800 articles · page 5 of 16
Security Boulevard, Monday, April 6th, 2026
Identity security begins when a person's identity is first created and enrolled in your systems. This early moment shapes every authentication decision that follows and plays a central role in workforce impersonation risk. Increasingly, it's also where attackers focus.
more →
Security Boulevard, Monday, April 6th, 2026
In regulatory compliance, a single source of truth brings together the regulatory requirement and your processes and evidence of the requirement. The point is to maintain one governed record the team can use with confidence. The evidence layer is so important as it's becoming more common to be required to show how the rule was translated into action.
more → Security Boulevard, Monday, April 6th, 2026
This week's Attack of the Day posts revealed a clear pattern: attackers are deliberately routing attacks through legitimate security and platform infrastructure so the tools themselves become trust signals. TitanHQ and Cisco URL wrappers hid a malware payload.
more → Security Boulevard, Sunday, April 5th, 2026
Companies invest heavily in DDoS mitigation, yet outages still happen-often at the worst possible moment. The problem is rarely the protection technology, but the unseen gaps between deployment and a real attack, where misconfigurations, false assumptions, and untested scenarios quietly accumulate.
more → Security Boulevard, Sunday, April 5th, 2026
An internet-connected coffee machine reportedly led to a significant corporate data breach after attackers used the device as an entry point into a secure network. A digital forensics investigator identified only as TR examined the incident after a client suspected a rival had infiltrated its systems.
more → Security Boulevard, Thursday, April 2nd, 2026
Advanced persistent threats don't discriminate by organization size - they discriminate by defense capability. Nation-state actors and their proxies invest months conducting reconnaissance, moving laterally through networks with surgical patience, and exfiltrating data long before any alert fires.
more → Security Boulevard, Wednesday, April 1st, 2026
Modern SaaS teams need layered security covering enterprise SSO provisioning, API runtime protection, AI agent security, and passwordless authentication.
more → Security Boulevard, Wednesday, April 1st, 2026
For every human identity your IAM program governs, there are roughly 82 machine identities operating outside it. Most of them authenticate with static credentials that were provisioned once and never reviewed.
more → Security Boulevard, Tuesday, March 31st, 2026
Most organizations start their nonhuman identity security program with a secrets manager. It's a sensible first step: centralize your API keys, database passwords and tokens in an encrypted vault instead of scattering them across config files and environment variables.
more → Security Boulevard, Tuesday, March 31st, 2026
Identity attacks succeed because the credentials are already compromised.
more → Security Boulevard, Monday, March 30th, 2026
Key insights from Forrester's External Threat Intelligence Service Providers Landscape, Q1 2026 and what they mean for security teams.
more → Security Boulevard, Monday, March 30th, 2026
How secure is your organization when it comes to managing Non-Human Identities (NHIs)? With the increasing prevalence of cyber threats, optimizing NHI performance has become a cornerstone of effective cybersecurity strategies.
more → Security Boulevard, Friday, March 27th, 2026
Facts are intriguing, aren't they? But, they also reflect a lot that give us a direction to our security strategy that needs to be solid to avoid the consequences of a zero-day attack. Even though it's sound as a hypothesis, predicting a zero-day attack, however, there are proactive ways to prevent it, if not predict!
more → Security Boulevard, Friday, March 27th, 2026
At RSAC 2026, Nametag CEO Aaron Painter sat down with Security Weekly to discuss a growing problem in enterprise security: organizations can no longer be certain who is actually behind a human or AI identity.
more → Security Boulevard, Thursday, March 26th, 2026
Engineering teams lose thousands of hours annually building infrastructure that already exists as battle-tested platforms.
more → Security Boulevard, Wednesday, March 25th, 2026
Gartner predicts that by 2028, cloud computing will be a core business necessity, with global spending expected to surpass $1 trillion. As organizations continue to adopt cloud-native development to build and deliver innovative solutions, the demand for stronger application security (AppSec) practices is also on the rise.
more → Security Boulevard, Wednesday, March 25th, 2026
Choosing a passwordless authentication platform is not a single decision - it is a portfolio of decisions about security standards, user experience, regulatory compliance, integration complexity, and cost.
