Security Boulevard

Dan Cole, senior vice president of product management at Sophos, unpacks how cybersecurity strategy is shifting from a prevention-first mindset toward resilience and response. Cole traces his career from the early days of mass malware outbreaks like Melissa and ILOVEYOU through today’s environment of nation-state actors, AI-assisted attacks, and sprawling hybrid workforces. While the tools..

The post Security Is Shifting From Prevention to Resilience appeared first on Security Boulevard.

French authorities raided the Paris office of X and summonsed Elon Musk to France for question regarding nonconsensual and sexually suggestive deepfakes generated by xAI's chatbot and posted to X as the global firestorm surrounding them escalates.

The post French Police Raid X Paris Office, Summon Musk Over Grok Deepfakes appeared first on Security Boulevard.

Scammers are using deepfake technology to replicate your child's voice in a kidnapping hoax, catfish with AI-generated video dates, and impersonate executives to steal millions. Learn how to spot deepfake fraud, and use Avast Deepfake Guard to help verify what's real before it's too late.

The post How deepfake scams are fueling a new wave of fraud appeared first on Security Boulevard.

As January 2026 comes to a close, Sonrai’s latest review of newly released AWS permissions highlights a sharp expansion of privilege concentrated in networking, traffic control, and collaboration services. This month’s updates focus heavily on AWS Network Firewall, Route 53 Global Resolver, EC2 networking controls, and cross-account data collaboration, introducing new ways to reroute traffic, […]

The post Jan Recap: New AWS Privileged Permissions and Services appeared first on Security Boulevard.

Explore the transformative role of self-healing AI in cybersecurity. This article delves into its integration within DevSecOps, the balance between AI autonomy and human oversight, industry applications, and the challenges of implementation in protecting complex digital environments.

The post Self-Healing AI for Security as Code: A Deep Dive Into Autonomy and Reliability  appeared first on Security Boulevard.

Master Enterprise SSO in 2025. Learn about SAML, OIDC, and CIAM strategies for CTOs and VP Engineering to secure B2B platforms and prevent data breach.

The post The Ultimate Guide to Single Sign-On in 2025 appeared first on Security Boulevard.

Learn how to implement Single Sign-On with External Security Token Services (STS). A deep dive into SAML, OIDC, and token exchange for CTOs and VP Engineering.

The post Single Sign-On with External Security Token Services appeared first on Security Boulevard.

Explore the evolution of Enterprise SSO and CIAM in 2025. Insights on SAML, passwordless authentication, and developer-first IAM solutions for CTOs.

The post The Future of Single Sign-on: Insights for 2025 appeared first on Security Boulevard.

Explore User-Managed Access (UMA) 2.0 for enterprise CIAM. Learn how UMA extends OAuth 2.0 to provide fine-grained, asynchronous party-to-party authorization.

The post User-Managed Access Overview appeared first on Security Boulevard.

In 2026, identity has firmly established itself as the new security perimeter. As enterprises accelerate cloud adoption, enable remote workforces, and integrate SaaS and third-party ecosystems, attackers are no longer trying to “break in”; they are simply logging in. Compromised identities now sit at the center of most advanced breaches, making Identity Threat Detection & […]

The post Why Identity Threat Detection & Response Matters in 2026? appeared first on Kratikal Blogs.

The post Why Identity Threat Detection & Response Matters in 2026? appeared first on Security Boulevard.

Outages Happen to Everyone. Building a Resilient Architecture Doesn’t Have to Be Hard.
madhav
Tue, 02/03/2026 - 05:21

No company is spared the pain of outages. But their impact can be mitigated by how resilient you build your business architecture. And who you choose to partner with can significantly determine how effective that will be.

Data Security

Andy Zollo |
More About This Author >

No company is spared the pain of outages. But their impact can be mitigated by how resilient you build your business architecture. And who you choose to partner with can significantly determine how effective that will be.

Outages Happen: But Not Equally

The biggest and the best fall victim to outages and downtime. Publicly available information from sites like StatusGator.com reveals the number of incidents attributed to several major cloud security service providers, with high incidents reported as outages.

Within a 30-day period spanning this past October and November, Imperva reported:

• 14 medium incidents
• 0 high incidents
• Under 10 total incident hours overall

By comparison, other cloud security service providers reported:

• Up to 70 medium incidents
• 14 high incidents
• Over 680 total incident hours overall

While no one is exempt from outages, the way provider architecture is designed can really bolster or detract from resilience.

Regulations Like DORA Now Require Resilience

Operational resiliency is no longer a pie-in-the-sky security ideal as we focus on more pressing issues. It is the pressing issue.

The EU’s Digital Operational Resilience Act (DORA) was explicitly designed to improve the digital resilience of financial entities. To this end, it requires covered entities to perform regular digital operational resilience testing and adhere to strict guidelines, so they can “withstand, respond to, and recover from” operational disruptions like cyberattacks or system failures.

