The primary destination for leading cybersecurity news and discourse. Powered by @TechstrongGroup.
Joined April 2010
- Tweets41.6K
- Following1.6K
- Followers7K
- Likes3.4K
Investigators from the U.S. and 20 African countries shut down 10,909 malicious networks and arrested 1,462 people in an Interpol-led operation that recovered more than $105 million in illicit funds.
With AI now linked to more than 55% of reported cybercrimes in Africa, Operation Serengeti III makes the case that borderless crime requires borderless cooperation.
See how the operation came together and who helped make it happen: buff.ly/UO7nvRn
#Cybersecurity #Interpol #CyberCrime #AI #InfoSec
Security Boulevard retweeted
GitHub has launched a package firewall in public preview, targeting the problem that has hit npm users repeatedly this year: malware that steals credentials as soon as a package is installed.
Attackers have been doing their best work during install time, with the Axios compromise in March dropping a remote access trojan through a postinstall script, and GitHub's answer sits in the request path between runners, coding agents and workstations on one side and upstream registries on the other, with a one-day cooldown that Datadog Security Labs argues would have stopped Axios in its tracks.
Read the full article on the five controls and what the firewall can't catch: buff.ly/fVxliI0
#GitHub #DevSecOps #SupplyChainSecurity #npm #AppSec
Security Boulevard retweeted
Quantum threats to RSA and ECC are accelerating, and with 2029–2030 deadlines set, post-quantum security is now urgent. Alan Shimel (@ashimmy) with Kevin Hilscher (DigiCert), Jostein Stokkan (Atea) youtube.com/watch?v=KTegzDs-… #QuantumComputing #CyberSecurity
Security Boulevard retweeted
Did you know that your security telemetry doesn’t have to move before you can analyze it??
Cribl Detect helps teams investigate across distributed data and existing pipelines, with a federated approach built for flexibility.
Details on @securityblvd: bit.ly/4rXdrSN
A New Mexico judge ordered Meta to pay $25 billion over misleading privacy practices tied to the Cambridge Analytica scandal. Meta plans to appeal the record penalty.
Read more: buff.ly/L3pdme8
#Meta #DataPrivacy #CambridgeAnalytica #Cybersecurity #TechRegulation
The cloud was supposed to simplify security, and instead it scattered data across dozens of services and thousands of new identity relationships until nobody could say who owned what.
The 2024 Snowflake campaign hit roughly 165 organizations without breaching Snowflake at all, because MFA was never enforced on the customer side, and generative AI is widening the group of people who can stand up an app before Security ever learns it exists.
Read the full piece on the assumption gap, cloud sprawl and building the ground rules before deployment: buff.ly/PfxpRWh
#Cybersecurity #CloudSecurity #SharedResponsibility #CSPM
Two critical PHP vulnerabilities carrying a 9.2 severity score threaten the 70% of websites running the language, and researchers at Wiz, OpenAI and Calif found them by using frontier AI models to chain steps that sat at the edge of what human researchers could practically achieve.
As the Wiz team put it, PHP2Shell could mark a turning point for the AI era, illustrating how AI can change the practical exploitability of longstanding vulnerabilities, and in-the-wild exploitation attempts are already hitting watchTowr's sensors.
Read the full article on the flaws and what teams should check before the next crisis: buff.ly/JSBlz1m
#Cybersecurity #PHP #InfoSec #AI #AppSec
After a package is delivered, it's relatively trivial to use AI to create a fake image of a damaged item and demand a replacement, and many online sellers would rather ship a new one than have the item sent back, so the original winds up resold.
Among surveyed AI-assisted fraudsters, 81% had engaged in first-party fraud, rates rose 21% in six months, and 17% said using AI didn't actually feel like committing a crime.
Read the full analysis of the trend and what fraud teams can do about it: buff.ly/JZM5TwS
#Cybersecurity #Fraud #AI #Deepfakes #IdentitySecurity
Security Boulevard retweeted
#Ransomware Recovery Isn't a #Backup Problem >> It's an #Identity Problem.
buff.ly/iP112D9
@SecurityBlvd @Fenix24_dr #tech #business #leadership #management #governance #cybersecurity #security #infosec #cybercriminals #cybercrime #CIO #CTO #CEO #CISO #cyberthreats #cyberattacks #databreaches #crisismanagement #incidentresponse
Security Boulevard retweeted
Voice cloning makes identity theft easier than ever. Never use your voice as a password, and always stay alert for urgent calls from executives late on a Friday. Alan Shimel (@ashimmy) with Frank Riccardi (Self-employed) techstrong.tv/videos/intervi… #CyberSecurity #Deepfakes
Security Boulevard retweeted
Quantum computing won’t just break legacy encryption down the road—it is already reshaping risk profiles through "harvest now, decrypt later" campaigns and looming regulatory deadlines. 📊 youtu.be/RKRvDYGhHvU?si=bt7J…
▶️ In this episode of the Security Boulevard Podcast, Tom Hollingsworth and Fernando Montenegro cut through the marketing noise to examine what transitioning to Post-Quantum Cryptography (PQC) actually demands.
