Security Boulevard

How Do Non-Human Identities Revolutionize Cloud Security? What are Non-Human Identities (NHIs), and why do they hold the key to revolutionizing cloud security for organizations across various industries? Understanding Non-Human Identities and Their Importance Safeguarding sensitive data requires more than just securing human user accounts. Enter Non-Human Identities (NHIs), which are vital components of cybersecurity. […]

The post Why invest in advanced NHIs management? appeared first on Entro.

The post Why invest in advanced NHIs management? appeared first on Security Boulevard.

Is Your Organization Ready to Scale NHIs Safely and Efficiently? Scaling Non-Human Identities (NHIs) is a complex endeavor, particularly in dynamic industries such as financial services, healthcare, and technology-driven sectors that rely heavily on cloud computing. Where NHIs serve as the backbone for automation, the question becomes: how can organizations use NHI management to achieve […]

The post How to scale NHIs safely and efficiently? appeared first on Entro.

The post How to scale NHIs safely and efficiently? appeared first on Security Boulevard.

New capability gives enterprises verified, policy-based control over AI agents and automated traffic

The post Kasada Launches AI Agent Trust to Secure Agentic Commerce appeared first on Security Boulevard.

Session 9D: Github + OSN Security

Authors, Creators & Presenters: Aditya Sirish A Yelgundhalli (New York University), Patrick Zielinski (New York University), Reza Curtmola (New Jersey Institute of Technology), Justin Cappos (New York University)

PAPER
Rethinking Trust In Forge-Based Git Security

Git is the most popular version control system today, with Git forges such as GitHub, GitLab, and Bitbucket used to add functionality. Significantly, these forges are used to enforce security controls. However, due to the lack of an open protocol for ensuring a repository's integrity, forges cannot prove themselves to be trustworthy, and have to carry the responsibility of being non-verifiable trusted third parties in modern software supply chains. In this paper, we present gittuf, a system that decentralizes Git security and enables every user to contribute to collectively enforcing the repository's security. First, gittuf enables distributing of policy declaration and management responsibilities among more parties such that no single user is trusted entirely or unilaterally. Second, gittuf decentralizes the tracking of repository activity, ensuring that a single entity cannot manipulate repository events. Third, gittuf decentralizes policy enforcement by enabling all developers to independently verify the policy, eliminating the single point of trust placed in the forge as the only arbiter for whether a change in the repository is authorized. Thus, gittuf can provide strong security guarantees in the event of a compromise of the centralized forge, the underlying infrastructure, or a subset of privileged developers trusted to set policy. gittuf also implements policy features that can protect against unauthorized changes to branches and tags i.e., pushes as well as files/folders i.e., commits. Our analysis of gittuf shows that its properties and policy features provide protections against previously seen version control system attacks. In addition, our evaluation of gittuf shows it is viable even for large repositories with a high volume of activity such as those of Git and Kubernetes (less than 4% storage overhead and under 0.59s of time to verify each push).

ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.

Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.

Permalink

The post NDSS 2025 – Rethinking Trust In Forge-Based Git Security appeared first on Security Boulevard.

Amit Sheps, head of product marketing at CyCognito, discusses the growing challenges cybersecurity teams face as artificial intelligence accelerates the expansion of enterprise attack surfaces. He explains why visibility, continuous assessment, and proactive risk management are becoming essential in an AI-driven threat landscape. Sheps argues that most teams are still stuck in “vulnerability whack-a-mole” mode,..

The post Why AI Is Making Attack Surface Management Mandatory appeared first on Security Boulevard.

Miami, Florida, 22nd January 2026, CyberNewsWire

The post Halo Security Achieves SOC 2 Type II Compliance, Demonstrating Sustained Security Excellence Over Time appeared first on Security Boulevard.

Obsidian Security today announced that it has extended the reach of its platform for protecting software-as-a-service (SaaS) applications to include any integrations. Additionally, the company is now making it possible to limit which specific end users of a SaaS application are allowed to grant and authorize new SaaS integrations by enforcing least privilege policies. Finally,..

The post Obsidian Security Extends Reach to SaaS Application Integrations appeared first on Security Boulevard.