Examining the Impact of Downtime

Even a minute of unavailable services can cause startling damage to a company; when things pass the Maximum Tolerable Outage (MTO), it gets even worse.

An Oxford Economics study estimated that the cost of sixty seconds of downtime is at least $9,000. That’s not including the added costs of damage control as PR campaigns haemorrhage money trying to restore good standing.

Organizations need to know where to stop the bleeding, determining MTO for themselves. Hence, they understand the point at which the outage will cause an unacceptable level of damage financially, to stakeholders, or legally.

This can be evaluated by determining:

• System criticality: How integral is the affected system to the equilibrium of your business? An online retailer might have an MTO of 24 hours for its core e-commerce platform.
• Impact: What is the impact on the organization if this particular service stays down, in terms of financial loss, reputational damage, data loss, or recovery costs? How long will it have to remain offline before that impact is realized?
• Timeframe: How long can you go before the impact on a given system becomes a liability to the company? A chat function might be able to tolerate a 2-hour downtime window before customer service operations take a significant hit.

Planning for the Worst, Productively

Understanding that outages, like breaches, are a matter of when, not if, means that planning takes on a practical aspect.

Run your teams through tabletop exercises to familiarize them with specific scenarios that may arise when systems go down. Start by examining the worst possible thing that could happen and start from there.

• What are the emergency procedures?
• Who needs to be contacted, and in what order, and when?
• What information goes out to what departments and stakeholders?
• Who is responsible for notifying the press (should the time come), government agencies (should it involve a breach), and customers?
• Who is on the call tree, and who has the authority to make which calls?

Finally, apart from the administration of the outage, which teams are responsible for getting key systems back online, and do they know how? Make sure they understand the emergency procedures to operate on in the interim, and keep a copy of your plan, emergency hierarchy, and call tree offline and in a place where everyone can access it. Do not assume an online copy will be available in a crisis.

Business Continuity Planning: It Takes the Right Team

Just like you interview carefully for the people who will keep the ship running, you also need to have the right experts in your corner when things start to sink. Revisiting the idea of the call tree, make sure you include technology partners like Thales when facing issues like these.

Thales helps teams proactively build resilient architectures that shift application and data security measures left, apply AI and behavioral detection to avoid attacks that lead to downtime, and develop formal Business Continuity and Disaster Recovery plans. Business Continuity Planning (BCP) is also a requirement of key compliance frameworks like NIST CSF and ISO 27001.

Choosing Your Provider – And Alternative Provider - Wisely

Lastly, have an alternative provider to fall back on in times of crisis. This second line of defense, just like the first, should be chosen wisely.

Some cloud security service providers have chosen to expand into cloud computing and edge services to compete with hyperscalers. While providing wider offerings, this complicates the architecture and operations required to stay resilient.

Others, like Imperva, have chosen to double down on quality and optimization, prioritizing maximum uptime by carefully managing things like availability and capacity.

Attacks and outages come with the territory. But with the right know-how, plan, and partners in place, they don’t have to have a long-term effect.

Schema {
"@context": "https://schema.org",
"@type": "BlogPosting",
"mainEntityOfPage": {
"@type": "WebPage",
"@id": "https://cpl.thalesgroup.com/blog/data-security/build-resilient-data-security-architecture"
},
"headline": "How to Build a More Resilient Data Security Architecture | Thales",
"description": "Outages are inevitable. Learn how resilient data security architectures reduce downtime, meet DORA requirements, and protect business continuity.",
"image": "",
"author": {
"@type": "Person",
"name": "Andy Zollo",
"url": "https://cpl.thalesgroup.com/blog/author/thales"
},
"publisher": {
"@type": "Organization",
"name": "Thales Group",
"description": "The world relies on Thales to protect and secure access to your most sensitive data and software wherever it is created, shared, or stored. Whether building an encryption strategy, licensing software, providing trusted access to the cloud, or meeting compliance mandates, you can rely on Thales to secure your digital transformation.",
"url": "https://cpl.thalesgroup.com",
"logo": "https://cpl.thalesgroup.com/sites/default/files/content/footer/thaleslogo-white.png",
"sameAs": [
"https://www.twitter.com/ThalesCloudSec",
"https://www.linkedin.com/company/thalescloudsec",
"https://www.youtube.com/ThalesCloudSec"
]
},
"datePublished": "2026-02-03",
"dateModified": "2026-02-03"
} studio THALES BLOG Outages Happen to Everyone. Building a Resilient Architecture Doesn’t Have to Be Hard.

February 3, 2026

The post Outages Happen to Everyone. Building a Resilient Architecture Doesn’t Have to Be Hard. appeared first on Security Boulevard.