more → Security Boulevard, Wednesday, March 25th, 2026
For decades, enterprises relied on strong encryption to protect sensitive data in transit, and encryption used to be the end of the conversation.
more → Security Boulevard, Tuesday, March 24th, 2026
The rapid evolution of AI has moved us beyond simple chatbots into the era of agentic applications, systems that can plan, reason, and act autonomously across multiple steps. From finance and healthcare to cybersecurity and DevOps, these agents are no longer passive assistants; they are decision-makers.
more → Security Boulevard, Tuesday, March 24th, 2026
Enterprise security teams have long operated with a basic expectation: When something happens in a system, you can trace it back to a known identity. That no longer holds.
more → Security Boulevard, Tuesday, March 24th, 2026
The misconception: more data intelligence equals better security
more → Security Boulevard, Tuesday, March 24th, 2026
Modern apps no longer have well-defined boundaries. In today's SaaS ecosystem of cloud-native applications and hybrid setups, a mix of internal and third-party APIs often serve as the primary pipelines through which apps access information.
more → Security Boulevard, Monday, March 23rd, 2026
JWT and OAuth show up together in nearly every authentication system, which is why engineers often treat them as interchangeable. They are not. OAuth is an authorization framework that defines how to grant access. JWT is a token format that defines how to package and transmit claims.
more → Security Boulevard, Monday, March 23rd, 2026
AI isn't just moving fast. It's creating new attack paths. Cyber teams must now manage vulnerabilities - and their ramifications throughout their IT environments - in AI tools deployed without enough governance guardrails. The answer for securing this new attack surface? Unified exposure management.
more → Security Boulevard, Monday, March 23rd, 2026
Understanding the dynamics of Agentic AI in cybersecurity could be the catalyst your organization needs to bolster its data defenses. While we delve into the importance of Non-Human Identities (NHIs), we uncover critical insights into how the harmonious integration of AI can reshape modern security across industries.
more → Security Bouelevard, Saturday, March 21st, 2026
Most organizations still treat credentials as something that must be protected, stored, and rotated. But a second model is quietly reshaping how machine authentication works: eliminate static secrets altogether and authenticate workloads using identity and just-in-time access. These two approaches represent different philosophies, different operational realities, and different long-term costs.
more → Security Bouelevard, Saturday, March 21st, 2026
Cyber threats are evolving rapidly, becoming more stealthy, automated, and difficult to detect using traditional security approaches. Attackers increasingly rely on legitimate system tools, encrypted communication, and internal reconnaissance to bypass defenses and operate unnoticed within enterprise environments.
more → Security Bouelevard, Friday, March 20th, 2026
Enterprise SSO platforms enable secure authentication across SaaS applications using a single login.
more → Security Bouelevard, Thursday, March 19th, 2026
Most companies think they understand their data. They know they collect customer information. They know they store it in a CRM. They know their marketing team uses it.
more → Security Bouelevard, Thursday, March 19th, 2026
I recently joined Tim Peacock and Anton Chuvakin on the Google Cloud Security Podcast to talk about SIEM, AI SOC, pricing, federated architecture, detection engineering, and why network telemetry is quietly becoming important again.
more → Security Bouelevard, Thursday, March 19th, 2026
According to Gallup, more than half (52%) of U.S. employers now follow a hybrid working model. For enterprises, there is a clear logic behind this approach. Hybrid work is more flexible, favored by employees and crucially, powers a more productive team.
more → Security Bouelevard, Thursday, March 19th, 2026
If you run a Windows environment, you already know how critical PowerShell is. It's the backbone of modern administration, used for automation, configuration, and day-to-day operations at scale.
more → Security Bouelevard, Thursday, March 19th, 2026
Why Passwordless Authentication Still Depends on Passwords
more → Security Bouelevard, Thursday, March 19th, 2026
The shift to hybrid work arrangements has revolutionized the cybersecurity perimeter. Currently, roughly half of all employees who are remotely accessible are working from both their offices and homes, using different devices. In this fluid environment, experts are unanimous that identity, and not the network, is the new perimeter.
