828 articles · page 6 of 17
Security Boulevard, Monday, March 23rd, 2026
JWT and OAuth show up together in nearly every authentication system, which is why engineers often treat them as interchangeable. They are not. OAuth is an authorization framework that defines how to grant access. JWT is a token format that defines how to package and transmit claims.
more →
Security Boulevard, Monday, March 23rd, 2026
AI isn't just moving fast. It's creating new attack paths. Cyber teams must now manage vulnerabilities - and their ramifications throughout their IT environments - in AI tools deployed without enough governance guardrails. The answer for securing this new attack surface? Unified exposure management.
more → Security Boulevard, Monday, March 23rd, 2026
Understanding the dynamics of Agentic AI in cybersecurity could be the catalyst your organization needs to bolster its data defenses. While we delve into the importance of Non-Human Identities (NHIs), we uncover critical insights into how the harmonious integration of AI can reshape modern security across industries.
more → Security Bouelevard, Saturday, March 21st, 2026
Most organizations still treat credentials as something that must be protected, stored, and rotated. But a second model is quietly reshaping how machine authentication works: eliminate static secrets altogether and authenticate workloads using identity and just-in-time access. These two approaches represent different philosophies, different operational realities, and different long-term costs.
more → Security Bouelevard, Saturday, March 21st, 2026
Cyber threats are evolving rapidly, becoming more stealthy, automated, and difficult to detect using traditional security approaches. Attackers increasingly rely on legitimate system tools, encrypted communication, and internal reconnaissance to bypass defenses and operate unnoticed within enterprise environments.
more → Security Bouelevard, Friday, March 20th, 2026
Enterprise SSO platforms enable secure authentication across SaaS applications using a single login.
more → Security Bouelevard, Thursday, March 19th, 2026
Most companies think they understand their data. They know they collect customer information. They know they store it in a CRM. They know their marketing team uses it.
more → Security Bouelevard, Thursday, March 19th, 2026
I recently joined Tim Peacock and Anton Chuvakin on the Google Cloud Security Podcast to talk about SIEM, AI SOC, pricing, federated architecture, detection engineering, and why network telemetry is quietly becoming important again.
more → Security Bouelevard, Thursday, March 19th, 2026
According to Gallup, more than half (52%) of U.S. employers now follow a hybrid working model. For enterprises, there is a clear logic behind this approach. Hybrid work is more flexible, favored by employees and crucially, powers a more productive team.
more → Security Bouelevard, Thursday, March 19th, 2026
If you run a Windows environment, you already know how critical PowerShell is. It's the backbone of modern administration, used for automation, configuration, and day-to-day operations at scale.
more → Security Bouelevard, Thursday, March 19th, 2026
Why Passwordless Authentication Still Depends on Passwords
more → Security Bouelevard, Thursday, March 19th, 2026
The shift to hybrid work arrangements has revolutionized the cybersecurity perimeter. Currently, roughly half of all employees who are remotely accessible are working from both their offices and homes, using different devices. In this fluid environment, experts are unanimous that identity, and not the network, is the new perimeter.
more → Security Bouelevard, Thursday, March 19th, 2026
AI code assistants accelerate development velocity, with 46% of code now completed by tools like GitHub Copilot.
more → Security Bouelevard, Thursday, March 19th, 2026
Today, cloud security teams face fragmented visibility and the challenge of prioritizing risks while identifying fix owners. A new joint solution from Tenable and OX helps you close the code-to-cloud gap from development through runtime. By combining CNAPP with deep AppSec, this integration is designed to eliminate visibility gaps and accelerate remediation.
more → Security Bouelevard, Wednesday, March 18th, 2026
Internal audit in a SOX‑scoped, multi‑ERP environment is no longer just about periodic reviews and sample testing. High‑reliability organizations are moving toward data‑driven, continuous assurance - but the underlying audit methodology is still built on five core stages: planning, risk assessment, fieldwork, analysis and reporting, and follow‑up/monitoring.supervizor+1
more → Security Bouelevard, Wednesday, March 18th, 2026
In last year's State of Passwordless Identity Assurance report, we declared an Identity Renaissance-the turning point where enterprises recognized that passwords and shared secrets were fundamentally broken, and began rethinking their approach to digital identity. Security leaders began exploring phishing-resistant authentication, FIDO passkeys, and stronger identity assurance models.
