828 articles · page 7 of 17
Security Boulevard, Thursday, February 26th, 2026
In our opinion, Gartner's 2026 research reflects this broader evolution. Identity has expanded beyond perimeter controls and point-in-time authentication to encompass verification of the human, contextual risk assessment, and automated trust decisions.
more →
Security Boulevard, Thursday, February 26th, 2026
Supply chains are becoming more distributed, and as a result, vendor relationships have become ongoing operational dependencies that require structure and oversight.
more → Security Boulevard, Wednesday, February 25th, 2026
If you're an application security engineer on a small team inside a large, decentralized organization, you already know the feeling: hundreds of products shipping continuously, engineering teams moving fast, and you and your colleagues outnumbered by 100x trying to keep it all secure.
more → Security Boulevard, Wednesday, February 25th, 2026
For two decades, the web browser served as the primary security frontier for digital interactions.
more → Security Boulevard, Tuesday, February 24th, 2026
Ask any SaaS founder what keeps them up at night, and you will hear the same trio: shipping fast, landing customers, and staying off the breach headlines.
more → Security Boulevard, Tuesday, February 24th, 2026
A report published by CrowdStrike today finds the average breakout time for a cyberattack in 2025 has been reduced to 29 minutes, representing a 65% year-over-year reduction.
more → Security Boulevard, Tuesday, February 24th, 2026
In an era where artificial intelligence (AI) and machine learning (ML) are driving unprecedented innovation and efficiency, a new class of cyber threats has emerged that puts sensitive data and entire business operations at serious risk.
more → Security Boulevard, Tuesday, February 24th, 2026
Most companies think of cyber insurance the way they think of fire insurance. They assume that if something catastrophic happens-ransomware, a breach, a fraud scheme-the policy will respond. They believe cyber insurance is a modern form of resilience, a financial backstop for an operational inevitability.
more → Security Boulevard, Tuesday, February 24th, 2026
In a recent roundup of strategic initiatives for CISOs, I argued that continuous assurance is the 2026 operating model. Across all ten initiatives, the pattern was clear. Security is no longer being evaluated by effort, it's being evaluated by outcomes.
more → Security Boulevard, Monday, February 23rd, 2026
For a long time, the concept of a 'site' in networking and security was synonymous with a physical office
more → Security Boulevard, Monday, February 23rd, 2026
It's 2026. The "Digital Wallet" isn't a feature anymore; it's invisible plumbing. You glance at your phone, a biometric prompt flashes, and you're in. No typing, no friction. We take this magic for granted.
more → Security Boulevard, Monday, February 23rd, 2026
Ever tried sharing a medical record with a specialist or letting a tax app see your bank data without just handing over your password? It usually ends up being a mess of "all or nothing" permissions that makes security teams lose sleep.
more → Menlo Security, Monday, February 23rd, 2026
In the relentless cat-and-mouse game between threat actors and defenders, phishing infrastructure has evolved from simple credential harvesting into sophisticated operations with multi-layered defensive mechanisms.
more →
Security Boulevard, Friday, February 20th, 2026
As SaaS platforms expand in complexity, security cannot stop at deployment. Post-launch environments introduce new integrations, user access changes, and configuration updates that significantly increase risk exposure.
more → Security Boulevard, Friday, February 20th, 2026
Still running systems written in COBOL from the '90s? You're not alone. IBM's 2025 Cost of a Data Breach report puts the average global breach at USD 4.4 million.
more → Security Boulevard, Friday, February 20th, 2026
In today's threat landscape, cyberattacks are no longer isolated incidents - they are continuous, automated, and increasingly sophisticated. Organizations must move beyond traditional monitoring and adopt intelligent, real-time detection platforms capable of identifying both known and emerging threats.
more → Security Boulevard, Friday, February 20th, 2026
The global vulnerability landscape continues to expand rapidly, with thousands of new CVEs published every year. Thus, allowing hackers to weaponize newly disclosed flaws at an instant.
more → Security Boulevard, Thursday, February 19th, 2026
Last month, Microsoft quietly confirmed something that should keep every CISO up at night.