more → Security Bouelevard, Thursday, March 19th, 2026
AI code assistants accelerate development velocity, with 46% of code now completed by tools like GitHub Copilot.
more → Security Bouelevard, Thursday, March 19th, 2026
Today, cloud security teams face fragmented visibility and the challenge of prioritizing risks while identifying fix owners. A new joint solution from Tenable and OX helps you close the code-to-cloud gap from development through runtime. By combining CNAPP with deep AppSec, this integration is designed to eliminate visibility gaps and accelerate remediation.
more → Security Bouelevard, Wednesday, March 18th, 2026
Internal audit in a SOX‑scoped, multi‑ERP environment is no longer just about periodic reviews and sample testing. High‑reliability organizations are moving toward data‑driven, continuous assurance - but the underlying audit methodology is still built on five core stages: planning, risk assessment, fieldwork, analysis and reporting, and follow‑up/monitoring.supervizor+1
more → Security Bouelevard, Wednesday, March 18th, 2026
In last year's State of Passwordless Identity Assurance report, we declared an Identity Renaissance-the turning point where enterprises recognized that passwords and shared secrets were fundamentally broken, and began rethinking their approach to digital identity. Security leaders began exploring phishing-resistant authentication, FIDO passkeys, and stronger identity assurance models.
more → Security Bouelevard, Tuesday, March 17th, 2026
As companies scale, SaaS stacks expand faster than governance ever could. Tools get added to solve immediate problems, then stitched together through APIs, SSO, and permissions that rarely get revisited.
more → Security Bouelevard, Tuesday, March 17th, 2026
'It could've taken us a lot of time thinking about what to write for the justifications for each script. You just let the AI suggest the wording, check that it makes sense, approve, and move on to the next. It was really comfortable.' - Kfir Tzukrel, CISO / Broadway Gaming Group
more → Security Bouelevard, Tuesday, March 17th, 2026
Businesses and individuals rely on digital tools for everything from communication to commerce, but with this reliance comes heightened risk. Every interaction generates data, and every dataset becomes a potential target for misuse or exploitation.
more → Security Bouelevard, Tuesday, March 17th, 2026
The risk isn't AI getting an answer wrong. The risk is AI taking action.
more → Security Bouelevard, Monday, March 16th, 2026
Most organisations assume DDoS (Distributed denial of service) protection is a box they've already ticked. If traffic spikes or an attack starts, the thinking goes, their provider will absorb it and move on.
more → Security Boulevard, Saturday, March 14th, 2026
Cyber threats are evolving at a pace that traditional security testing methods struggle to keep up with. Organizations today operate in highly complex digital environments with cloud platforms, APIs, microservices, and rapidly deployed applications.
more → Security Boulevard, Friday, March 13th, 2026
In today's fast-evolving digital landscape, businesses can no longer rely on legacy login systems that are often fragmented, insecure, and cumbersome to manage.
more → Security Boulevard, Friday, March 13th, 2026
The best IAM platform for device-aware SSO depends on your use case: Microsoft Entra ID for Microsoft-centric workforce identity, Okta for multi-cloud enterprises, JumpCloud for unified identity + device management, and SSOJet or WorkOS for B2B SaaS companies adding enterprise SSO to their product.
more → Security Boulevard, Friday, March 13th, 2026
Artificial intelligence is quickly becoming part of everyday life inside the Security Operations Center (SOC). According to Prophet's State of AI in Security Operations 2025 Report, AI is expected to handle 60% of SOC workloads within the next three years. Most security leaders now see AI as a core part of the future SOC.
more → Security Boulevard, Thursday, March 12th, 2026
Your board wants AI. Your developers are building with it. Your budget committee is asking for an ROI timeline. But as CISO, you're the one who has to answer when the inevitable question comes up: 'How do we know this is secure?'
more → Security Boulevard, Thursday, March 12th, 2026
Cyber Risk Requires Enterprise-Level Accountability and Action
more → Security Boulevard, Thursday, March 12th, 2026
Ever feel like you're drowning in dashboards? We've all been there-staring at a screen full of red and green charts, wondering why we spend more time looking at what happened yesterday than actually fixing what's going wrong today.
more →