Security Boulevard

Organizations invest heavily in advanced cybersecurity technologies such as endpoint detection, identity access management, zero trust architecture, and continuous monitoring. However, a significant number of security incidents still originate from physical security weaknesses rather than purely digital vulnerabilities. Such often overlooked threats are piggybacking attacks.  It is a social engineering and physical access attack technique […]

The post How Piggybacking Attacks Threaten Organizational Security? appeared first on Kratikal Blogs.

The post How Piggybacking Attacks Threaten Organizational Security? appeared first on Security Boulevard.

Panda Technology embraced the Acronis Integrations Technology Ecosystem. By adopting Acronis Cyber Protect Cloud and integrating it with their PSA, RMM, security and identity systems, Panda Technology built a centralized operating environment where key workflows now run automatically. Panda Technology COO and Co-founder Joshua Aaronson explains a more than 600% improvement in troubleshooting time.

The post How Panda Technology transformed its operations with Acronis integrations appeared first on Security Boulevard.

Learn how to detect anomalous prompt injections in quantum-secured AI pipelines using lattice-based cryptography and behavioral AI analysis for MCP environments.

The post Anomalous Prompt Injection Detection in Quantum-Secured AI Pipelines appeared first on Security Boulevard.

Led by Balderton Capital, with participation of Uncorrelated Ventures and existing investors IRIS and Y Combinator, the $18M Series A financing will accelerate our mission to multiply the impact of security teams through full-lifecycle offensive security.

The post Escape raises $18M Series A to replace legacy scanners with AI agent-driven discovery, pentesting, and remediation appeared first on Security Boulevard.

This blog is perhaps a little bit more like an ad, so if you don’t want to check the ads, consider not reading it.

a very cyber image (Gemini)

But this year at RSA 2026, I’m speaking on three topics: securing AI, using AI for SOC, and sharing lessons about how Google applies AI and other technologies to D&R.

Here are these 3 fun things!

First, I’m doing a presentation on governing shadow AI agents. Believe it or not, this presentation was created mostly before OpenClaw became a thing (but updated for it!). So you may be surprised how well the content aged (think wine!) Attend this if you are struggling with shadow AI, specifically shadow agents at work.

Shadow Agents: A Pragmatist’s Guide to Governing Unsanctioned AI — [STR-W08]

• Wednesday, Mar 25 1:15 PM — 2:05 PM PDT

It is not the APT! The new threat is the “shadow AI agents” employees already use for work, leaking data and making decisions. Banning them is a losing game. This session will offer a better way: turn this organic behavior into a catalyst for secure progress. Learn to discover, assess, and channel unsanctioned agents into a formal strategy that empowers a team rather than force it underground.

The second is probably the most detailed discussion about how we use AI for detection and response at Google. You probably read our blogs and listen to our talks (especially this), but this time we are revealing a lot more interesting details about the machinery and also how we arrived at the state we’re in. I promise you this will be fun! And detailed too.

This Is How We Do It: Building AI Agents for Cybersecurity and Defense — [PART3-M07]

• Monday, Mar 23 2:20 PM — 3:10 PM PDT

Presenters will share the playbook for building and scaling AI agents in cybersecurity. Attendees will learn four core lessons: Building trust with the team, prioritizing real problems, measuring value, and establishing solid governance foundations for the agentic SOC.

Finally, the third isn’t a presentation but a discussion that would help you understand the real state of AI in security operations / SOC. This would not be about the slides, but about sharing lessons on what works and what doesn’t.

AI in SecOps: Sharing Lessons Learned for Adoption Maturity — [CXN-R05]

• Thursday, Mar 26 12:20 PM — 1:10 PM PDT

Attendees in this peer-led discussion will share stories from the AI-powered SOC trenches. Explore real adoption journeys from manual processes to autonomous agents. Share practical use cases on analyst retraining, workflow auditing, malware analysis, remediation automation, RAG pipelines and more. Trade notes on what’s working, what’s breaking, trust gaps, AI hallucinations, and career redesign.

All in all, join me for securing AI and Shadow Agents, learning from Google about detection and response, and comparing the state of practice of AI in the SOC.

See you there!

P.S. Yes, we will also be podcasting from the show.

Related:

RSA 2025: AI’s Promise vs. Security’s Past — A Reality Check”

My Really Fun RSA 2026 Presentations! was originally published in Anton on Security on Medium, where people are continuing the conversation by highlighting and responding to this story.

