, County Officials, Demanding Payment: FBI
Scammers are impersonating local municipal officials around the country with seemingly legitimate phishing messages demanding payment for permits. The bad actors grab publicly available information and use them in their emails to fool their targets. The post Phishing Scammers Impersonating…
Introducing System Prompt Hardening: production-ready protection for system prompts
Secure your AI applications with system prompt hardening. The post Introducing System Prompt Hardening: production-ready protection for system prompts appeared first on Security Boulevard. This article has been indexed from Security Boulevard Read the original article: Introducing System Prompt Hardening:…
Before the Breach: Identity Persistence Through Stolen Credentials
Stolen credentials often remain active long before a breach. See how identity persistence drives initial access risk. The post Before the Breach: Identity Persistence Through Stolen Credentials appeared first on Security Boulevard. This article has been indexed from Security Boulevard…
Fighting Fire with Fire: AI-Assisted Microsegmentation to Combat AI-Enabled Hackers
Thanks to GenAI, cyberattacks are coming faster and harder than ever before. The IC3 consortium at MIT Sloan warns that: “AI is being used regularly in cyberattacks to create malware, phishing campaigns, and deepfake-driven social engineering, such as fake customer…
Inference protection for LLMs: Keeping sensitive data out of AI workflows
Inference protection is a preventive approach to LLM privacy that stops sensitive data from ever reaching AI models. Learn how de-identification enables secure, compliant AI workflows with unstructured text. The post Inference protection for LLMs: Keeping sensitive data out of…
The Economic Argument: The Real Cost of Insecure APIs in the AI Era
When cybersecurity teams talk about risk, they usually speak in technical terms like vulnerabilities, exploits, and attack vectors. But when they walk into the boardroom, they need to speak a different language. They need to speak about cost. In the…
Securing the Browser Session, Not Just the Login – Blog | Menlo Security
Strong authentication isn’t enough. Learn why attackers target browser sessions after login and how session-level controls close the gap. The post Securing the Browser Session, Not Just the Login – Blog | Menlo Security appeared first on Security Boulevard. This…
Inside a bot operator’s email verification infrastructure
During an investigation into a large-scale automated account creation attack targeting one of our customers, we observed a burst of suspicious registration activity. In less than a week, the attackers attempted more than 80,000 registrations. While investigating the registrations, we…
Prevention is the Only Cloud Security Strategy That Works
In the evolving digital economy, adopting a prevention-first strategy for cloud workflows is essential. This article explores the importance of preemptive security measures to protect sensitive operations from breaches, detailing steps for organizations to enhance their security posture. The post…
AI Just Made Executives the Easiest Targets on the Internet
AI makes it easy to find executive PII online. Security teams must reduce digital exposure before attackers use AI to surface sensitive data. The post AI Just Made Executives the Easiest Targets on the Internet appeared first on Security Boulevard.…
How to Download and Install SafeNet Authentication Client for Sectigo Code Signing Certificates?
When using a hardware token-based certificate, it is important to download and install the SafeNet Authentication Client to sign the certificate of Sectigo code signatures. I have installed this several times in the case of developers and organizations, and one…
MIND is the first data security company to achieve ISO 42001 certification
AI is embedded in security tools across the enterprise. MIND is the first data security company to answer how their AI is governed, audited and held accountable. The AI tools built into your security stack are making decisions at a…
How Piggybacking Attacks Threaten Organizational Security?
Organizations invest heavily in advanced cybersecurity technologies such as endpoint detection, identity access management, zero trust architecture, and continuous monitoring. However, a significant number of security incidents still originate from physical security weaknesses rather than purely digital vulnerabilities. Such often…
Anomalous Prompt Injection Detection in Quantum-Secured AI Pipelines
Learn how to detect anomalous prompt injections in quantum-secured AI pipelines using lattice-based cryptography and behavioral AI analysis for MCP environments. The post Anomalous Prompt Injection Detection in Quantum-Secured AI Pipelines appeared first on Security Boulevard. This article has been…
Escape raises $18M Series A to replace legacy scanners with AI agent-driven discovery, pentesting, and remediation
Led by Balderton Capital, with participation of Uncorrelated Ventures and existing investors IRIS and Y Combinator, the $18M Series A financing will accelerate our mission to multiply the impact of security teams through full-lifecycle offensive security. The post Escape raises…
Secure Identity for TAK/ATAK at the Tactical Edge
Team Awareness Kit (TAK) and its Android variant, the Android Tactical Assault Kit (ATAK), are situational awareness platforms used across the military—dismounted infantry, vehicle commanders, air crews, SOF operators. If you need a common operating picture in the field, TAK…