more → Security Bouelevard, Tuesday, March 17th, 2026
As companies scale, SaaS stacks expand faster than governance ever could. Tools get added to solve immediate problems, then stitched together through APIs, SSO, and permissions that rarely get revisited.
more → Security Bouelevard, Tuesday, March 17th, 2026
'It could've taken us a lot of time thinking about what to write for the justifications for each script. You just let the AI suggest the wording, check that it makes sense, approve, and move on to the next. It was really comfortable.' - Kfir Tzukrel, CISO / Broadway Gaming Group
more → Security Bouelevard, Tuesday, March 17th, 2026
Businesses and individuals rely on digital tools for everything from communication to commerce, but with this reliance comes heightened risk. Every interaction generates data, and every dataset becomes a potential target for misuse or exploitation.
more → Security Bouelevard, Tuesday, March 17th, 2026
The risk isn't AI getting an answer wrong. The risk is AI taking action.
more → Security Bouelevard, Monday, March 16th, 2026
Most organisations assume DDoS (Distributed denial of service) protection is a box they've already ticked. If traffic spikes or an attack starts, the thinking goes, their provider will absorb it and move on.
more → Security Boulevard, Saturday, March 14th, 2026
Cyber threats are evolving at a pace that traditional security testing methods struggle to keep up with. Organizations today operate in highly complex digital environments with cloud platforms, APIs, microservices, and rapidly deployed applications.
more → Security Boulevard, Friday, March 13th, 2026
In today's fast-evolving digital landscape, businesses can no longer rely on legacy login systems that are often fragmented, insecure, and cumbersome to manage.
more → Security Boulevard, Friday, March 13th, 2026
The best IAM platform for device-aware SSO depends on your use case: Microsoft Entra ID for Microsoft-centric workforce identity, Okta for multi-cloud enterprises, JumpCloud for unified identity + device management, and SSOJet or WorkOS for B2B SaaS companies adding enterprise SSO to their product.
more → Security Boulevard, Friday, March 13th, 2026
Artificial intelligence is quickly becoming part of everyday life inside the Security Operations Center (SOC). According to Prophet's State of AI in Security Operations 2025 Report, AI is expected to handle 60% of SOC workloads within the next three years. Most security leaders now see AI as a core part of the future SOC.
more → Security Boulevard, Thursday, March 12th, 2026
Your board wants AI. Your developers are building with it. Your budget committee is asking for an ROI timeline. But as CISO, you're the one who has to answer when the inevitable question comes up: 'How do we know this is secure?'
more → Security Boulevard, Thursday, March 12th, 2026
Cyber Risk Requires Enterprise-Level Accountability and Action
more → Security Boulevard, Thursday, March 12th, 2026
Ever feel like you're drowning in dashboards? We've all been there-staring at a screen full of red and green charts, wondering why we spend more time looking at what happened yesterday than actually fixing what's going wrong today.
more → Security Boulevard, Thursday, March 12th, 2026
Google's H1 2026 Cloud Threat Horizons Report, produced by the combined intelligence of Google Threat Intelligence Group, Mandiant Incident Response, and the Office of the CISO, documents something security leaders have been bracing for: The threat landscape isn't just evolving, it's accelerating past our ability to respond with the tools and organizational instincts we've built over the last two decades.
more → Security Boulevard, Tuesday, March 10th, 2026
When cybersecurity teams talk about risk, they usually speak in technical terms like vulnerabilities, exploits, and attack vectors. But when they walk into the boardroom, they need to speak a different language.
more → Security Boulevard, Monday, March 9th, 2026
Organizations may be increasingly adopting Identity Threat Detection and Response (ITDR) practices, but a critical gap in disaster recovery readiness is leaving many vulnerable to catastrophic failure.
more → Security Boulevard, Monday, March 9th, 2026
AI is entering organisations faster than the security controls designed to govern it.