more → Security Boulevard, Thursday, February 19th, 2026
Website owners should take notice of the future changes to the SSL/TLS industry that affect security, certificate management, and user trust.
more → Security Boulevard, Thursday, February 19th, 2026
Insider threats rarely start with a dramatic breach. Instead, they begin quietly. A shift in behavior. A suspicious or unauthorized external contact. An unexplained access request. A resume that looks polished, maybe too polished. A resignation that feels sudden.
more → Security Boulevard, Thursday, February 19th, 2026
The Tidal Cyber 2025 Threat-Led Defense Report represents a groundbreaking shift in cybersecurity analysis by placing real adversary behavior at the forefront of defense strategies. Read the Full Report, or an overview of our findings below.
more → Security Boulevard, Wednesday, February 18th, 2026
Several weeks ago, I had a chance to sit down with John Kindervag and discuss FireMon's new partnership with Illumio. During that conversation, John shared a story about the origins of the phrase 'Zero Trust' that I had never heard before, and it completely changed my perception of the phrase.
more → SecurityWeek, Tuesday, February 17th, 2026
As nation-state actors, ransomware groups, and aging infrastructure collide, organizations must rethink how they defend critical operations through resilience, visibility, and modern security strategies.
more →
Security Boulevard, Tuesday, February 17th, 2026
Let's cut the fluff and get straight to the point: "SSO Code" isn't a real technical term. It's a ghost. It's a catch-all phrase that confused users type into Google when a login screen stops them dead in their tracks.
more → Security Boulevard, Tuesday, February 17th, 2026
Understanding User Managed Access (UMA): The Future of Granular Sharing and AI Authorization
more → Security Boulevard, Tuesday, February 17th, 2026
The 2026 Identity Breach Report marks a definitive shift in the cyber threat landscape, transitioning from simple data collection to what can only be described as the Industrialization of Identity. As adversaries adopt machine-scale automation, they are no longer just 'leaking' data-they are running high-velocity pipelines designed to weaponize human identities at an unprecedented scale.
more → Security Boulevard, Tuesday, February 17th, 2026
SecOps automation enables security teams to scale operations by automating threat detection, response, and investigation across complex environments.
more → Security Boulevard, Tuesday, February 17th, 2026
For years, organizations have framed breach risk as something finite. A breach occurs, notifications are sent, passwords are reset, and the incident is eventually considered closed.
more → Security Boulevard, Tuesday, February 17th, 2026
API security has been a growing concern for years. However, while it was always seen as important, it often came second to application security or hardening infrastructure.
more → Security Boulevard, Tuesday, February 17th, 2026
Most enterprise software is built for office workers. Employees who sit at a desk, use a personal laptop, and have a company email address. But a large portion of the global workforce does not fit that model.
more → Security Boulevard, Tuesday, February 17th, 2026
Red Teaming (also called adversary simulation) is a way to test how strong an organization's security really is. In this, trained and authorized security experts act like real hackers and try to break into systems, just like attackers would in the real world.
more → Security Boulevard, Tuesday, February 17th, 2026
How Can Automated Secrets Rotation Empower DevOps Teams?
more → Security Boulevard, Tuesday, February 17th, 2026
From hiring and onboarding fraud to service desk social engineering, attackers increasingly exploit identity workflows with stolen identities, forged documents, and deepfake-enabled impersonation. Gartner warns that 'by 2028, one in four candidate profiles will be fake.'
more → Security Boulevard, Tuesday, February 17th, 2026
Let's be honest: the password is a relic. It's a digital fossil that refuses to stay buried, dragging down productivity and opening the floodgates to data breaches.
more → Security Boulevard, Saturday, February 14th, 2026
Identity risk scoring has become a critical input for fraud prevention, security operations, and trust decisions. Organizations increasingly rely on risk scores to decide when to step up authentication, block access, or flag activity for investigation.