Many new teachers step into classrooms that still reflect traditional, teacher-centered models. These classrooms often place the teacher at the front, the curriculum at the center, and students in the role of listeners. Today’s learners live, think, and communicate differently, so they need more than memorization and recall. They need learning environments that value curiosity, ...

The post What Is Student-Centered Learning? A Practical Guide for New Teachers appeared first on ManagedMethods Cybersecurity, Safety & Compliance for K-12.

The post What Is Student-Centered Learning? A Practical Guide for New Teachers appeared first on Security Boulevard.

ZEST Security introduces AI Sweeper Agents that identify which vulnerabilities are truly exploitable, helping security teams cut patch backlogs and focus on real risk.

The post ZEST Security Adds AI Agents to Identify Vulnerabilities That Pose No Actual Risk appeared first on Security Boulevard.

Securing the Future: Practical Approaches to Digital Sovereignty in Google Workspace
madhav
Thu, 01/22/2026 - 04:35

In today’s rapidly evolving digital landscape, data privacy and sovereignty have become top priorities for organizations worldwide. With the proliferation of cloud services and the tightening of global data protection regulations, security professionals face mounting pressure to ensure their data remains secure, compliant, and under their control. The recent Thales and Google Workspace webinar, “Empowering Digital Sovereignty: Google Workspace Client-Side Encryption and Thales CipherTrust,” delivered a wealth of actionable insights for those navigating these challenges.

Data Security

Scotti Woolery-Price | Partner Marketing Manager, Thales
More About This Author >

In today’s rapidly evolving digital landscape, data privacy and sovereignty have become top priorities for organizations worldwide. With the proliferation of cloud services and the tightening of global data protection regulations, security professionals face mounting pressure to ensure their data remains secure, compliant, and under their control. The recent Thales and Google Workspace webinar, “Empowering Digital Sovereignty: Google Workspace Client-Side Encryption and Thales CipherTrust,” delivered a wealth of actionable insights for those navigating these challenges.

The Digital Sovereignty Imperative

Digital sovereignty is more than a buzzword. It’s the ability to control your organization’s digital destiny, including the data, hardware, and software you rely on and create. According to the World Economic Forum, over 92% of all data in the Western world is stored on U.S.-owned servers, creating significant dependency and resilience challenges for businesses. New regulations such as GDPR, Schrems II, Gaia-X, and DORA are emerging to advance digital sovereignty for organizations operating in regulated industries.

The Regulatory Landscape: Privacy Laws on the Rise

Over 80% of the world’s population is now covered by some form of national data privacy law, and the pace of regulation is accelerating according to a study by IAPP. Over 260 new global regulations are in the legislative process, with 150 in the EU and U.S. alone. For CISOs and IT leaders, this means that the world’s data is more regulated than ever before, and compliance is no longer optional, it’s a license to operate.

Google Workspace: A Holistic Approach to Sovereignty and Compliance

Google Workspace stands out by offering a cloud-only, zero trust architecture designed to address sovereignty and compliance requirements. Key features include:

• Client-Side Encryption (CSE): Data is encrypted before leaving the client server, and customers have sole control over encryption keys, to enable them to act as arbiters of all access to their data.
• Local Data Storage and Data Regions: Organizations can choose where their data is stored and processed, helping to ensure compliance with geographical regulations.
• Access Controls and Context-Aware Access: Admins can control IP, device, and geographic origin, keeping sensitive data within required regions.
• Zero Trust Secure Architecture: Secure infrastructure and practices inherently reduce risks.
• End-to-End Encrypted Gmail: Secure email for enterprise users.

Key Management and Encryption Approaches in Google Workspace

Organizations seeking to enhance data security and sovereignty in cloud environments often consider several key management and encryption strategies. For example:

• External Key Management (EKM):
  Integrating external key management solutions allows organizations to maintain master encryption keys outside the cloud provider’s environment, often using certified hardware security modules. This approach enables secure creation, control, and storage of encryption keys, separate from where sensitive data is hosted. It can also support a variety of use cases across cloud platforms.
• Client-Side Encryption Workflow:
  With client-side encryption, documents are encrypted within the user’s browser using internally generated data encryption keys (DEKs). These DEKs are then encrypted with keys managed by an external key manager. Only authorized users can decrypt the DEKs to access documents, helping to ensure that the cloud provider cannot access data in plaintext. Support for multiple identity providers can further enable secure sharing and collaboration across organizations.
• Operational and Data Sovereignty:
  By maintaining control over encryption keys and access policies, organizations can address regulatory requirements and mitigate risks related to subpoenas, cross-border data access, and privileged user threats. Solutions that enable discovery, classification, and encryption of sensitive data—along with customer-managed key and access controls—can help organizations meet compliance standards and pass security audits.
• Quantum-Resilient Data Protection including Gmail:
  As quantum computing advances, some solutions are beginning to incorporate quantum-resilient encryption standards to help ensure that sensitive data remains protected against future threats. Google, with  support from Thales, offers a cloud productivity suite that protects your data from quantum attacks like Harvest Now, Decrypt Later.

Real-World Impact: Compliance and Resilience

A notable case in France demonstrated the effectiveness of legal and technical safeguards. Thales contributed to a solution that enabled a healthcare client to use public cloud services while retaining control over encryption keys, ensuring compliance with EU GDPR and mitigating risks from foreign access requests. The court’s decision underscored the importance of holding encryption keys in the proper geographic jurisdiction and leveraging trusted third-party key management.

Strategies for Stronger Cloud Control

The webinar outlined several key strategies for securing data in the cloud:

• Native Encryption Services: Managed by cloud service providers (CSPs), offering basic protection but limited customer control.
• Bring Your Own Key (BYOK): Customers generate and import their own keys, gaining more control but still relying on CSP-hosted key management.
• Hold Your Own Key (HYOK): Organizations maintain full control over their encryption keys, even when using third-party cloud services.
• Bring Your Own Encryption (BYOE): Customers manage both keys and encryption outside the CSP environment.
• End-to-End Data Protection (E2EDP): Protects data while in use, in motion, and at rest using confidential computing.

The Shared Responsibility Model

Security in the cloud is a shared responsibility. While providers secure the infrastructure, customers must address defense in depth, anti-malware, network security controls, secure coding practices, and comprehensive logging and alerting. The Cloud Security Alliance (CSA) offers guidance and standards to help organizations prepare for cloud migration and ensure robust security controls.

Take Control of Your Data Sovereignty

As organizations accelerate cloud adoption and digital transformation, the need for robust data sovereignty and security controls has never been greater. Thales CipherTrust Cloud Key Management, in collaboration with Google Workspace, empowers security leaders to take control of their sensitive data, meet regulatory requirements, and build resilient, compliant cloud environments.

Flexible Deployment Options

CipherTrust Cloud Key Management for Google CSE can be deployed in the cloud, on-premises, across hybrid environments, and as a service. To enable a free trial, please visit CCKM as a service from the Thales DPoD Marketplace.

Ready to secure your data?

Explore Thales CipherTrust Data Security Platform solutions and start your journey toward digital sovereignty today.

• Take a self-guided product tour of Thales cloud key management solutions for Google Cloud and Google Workspace
• Read our integrated solution brief
• Visit our webpage: Google Cloud Platform Security

Schema {
"@context": "https://schema.org",
"@type": "BlogPosting",
"mainEntityOfPage": {
"@type": "WebPage",
"@id": "https://cpl.thalesgroup.com/blog/data-security/digital-sovereignty-google-workspace"
},
"headline": "Practical Approaches to Digital Sovereignty in Google Workspace | Thales",
"description": "Learn how digital sovereignty, client-side encryption, and external key management help organizations secure Google Workspace data and meet global regulations.",
"image": "",
"author": {
"@type": "Person",
"name": "Scotti Woolery-Price",
"url": "https://cpl.thalesgroup.com/blog/author/swoolery"
},
"publisher": {
"@type": "Organization",
"name": "Thales Group",
"description": "The world relies on Thales to protect and secure access to your most sensitive data and software wherever it is created, shared, or stored. Whether building an encryption strategy, licensing software, providing trusted access to the cloud, or meeting compliance mandates, you can rely on Thales to secure your digital transformation.",
"url": "https://cpl.thalesgroup.com",
"logo": "https://cpl.thalesgroup.com/sites/default/files/content/footer/thaleslogo-white.png",
"sameAs": [
"https://www.twitter.com/ThalesCloudSec",
"https://www.linkedin.com/company/thalescloudsec",
"https://www.youtube.com/ThalesCloudSec"
]
},
"datePublished": "2025-01-22",
"dateModified": "2025-01-22"
} studio THALES BLOG Securing the Future: Practical Approaches to Digital Sovereignty in Google Workspace

January 22, 2026

The post Securing the Future: Practical Approaches to Digital Sovereignty in Google Workspace appeared first on Security Boulevard.