more → Security Boulevard, Monday, March 9th, 2026
Transforming Security Operations with Intelligent, Real-Time Threat Detection
more → Security Boulevard, Friday, March 6th, 2026
A phishing page disguised as a Google Meet update notice is silently handing victims' Windows computers to an attacker-controlled management server. No password is stolen, no files are downloaded, and there are no obvious red flags.
more → Security Boulevard, Friday, March 6th, 2026
Where organizations grapple with digital transformation, one question looms large: Can leveraging Agentic AI revolutionize how we manage security frameworks, particularly for Non-Human Identities (NHIs)? The integration of advanced AI solutions into cybersecurity strategies has become imperative.
more → Security Boulevard, Thursday, March 5th, 2026
Enterprise organizations rely on identity providers to manage authentication, secure access to applications, and automate identity lifecycle management.
more → Security Boulevard, Tuesday, March 3rd, 2026
The pervasive integration of large language models (LLMs) into modern application development is fundamentally reshaping the software security landscape. While AI dramatically improves developer productivity, it also introduces a new asymmetry in cybersecurity - one that favors speed, scale, and automation over traditional human-centric defenses.
more → Security Boulevard, Tuesday, March 3rd, 2026
For decades, identity followed a simple premise: authenticate once, authorize statically, audit periodically.
more → Security Boulevard, Monday, March 2nd, 2026
Active Directory remains the backbone of enterprise identity. Despite years of modernization efforts, many organizations still rely on legacy authentication protocols that were never designed for today's threat landscape.
more → Security Boulevard, Sunday, March 1st, 2026
Can Artificial Intelligence (AI) really keep up with evolving cyber threats? With technology evolves at an unprecedented pace, so do the tactics and techniques employed by cybercriminals. This poses a critical question for cybersecurity experts: Are adaptive AI systems truly equipped to counter these emerging dangers?
more → Security Boulevard, Sunday, March 1st, 2026
Are your security strategies keeping up with the increasing complexity of digital? With cybersecurity challenges evolve, so do the measures to counter them. Among these advancements, the management of Non-Human Identities (NHIs) is proving crucial.
more → Security Boulevard, Sunday, March 1st, 2026
A Deep Technical Guide to Identity Broker Architecture
more → Security Boulevard, Saturday, February 28th, 2026
Smaller organizations are increasingly under attack, with ransomware emerging as the dominant threat. According to the Verizon 2025 Data Breach Investigations Report, ransomware was involved in 88% of breaches affecting small and medium-sized enterprises (SMEs), compared to 39% among large enterprises. Such incidents can disrupt operations, expose sensitive information, and drive up recovery costs.
more → Security Boulevard, Friday, February 27th, 2026
There is a gap in enterprise security that the industry has been talking around for years without naming it directly. It sits between two disciplines that most organizations treat as separate: Vulnerability management and detection and response.
more → Security Boulevard, Friday, February 27th, 2026
Most security content about Zero Trust stays at the philosophy level. Never trust, always verify - yes, we know. But when you're responsible for actually building and securing infrastructure, you need to know what that means in practice.
more → Security Boulevard, Thursday, February 26th, 2026
As the network security landscape matures, a consensus has emerged among CISOs and security architects that preventing lateral movement attacks through microsegmentation is a critical part of their overall cybersecurity strategy.
more → Security Boulevard, Thursday, February 26th, 2026
The chief information security officer (CISO) is no longer just a technical operator confined to incident response and system architecture. As the pace of digital transformation accelerates and cyberthreats grow more complex, business leaders expect security to be a strategic function.
more → Security Boulevard, Thursday, February 26th, 2026
Enterprise Single Sign-On (SSO) promises something every organization wants; namely, fewer passwords, stronger security, and smoother access to key systems. Using only one set of credentials, employees can move between platforms without friction, and IT teams gain centralized visibility and control. It sounds simple. However, in reality, it is a total transformation.
more → Security Boulevard, Thursday, February 26th, 2026
By definition, an advanced persistent threat (APT) is a prolonged, targeted attack on a specific victim with the intention to compromise their system and gain information from or about that target.
more → Security Boulevard, Thursday, February 26th, 2026
Most breaches don't start with malware or zero-day exploits. They start with a login.
more →