15 articles that week
Security Boulevard, Friday, February 6th, 2026
Let me tell you about a call I got last month. A finance director panicked, explaining how someone had been inside his company's systems for three weeks. No alarms. No malware detected. Nothing.
more →
Security Boulevard, Friday, February 6th, 2026
Humans remain the most vulnerable component of security, despite the rapid advancements in cyber defenses. The majority of breaches are still caused by human behavior, as per recent studies and professional predictions. According to Gartner, human error and social engineering will account for 85% of data breaches by 2026.
more → Security Boulevard, Wednesday, February 4th, 2026
Email attachments remain one of the most trusted entry points into enterprise environments. Despite years of awareness training and secure email gateways, attackers continue to rely on documents because they blend seamlessly into everyday workflows.
more → Security Boulevard, Wednesday, February 4th, 2026
There's an old joke in enterprise tech: IT giveth, and security taketh away. At its best, IT exists to empower people - to give employees faster, better, smarter tools to do their jobs.
more → Security Boulevard, Wednesday, February 4th, 2026
As financial institutions accelerate their cloud transformations, one truth has become clear: the traditional perimeter-based security can no longer defend against the distributed nature of modern financial ecosystems. In a world of open APIs, multi-cloud ecosystems, and AI-driven customer channels, the strongest defense isn't a higher wall - it's a smarter, continuously validated network of trust.
more → Security Boulevard, Wednesday, February 4th, 2026
The chatbot era has ended. For two years, we've interacted with digital assistants that summarize emails and suggest recipes, but the National Institute of Standards and Technology (NIST) now draws a definitive line between machines that talk and machines that act. Their newly released Request for Information (RFI) signals a fundamental paradigm shift in how we must approach AI risk.
more → Security Boulevard, Wednesday, February 4th, 2026
The 'alert fatigue' crisis plaguing Security Operations Centers (SOCs) isn't really about volume. It's about fighting adversarial systems with tools designed for a non-adversarial world.
more → Security Boulevard, Tuesday, February 3rd, 2026
In 2026, identity has firmly established itself as the new security perimeter. As enterprises accelerate cloud adoption, enable remote workforces, and integrate SaaS and third-party ecosystems, attackers are no longer trying to 'break in'; they are simply logging in.
more → Security Boulevard, Tuesday, February 3rd, 2026
Security teams face constant pressure from an overload of alerts and findings. Every new scanner or assessment adds to the pile, making it hard to focus on what matters. Instead of streamlining efforts, these tools often create more confusion by repeating the same issues across reports.
more → Security Boulevard, Tuesday, February 3rd, 2026
Ever wonder why, in 2025, we're still wrestling with getting a "simple" login button to work for enterprise customers? Honestly, it feels like we should have solved this by now, but sso is still the bane of most dev teams' existence.
more → Security Boulevard, Tuesday, February 3rd, 2026
I have been talking to a few AI SOC and new SIEM market entrants over the past few weeks. I have voiced some opinions in previous posts but have now started to capture a list of features that I believe represent the openings existing SIEM players have created in the market for these new vendors to emerge.
more → Security Boulevard, Tuesday, February 3rd, 2026
Compromised user credentials are a major security threat for organizations, as the 2025 Verizon DBIR reported that credential abuse was the leading initial access vector for data breaches. Recent data from Enzoic's Active Directory Lite (AD Lite) tool indicates that the risk of compromised credentials is growing.
more → Security Boulevard, Tuesday, February 3rd, 2026
Non-production environments are an often-overlooked entry point for data breaches. These systems-dev, test, staging, QA-often contain copies of production databases or subsets of real customer records, yet they rarely receive the same security scrutiny.
more → Security Boulevard, Monday, February 2nd, 2026
Ever tried to share a private medical record with a specialist or give a budget app access to your bank history without actually being there to click "Allow" every single time? It's a massive pain because standard oauth 2.0 usually expects you to be sitting right there in the browser redirect loop.
more → Security Boulevard, Monday, February 2nd, 2026
As companies look to modernize, building your own data center feels more like an unnecessary headache than a strategic move. Colocation has stepped in as the smart middle ground where you keep your hardware but skip the massive overhead of managing power and cooling. However, for most CIOs and CISOs, it always comes down to trust.
more →