more → Security Boulevard, Friday, February 13th, 2026
I was fascinated by the recent stories about the sudden ascension of Clawdbot, aka Moltbot, aka OpenClaw, driven by its capabilities and social media attention, marketed as 'the AI that actually does things,' amid growing interest in AI agents that can autonomously complete tasks, make decisions, and take actions on behalf of users without constant human guidance.
more → Security Boulevard, Friday, February 13th, 2026
Traditional penetration testing has long been a cornerstone of cyber assurance. For many organisations, structured annual or biannual tests have provided an effective way to validate security controls, support compliance requirements, and identify material weaknesses across infrastructure, applications, and external attack surfaces.
more → Security Boulevard, Friday, February 13th, 2026
Most enterprises still run identity and access on spreadsheets, tickets, and organizational knowledge-until a breach or audit exposes a harder truth: no one can clearly explain who can do what in their most critical systems, or why. If you still treat Identity and Access Management (IAM) as IT plumbing rather than your primary control surface, you are accepting invisible financial and regulatory risk you cannotreally quantify.
more → Security Boulevard, Friday, February 13th, 2026
Privileged Access Management (PAM) is widely recognized as a foundational security control for Zero Trust, ransomware prevention, and compliance with frameworks such as NIST, ISO 27001, and SOC 2.
more → Security Boulevard, Thursday, February 12th, 2026
SSL certificates are now expiring faster than avocados. Yes... avocados. You buy them green, blink twice, and suddenly they're brown and useless. That's exactly what's happening to SSL/TLS certificates.
more → Security Boulevard, Thursday, February 12th, 2026
In today's rapidly evolving threat landscape, organizations must maintain continuous visibility, strong detection mechanisms, and rapid response capabilities to defend against increasingly sophisticated cyber adversaries.
more → Security Boulevard, Thursday, February 12th, 2026
Ever feel like we're finally getting the hang of ai orchestration, only to realize the locks on the doors are basically made of cardboard? It's a bit of a gut punch, but with quantum computers looming, our current security is a "kick me" sign for hackers.
more → Security Boulevard, Thursday, February 12th, 2026
Cybercriminals no longer need design or coding skills to create a convincing fake brand site. All they need is a domain name and an AI website builder. In minutes, they can clone a site's look and feel, plug in payment or credential-stealing flows, and start luring victims through search, social media, and spam.
more → Security Boulevard, Thursday, February 12th, 2026
Ever feel like your Monday morning is just one long login screen? You sit down with your coffee and before you even hit "unread" in your inbox, you've already typed five different passwords for the crm, email, and some random analytics tool.
more → Security Boulevard, Thursday, February 12th, 2026
Ever tried building a custom auth flow and realized key management is a total nightmare? RFC 4058 basically lays out the ground rules so we don't break things.
more → Security Boulevard, Thursday, February 12th, 2026
Ever wonder why we're still stuck typing "P@ssword123" in 2025 like it's still 1999? Honestly, it's kind of wild that the very thing meant to protect us is usually the biggest hole in our security.
more → Security Boulevard, Thursday, February 12th, 2026
Ever wonder why some of the biggest banks and hospitals still rely on tech that feels like it belongs in 2005? It's not just laziness-it is because WS-Trust is the glue holding their massive, complex security architectures together.
more → Security Boulevard, Wednesday, February 11th, 2026
Cloud adoption didn't just change where workloads run. It fundamentally changed how security and compliance must be managed.
more → Security Boulevard, Wednesday, February 11th, 2026
Cybersecurity Awareness plays a critical role in today's highly interconnected digital environment. Organizations allocate significant resources to advanced security technologies such as firewalls, endpoint detection solutions, cloud security frameworks, and AI-powered threat monitoring systems. However, despite these sophisticated defenses, attackers continue to breach organizations-frequently by targeting the weakest point in the security architecture:
more → Security Boulevard, Wednesday, February 11th, 2026
Ever tried explaining XML signatures to a junior dev? I have, and honestly, the blank stare you get back is a pretty good indicator of why saml is losing ground. It's not that it doesn't work-it's just a massive, heavy beast that feels out of place in a world of mobile apps and sleek apis.
more →