SANTA CLARA, Calif., Jan 22, 2026 – Recently, International Data Corporation (IDC) released the report “China Large Language Model (LLM) Security Assessment Platform Vendor Technology Evaluation” (Doc#CHC53839325, October 2025). NSFOCUS was selected for this report based on its proven product performance and LLM security assessment methodology. With a comprehensive capability matrix built across model security, data […]

The post NSFOCUS AI-Scan Gains Recognition from Authoritative Institution appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

The post NSFOCUS AI-Scan Gains Recognition from Authoritative Institution appeared first on Security Boulevard.

Deep dive comparison of SAML and LDAP for CTOs. Learn the differences in authentication, directory services, and how to scale Enterprise SSO.

The post SAML vs LDAP: Protocol Comparison for Authentication & Directory Services appeared first on Security Boulevard.

Deep dive into tenant isolation strategies for SaaS. Learn about infrastructure patterns, data partitioning, and identity-driven security for enterprise SSO.

The post Tenant Isolation Strategies: Infrastructure Patterns for Multi-Tenant SaaS appeared first on Security Boulevard.

Learn how lattice-based PQC secures Model Context Protocol (MCP) transport layers against quantum threats using NIST standards like ML-KEM and ML-DSA.

The post Lattice-based PQC for MCP Transport Layer Security appeared first on Security Boulevard.

How Do Non-Human Identities Strengthen AI Security Architectures? Is your organization fully prepared to handle the intricate demands of AI-driven systems? Non-Human Identities (NHIs) play a crucial role in securing AI architectures. By effectively managing these machine identities, organizations can bridge significant security gaps and foster a seamless, secure cloud environment. This post is designed […]

The post What innovative practices secure AI-driven architectures? appeared first on Entro.

The post What innovative practices secure AI-driven architectures? appeared first on Security Boulevard.

How Can AI Revolutionize Cloud Security Management? How do organizations ensure that their cloud environments are not just secure but intelligently managed? The answer lies in understanding the potential of AI in cloud security. With machines become predominant players in our IT infrastructure, the management of Non-Human Identities (NHIs) has emerged as a pivotal strategy […]

The post Can AI manage cloud security effectively? appeared first on Entro.

The post Can AI manage cloud security effectively? appeared first on Security Boulevard.

How Secure Are Non-Human Identities in Your Company’s Digital Strategy? Have you ever considered who—or rather, what—is accessing your company’s data? While we often focus on human users in cybersecurity strategies, non-human identities (NHIs) play a pivotal role in security architecture today. NHIs refer to machine identities used in cybersecurity, created by coupling a “Secret”—an […]

The post What makes NHIs safe for my company? appeared first on Entro.

The post What makes NHIs safe for my company? appeared first on Security Boulevard.

Is Agentic AI the Key to Revolutionizing Threat Detection in Cybersecurity? Where organizations increasingly migrate to cloud environments, the complexity of safeguarding data intensifies. Cybersecurity is no longer just about protecting networks from human attackers but also about managing machine identities, known as Non-Human Identities (NHIs). These NHIs and their associated secrets play critical roles […]

The post How powerful is agentic AI in detecting threats? appeared first on Entro.

The post How powerful is agentic AI in detecting threats? appeared first on Security Boulevard.

BOSTON, Jan. 21, 2026, CyberNewswire — Reflectiz today announced the release of its 2026 State of Web Exposure Research, revealing a sharp escalation in client?side risk across global websites, driven primarily by third?party applications, marketing tools, and unmanaged digital … (more…)

The post News alert: Reflectiz study finds most third-party web apps access sensitive data without justification first appeared on The Last Watchdog.

The post News alert: Reflectiz study finds most third-party web apps access sensitive data without justification appeared first on Security Boulevard.

Boston, MA, USA, 21st January 2026, CyberNewsWire

The post New Research Exposes Critical Gap: 64% of Third-Party Applications Access Sensitive Data Without Authorization appeared first on Security Boulevard.