Security Boulevard, Monday, April 13th, 2026
The Dark Web Explained with John Hammond (21:53)
The dark web is often misunderstood, but it plays an important role in both privacy technology and cybercrime activity.
more →
Back Issues This Week → Popular →
All issues › Archive
Security Boulevard — Archive
816 articles · page 5 of 17
Security Boulevard, Monday, April 13th, 2026
Survey Sees Little Progress Made on Automating Identity Management
A survey of 614 cybersecurity and IT leaders finds 89% of the applications deployed are not centrally managed via a multifactor authentication (MFA) platform.
more → Security Boulevard, Monday, April 13th, 2026
Seven Privilege Management Mistakes That Put Business Data at Risk
Every growing business has at least one lingering privilege management issue. It's not because your team is lazy. It's because organizations grow, restructure and hire far faster than manual access processes can keep up.
more → Security Boulevard, Friday, April 10th, 2026
Authentication Solutions For Businesses: Benefits, Use Cases, And More
Authentication is not an afterthought. With traditional password-based systems failing to keep pace, businesses need to adopt a strategic approach to enhance security and the user experience. Cyberattacks grew by 30% year-over-year in the second quarter of 2024, while the average cost of a data breach reached a record high of $4.45 million.
more → Security Boulevard, Thursday, April 9th, 2026
XDR vs SIEM vs SOAR: What's the Right Cybersecurity Strategy in 2026?
A Strategic Approach to Modern Security Operations -- The Growing Complexity of Security Decisions
more → Security Boulevard, Thursday, April 9th, 2026
The Cybersecurity Readiness Gap: Why 90% Of Companies Are Still Unprepared In 2026
The cybersecurity landscape of 2026 is defined by a staggering paradox: while organizations are investing more than ever in defense, the 'readiness gap' continues to widen.
more → Security Boulevard, Thursday, April 9th, 2026
Mythos: Just One Piece Of The Cybersecurity Puzzle
Anthropic's new AI model, Mythos, is being framed as a 'cybersecurity reckoning.' And yes, it's probably impressive. (We'll have to wait and see once it's broadly available.) But it's also missing the point.
more → IT Security Guru, Wednesday, April 8th, 2026
Most Organisations Face An Unsecured Api Surge As AI Agents Outpace Security
The latest State of AI and API Security Report Finds Almost Half of Organisations Have Delayed AI Deployments Due to API Security Concerns
more →
Security Boulevard, Wednesday, April 8th, 2026
Top VPN Services In 2026: Best Tested Picks For Your Needs
Top VPN Services in 2026: A Complete Guide to Choosing the Best VPN with High Speed, Security, and Privacy
more →
Security Boulevard, Wednesday, April 8th, 2026
Why Secure Login Systems Are Critical For Ecommerce Growth
Keeping customer data safe is crucial In ecommerce,. Weak login systems can lead to security problems like data breaches and fraud, which can harm your business and lose customer trust.
more → Security Boulevard, Wednesday, April 8th, 2026
Siem Detection Is Failing. Here's What Stronger Teams Do Instead.
For most security teams, detection feels like a treadmill. The alerts keep coming, rules keep breaking, and platform costs keep rising. Everyone's tired, but no one's moving forward.
more → Security Boulevard, Tuesday, April 7th, 2026
What We Learned About TEE Security From Auditing WhatsApp's Private Inference
WhatsApp's new 'Private Inference' feature represents one of the most ambitious attempts to combine end-to-end encryption with AI-powered capabilities, such as message summarization.
more → Security Boulevard, Tuesday, April 7th, 2026
Top Cloud Privileged Access Management Best Practices To Prevent Privilege Abuse
Privileged access abuse is behind most major cloud breaches. And it's not always a sophisticated attacker - sometimes it's a misconfigured service account that nobody reviewed in two years, or an IAM role inherited from an acquisition that was never cleaned up. The access was sitting there ungoverned and waiting.
more → Security Boulevard, Tuesday, April 7th, 2026
Legacy Systems Are Undermining Financial Institution Cybersecurity
Most banks struggle to adopt new digital solutions because of their legacy infrastructure. As cybercriminals follow the money, financial institutions have become prime targets. Another major incentive for attackers is the vast amount of data banks store.
more → Security Boulevard, Tuesday, April 7th, 2026
Identity Is The New Attack Surface (And Most Teams Aren't Prepared)
For decades, cybersecurity strategies have focused on protecting infrastructure: Firewalls, Endpoints, Networks
more → Security Boulevard, Tuesday, April 7th, 2026
Five Takeaways From 'The Future Of Search & Discovery: Understanding Agentic Commerce' Webinar
AI agents are already mediating the relationship between brands and shoppers-and most businesses aren't prepared for what agentic commerce means for their visibility, their data, or their security.
more → Security Boulevard, Monday, April 6th, 2026
Identity Security Starts Before Login
Identity security begins when a person's identity is first created and enrolled in your systems. This early moment shapes every authentication decision that follows and plays a central role in workforce impersonation risk. Increasingly, it's also where attackers focus.