Struggling with auth downtime? Learn why your online account service might be failing and how to implement Enterprise SSO and CIAM for 99.9% availability.

The post Is the Online Account Service Still Available? appeared first on Security Boulevard.

Learn how to configure WS-Federation SSO for enterprise resources. A deep dive into identity delegation, claim mapping, and securing legacy apps for engineering leaders.

The post Configuring WS-Federation Single Sign-on for Resources appeared first on Security Boulevard.

The influence of Chinese money laundering networks has skyrocketed since 2020, with the operations now moving almost 20% of all illicit cryptocurrency being laundered last year, according to Chainalysis researchers. In 2025, they processed more than $16 billion, or about $44 million a day.

The post Fast-Growing Chinese Crime Networks Launder 20% of Illicit Crypto: Chainalysis appeared first on Security Boulevard.

Exposure monitoring has become a core function for security and risk teams but many programs still struggle to deliver clear, actionable outcomes. Alerts pile up, dashboards expand, and yet teams are often left with the same unanswered question: Which exposures actually matter right now? The difference between noise and signal in exposure monitoring often comes …

The post What Verified Breach Data Changes About Exposure Monitoring appeared first on Security Boulevard.

Session 11B: Binary Analysis

Authors, Creators & Presenters: Hongwei Wu (Purdue University), Jianliang Wu (Simon Fraser University), Ruoyu Wu (Purdue University), Ayushi Sharma (Purdue University), Aravind Machiry (Purdue University), Antonio Bianchi (Purdue University)

PAPER
VeriBin: Adaptive Verification of Patches at the Binary Level

Vendors are often provided with updated versions of a piece of software, fixing known security issues. However, the inability to have any guarantee that the provided patched software does not break the functionality of its original version often hinders patch deployment. This issue is particularly severe when the patched software is only provided in its compiled binary form. In this case, manual analysis of the patch's source code is impossible, and existing automated patch analysis techniques, which rely on source code, are not applicable. Even when the source code is accessible, the necessity of binary-level patch verification is still crucial, as highlighted by the recent XZ Utils backdoor. To tackle this issue, we propose VeriBin, a system able to compare a binary with its patched version and determine whether the patch is ''Safe to Apply'', meaning it does not introduce any modification that could potentially break the functionality of the original binary. To achieve this goal, VeriBin checks functional equivalence between the original and patched binaries. In particular, VeriBin first uses symbolic execution to systematically identify patch-introduced modifications. Then, it checks if the detected patch-introduced modifications respect specific properties that guarantee they will not break the original binary's functionality. To work without source code, VeriBin's design solves several challenges related to the absence of semantic information (removed during the compilation process) about the analyzed code and the complexity of symbolically executing large functions precisely. Our evaluation of VeriBin on a dataset of 86 samples shows that it achieves an accuracy of 93.0% with no false positives, requiring only minimal analyst input. Additionally, we showcase how VeriBin can be used to detect the recently discovered XZ Utils backdoor.

ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.

Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.

Permalink

The post NDSS 2025 – VeriBin: Adaptive Verification Of Patches At The Binary Level appeared first on Security Boulevard.

The rise of artificial intelligence has rendered portions of your current cybersecurity playbook obsolete. Unless Chief Information Security Officers (CISOs) act quickly to reorient their thinking, they may be unaware of and unprepared to face emerging AI-related threats. Learn how to secure your organization’s AI usage and ensure implementation won’t have negative consequences. The Serious..

The post Reorient Your Thinking to Tackle AI Security Risks appeared first on Security Boulevard.

In a world where businesses are built on digital infrastructure, IT security has become a critical pillar of organizational resilience and trust. From cloud computing and remote workforces to SaaS applications and connected devices, modern IT environments are larger, more complex, and more exposed than ever before. At the same time, cyber threats are growing

The post IT Security appeared first on Seceon Inc.

The post IT Security appeared first on Security Boulevard.

Threat Intelligence is the process of collecting, analyzing, and contextualizing data about existing and emerging cyber threats to produce actionable insights that help organizations prevent, detect, and respond to cyberattacks. Rather than relying on raw alerts or isolated indicators, threat intelligence provides who is attacking, how they operate, what they are targeting, and why it

The post What Is Threat Intelligence? appeared first on Seceon Inc.

The post What Is Threat Intelligence? appeared first on Security Boulevard.

In an era defined by digital transformation, cloud adoption, and hyperconnectivity, cybersecurity has become a top priority for organizations of every size and industry. Cyberattacks are no longer limited to simple malware or phishing emails—they now include ransomware-as-a-service (RaaS), zero-day exploits, insider threats, supply-chain compromises, and nation-state–backed attacks. As a result, businesses worldwide are actively

The post Top Cybersecurity Companies appeared first on Seceon Inc.

The post Top Cybersecurity Companies appeared first on Security Boulevard.