This and more on the Security Boulevard Podcast, part of the Futurum Media Podcast Network.
@SecurityBlvd @TechFieldDay @NetworkingNerd @TheFuturumGroup
#Cybersecurity #PostQuantumCryptography #CryptoAgility #QDay #InfoSec
Trump administration appointees reportedly asked CISA to secretly hack a voting machine and report findings to the White House. The plan was abandoned after officials raised concerns.
Read more: buff.ly/uvlIAha
#Cybersecurity #ElectionSecurity #CISA #VotingTechnology #GovernmentSecurity
Microsoft has introduced three new identity and access controls for AI agents, giving agents separate identities from the employees who sponsor them, limiting their authority to specific approved tasks and adjusting permissions as risk rises without revoking the sponsoring user's access.
Dynamic Permissions, Dynamic Agent Risk and Dynamic Conditional Access are aimed at the moment an agent gets compromised or wanders off task, and Microsoft is expanding agent discovery to 60 types including Claude Code, OpenAI Codex and GitHub Copilot.
Read the full article on how the controls work and when they'll be available: buff.ly/6nC18XD
#Microsoft #AIAgents #IdentitySecurity #ZeroTrust
Lenders have already lost $2.4 billion to synthetic identities and credit washing as of June, and TransUnion's new Credit Washing and Synthetic Fraud Scores are meant to catch those accounts while they're being opened rather than after.
Cybersecurity teams can embed the scoring in existing workflows, and Oscilar is already using it to automate credit risk decisions, because when AI keeps driving the cost of a fake identity down, speed is everything.
Read the full article on why the operating assumption is now that any new account is fake until proven otherwise: buff.ly/I8a38gw
#Cybersecurity #Fraud #TransUnion #SyntheticIdentity
Security Boulevard retweeted
Citigroup and Bank of America have joined Charles Schwab and JPMorgan in blocking AI agents from logging into customer accounts and moving money, with Schwab's CEO saying his firm blocks unauthorized agents ten to twenty times a week.
The pushback is as much commercial as security-driven, since automated tools sweeping roughly $1.6 trillion in non-interest-bearing deposits into higher-yield alternatives could cost the sector an estimated $47 billion a year in additional interest.
Read the full article on the gated, view-only frameworks banks are building instead: buff.ly/RL40esn
#Cybersecurity #AI #AIAgents #Banking #Fintech
Security Boulevard retweeted
RapidFort has allied with Wiz and Aqua Security to surface its curated container advisories directly inside their platforms, and signed a cooperative research agreement with SpaceWERX to apply the same technology to Space Force use cases.
That matters because application developers keep pulling images without checking for known vulnerabilities, and cybercriminals using AI to find exploits in hours are widening a security debt most DevSecOps teams were never staffed to pay down.
Read the full article on the alliances and why DevSecOps teams should prepare now for what might soon become the worst of times: zpr.io/PUZ5RLpRpXfd
#DevSecOps #Cybersecurity #CloudNative #AppSec
Security Boulevard retweeted
GitHub has made AI Scan for pull requests generally available, filling in coverage where CodeQL doesn't reach, including PHP, Shell, Terraform configuration, Dockerfiles and Blazor, all files that define how software gets built and deployed.
AI Scan findings are advisory and won't block merges, and they don't run on fork-based or Dependabot pull requests, which puts the burden on teams to assign an owner and act on what it finds.
Read the full article on what changed since preview and how to roll it out: buff.ly/TDt4FF2
#GitHub #DevSecOps #AppSec #CodeQL #AISecurity
A Proofpoint survey found 97% of U.S. healthcare organizations experienced cyberattacks, with 74% reporting patient care disruptions. AI security gaps are adding to the risks.
Read more: buff.ly/hI717V3
#HealthcareCybersecurity #Cybersecurity #PatientSafety #DataSecurity #AISecurity
The Hague spent years shoring up the digital resilience of NGOs, charities and community organizations, and now it's turning its blueprint over to cities worldwide for free, built on a model that already quadrupled one organization's cybersecurity assessment score.
As one expert notes, civil society relies heavily on OT and IoT systems that are often the most vulnerable devices, and many municipalities simply aren't staffed or prepared for it.
Read the full article on what the blueprint offers and where it falls short: buff.ly/nUifu5S
#Cybersecurity #DigitalResilience #Cities #Nonprofits
Tomorrow at 1 PM ET: Do you know how AI uses data on your endpoints?
Join Michael Roberts of Cresta and Or Guz of Bold Security to explore fine-grained control over endpoint data and AI activity.
Register: buff.ly/727sYbo
#EndpointSecurity #AISecurity