more → Security Boulevard, Monday, April 6th, 2026
How A Single Source Of Truth Streamlines Regulatory Compliance
In regulatory compliance, a single source of truth brings together the regulatory requirement and your processes and evidence of the requirement. The point is to maintain one governed record the team can use with confidence. The evidence layer is so important as it's becoming more common to be required to show how the rule was translated into action.
more → Security Boulevard, Monday, April 6th, 2026
Best Of The Worst: The Week Your Security Tools Became The Disguise
This week's Attack of the Day posts revealed a clear pattern: attackers are deliberately routing attacks through legitimate security and platform infrastructure so the tools themselves become trust signals. TitanHQ and Cisco URL wrappers hid a malware payload.
more → Security Boulevard, Sunday, April 5th, 2026
Why DDoS Mitigation Fails: 5 Gaps That Testing Reveals
Companies invest heavily in DDoS mitigation, yet outages still happen-often at the worst possible moment. The problem is rarely the protection technology, but the unseen gaps between deployment and a real attack, where misconfigurations, false assumptions, and untested scenarios quietly accumulate.
more → Security Boulevard, Sunday, April 5th, 2026
Internet-Connected Coffee Machine Reportedly Led To Corporate Data Breach
An internet-connected coffee machine reportedly led to a significant corporate data breach after attackers used the device as an entry point into a secure network. A digital forensics investigator identified only as TR examined the incident after a client suspected a rival had infiltrated its systems.
more → Security Boulevard, Thursday, April 2nd, 2026
Standardize or Suffer: The JCHK Blueprint for MSSPs Defending SMB and SME Clients
Advanced persistent threats don't discriminate by organization size - they discriminate by defense capability. Nation-state actors and their proxies invest months conducting reconnaissance, moving laterally through networks with surgical patience, and exfiltrating data long before any alert fires.
more → Security Boulevard, Wednesday, April 1st, 2026
Seven Identity And API Security Tools Modern SaaS Teams Should Evaluate In 2026
Modern SaaS teams need layered security covering enterprise SSO provisioning, API runtime protection, AI agent security, and passwordless authentication.
more → Security Boulevard, Wednesday, April 1st, 2026
Workload Identity And Access Management: The Definitive Guide
For every human identity your IAM program governs, there are roughly 82 machine identities operating outside it. Most of them authenticate with static credentials that were provisioned once and never reviewed.
more → Security Boulevard, Tuesday, March 31st, 2026
Workload IAM vs. Secrets Management: A Practical Decision Guide
Most organizations start their nonhuman identity security program with a secrets manager. It's a sensible first step: centralize your API keys, database passwords and tokens in an encrypted vault instead of scattering them across config files and environment variables.
more → Security Boulevard, Tuesday, March 31st, 2026
2026 SANS Identity Threats Report: Why Attacks Still Work
Identity attacks succeed because the credentials are already compromised.
more → Security Boulevard, Monday, March 30th, 2026
Forrester Threat Intelligence Landscape: Key Takeaways For Security Leaders
Key insights from Forrester's External Threat Intelligence Service Providers Landscape, Q1 2026 and what they mean for security teams.
more → Security Boulevard, Monday, March 30th, 2026
Are Your NHIs Fully Supported For Optimal Performance?
How secure is your organization when it comes to managing Non-Human Identities (NHIs)? With the increasing prevalence of cyber threats, optimizing NHI performance has become a cornerstone of effective cybersecurity strategies.
more → Security Boulevard, Friday, March 27th, 2026
To What Extent Can Zero-Day Attacks Be Predicted?
Facts are intriguing, aren't they? But, they also reflect a lot that give us a direction to our security strategy that needs to be solid to avoid the consequences of a zero-day attack. Even though it's sound as a hypothesis, predicting a zero-day attack, however, there are proactive ways to prevent it, if not predict!
more → Security Boulevard, Friday, March 27th, 2026
Authenticated, But Not Verified: The Workforce Identity Gap
At RSAC 2026, Nametag CEO Aaron Painter sat down with Security Weekly to discuss a growing problem in enterprise security: organizations can no longer be certain who is actually behind a human or AI identity.
more → Security Boulevard, Thursday, March 26th, 2026
7 Enterprise Infrastructure Tools That Eliminate Months Of Engineering Work
Engineering teams lose thousands of hours annually building infrastructure that already exists as battle-tested platforms.
more → Security Boulevard, Wednesday, March 25th, 2026
What Is Shift Left Security?
Gartner predicts that by 2028, cloud computing will be a core business necessity, with global spending expected to surpass $1 trillion. As organizations continue to adopt cloud-native development to build and deliver innovative solutions, the demand for stronger application security (AppSec) practices is also on the rise.
more → Security Boulevard, Wednesday, March 25th, 2026
Top 5 Passwordless Authentication Solutions In 2026: Enterprise And SaaS Comparison
Choosing a passwordless authentication platform is not a single decision - it is a portfolio of decisions about security standards, user experience, regulatory compliance, integration complexity, and cost.
more → Security Boulevard, Wednesday, March 25th, 2026
AI Has Created A New Attack Surface And Encryption Is Not Enough
For decades, enterprises relied on strong encryption to protect sensitive data in transit, and encryption used to be the end of the conversation.
more → Security Boulevard, Tuesday, March 24th, 2026
OWASP Top 10 Risks for Agentic Applications: Must-Know Risk
The rapid evolution of AI has moved us beyond simple chatbots into the era of agentic applications, systems that can plan, reason, and act autonomously across multiple steps. From finance and healthcare to cybersecurity and DevOps, these agents are no longer passive assistants; they are decision-makers.
more → Security Boulevard, Tuesday, March 24th, 2026
Introducing The Identity And Access Gaps In The Age Of Autonomous AI Survey Report
Enterprise security teams have long operated with a basic expectation: When something happens in a system, you can trace it back to a known identity. That no longer holds.
more → Security Boulevard, Tuesday, March 24th, 2026
From Data To Intelligence: Why More Signals Don't Equal Better Security
The misconception: more data intelligence equals better security
more → Security Boulevard, Tuesday, March 24th, 2026
Effective API Security Testing Strategies For Modern Application Environments
Modern apps no longer have well-defined boundaries. In today's SaaS ecosystem of cloud-native applications and hybrid setups, a mix of internal and third-party APIs often serve as the primary pipelines through which apps access information.
more → Security Boulevard, Monday, March 23rd, 2026
The Trivy Compromise: The Fallacy Of Secrets Management And The Case For Workload Identity
JWT and OAuth show up together in nearly every authentication system, which is why engineers often treat them as interchangeable. They are not. OAuth is an authorization framework that defines how to grant access. JWT is a token format that defines how to package and transmit claims.
more → Security Boulevard, Monday, March 23rd, 2026
The Hidden Cost Of AI Speed: Unmanaged Cyber Risk
AI isn't just moving fast. It's creating new attack paths. Cyber teams must now manage vulnerabilities - and their ramifications throughout their IT environments - in AI tools deployed without enough governance guardrails. The answer for securing this new attack surface? Unified exposure management.
more → Security Boulevard, Monday, March 23rd, 2026
How Can Agentic AI Enhance Data Security
Understanding the dynamics of Agentic AI in cybersecurity could be the catalyst your organization needs to bolster its data defenses. While we delve into the importance of Non-Human Identities (NHIs), we uncover critical insights into how the harmonious integration of AI can reshape modern security across industries.
more → Security Bouelevard, Saturday, March 21st, 2026
Secrets Management Vs. Secrets Elimination: Where Should You Invest?
Most organizations still treat credentials as something that must be protected, stored, and rotated. But a second model is quietly reshaping how machine authentication works: eliminate static secrets altogether and authenticate workloads using identity and just-in-time access. These two approaches represent different philosophies, different operational realities, and different long-term costs.
more → Security Bouelevard, Saturday, March 21st, 2026
Real Attack Alert Analysis: From Hidden Indicators To Actionable Threat Intelligence
Cyber threats are evolving rapidly, becoming more stealthy, automated, and difficult to detect using traditional security approaches. Attackers increasingly rely on legitimate system tools, encrypted communication, and internal reconnaissance to bypass defenses and operate unnoticed within enterprise environments.
more → Security Bouelevard, Friday, March 20th, 2026
Enterprise SSO Platforms Compared: SSOJet vs Auth0 vs WorkOS vs Okta for SaaS
Enterprise SSO platforms enable secure authentication across SaaS applications using a single login.
more → Security Bouelevard, Thursday, March 19th, 2026
What Is Data Mapping and Why It Matters for GDPR
Most companies think they understand their data. They know they collect customer information. They know they store it in a CRM. They know their marketing team uses it.
more → Security Bouelevard, Thursday, March 19th, 2026
SIEM Is Not Dead. It Just Stopped Moving Fast Enough.
I recently joined Tim Peacock and Anton Chuvakin on the Google Cloud Security Podcast to talk about SIEM, AI SOC, pricing, federated architecture, detection engineering, and why network telemetry is quietly becoming important again.
more → Security Bouelevard, Thursday, March 19th, 2026
Security Architecture For Hybrid Work: Enterprise Guide
According to Gallup, more than half (52%) of U.S. employers now follow a hybrid working model. For enterprises, there is a clear logic behind this approach. Hybrid work is more flexible, favored by employees and crucially, powers a more productive team.
more → Security Bouelevard, Thursday, March 19th, 2026
PowerShell Is a Security Risk - Here's How to Fix It
If you run a Windows environment, you already know how critical PowerShell is. It's the backbone of modern administration, used for automation, configuration, and day-to-day operations at scale.
more → Security Bouelevard, Thursday, March 19th, 2026
Password Retirement Is Premature
Why Passwordless Authentication Still Depends on Passwords
more → Security Bouelevard, Thursday, March 19th, 2026
Identity-Centric Security Strategies For Hybrid Workforces
The shift to hybrid work arrangements has revolutionized the cybersecurity perimeter. Currently, roughly half of all employees who are remotely accessible are working from both their offices and homes, using different devices. In this fluid environment, experts are unanimous that identity, and not the network, is the new perimeter.
more →