The post My Really Fun RSA 2026 Presentations! appeared first on Security Boulevard.

How Do Non-Human Identities Navigate the Complexities of Cybersecurity? Where artificial intelligence and cloud technologies are reshaping industries, how can organizations ensure their cybersecurity measures keep pace? For professionals across financial services, healthcare, travel, and tech-heavy fields like DevOps and Security Operations Centers (SOC), the key lies in effective management of Non-Human Identities (NHIs). These […]

The post How to feel empowered by your NHIs and AI appeared first on Entro.

The post How to feel empowered by your NHIs and AI appeared first on Security Boulevard.

How Can Non-Human Identities Bolster AI Governance Frameworks? What role do Non-Human Identities (NHIs) play in fortifying AI governance frameworks? With industries increasingly lean into artificial intelligence, the importance of managing machine identities becomes paramount. This is especially true for organizations operating in cloud environments, where the interplay between AI and NHIs deeply influences data […]

The post What assurances do AI governance frameworks offer appeared first on Entro.

The post What assurances do AI governance frameworks offer appeared first on Security Boulevard.

Are Your Machine Identities Secure? Have you ever wondered about the invisible workforce within your systems? These are not your typical employees but rather Non-Human Identities (NHIs), commonly referred to as machine identities in cybersecurity. Understanding and managing these identities is crucial, where machines often outnumber human workers. The Importance of Securing Non-Human Identities NHIs […]

The post Are scalable secrets management systems more effective appeared first on Entro.

The post Are scalable secrets management systems more effective appeared first on Security Boulevard.

Team Awareness Kit (TAK) and its Android variant, the Android Tactical Assault Kit (ATAK), are situational awareness platforms used across the military—dismounted infantry, vehicle commanders, air crews, SOF operators. If you need a common operating picture in the field, TAK is probably running somewhere in your stack. But there’s a problem that’s easy to overlook...

The post Secure Identity for TAK/ATAK at the Tactical Edge appeared first on Strata.io.

The post Secure Identity for TAK/ATAK at the Tactical Edge appeared first on Security Boulevard.

Salesforce GraphQL exploit exposed misconfigured guest data in Experience Cloud. Learn how it happened and how to prevent exposure.

The post What is the Salesforce GraphQL Exploit and What You Should Do appeared first on AppOmni.

The post What is the Salesforce GraphQL Exploit and What You Should Do appeared first on Security Boulevard.

A practitioner's breakdown of AEO, GEO, and AIO. Learn where these terms originated, how they differ from traditional SEO, and how B2B companies use them to generate leads and grow revenue in 2026.

The post AEO vs GEO vs AIO: What These Terms Actually Mean and Why Your Business Needs to Care appeared first on Security Boulevard.

A survey of 422 CISOs finds that while well over half (61%) believe their organizations are highly competent when it comes to cybersecurity and cyber resilience, less than half (45%) said their organization’s risk appetite is effectively aligned with cybersecurity risk management even though 57% claimed their communications channels with the line of business units..

The post Survey: CISOs Continue to Struggle to Strike Right Risk Balance appeared first on Security Boulevard.

As regional military conflicts escalate, cyberspace has become a critical battleground, with core WEB application systems frequently targeted by adversaries. Attackers tamper with application content and inject anti-social or anti-government rhetoric, disrupting cyberspace order and inciting public panic, severely damaging institutional credibility. WEB services serve as key platforms for information dissemination and core operations across […]

The post Zero Tolerance for Malicious Intrusions—NSFOCUS’s Full-Chain WEB Security Protection System appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..

The post Zero Tolerance for Malicious Intrusions—NSFOCUS’s Full-Chain WEB Security Protection System appeared first on Security Boulevard.

In a move that bucks the entire industry trend, TikTok has confirmed it will not implement end-to-end encryption (E2EE) for direct messages on its platform — arguing that E2EE would make users less safe. We break down what’s really going on: the child safety argument, the privacy counterargument, the geopolitical questions surrounding ByteDance, and what […]

The post TikTok Says No to End-to-End Encryption: Here’s Why That’s a Big Deal appeared first on Shared Security Podcast.

The post TikTok Says No to End-to-End Encryption: Here’s Why That’s a Big Deal appeared first on Security Boulevard.

Chinese government-linked hackers have breached a network used by the Federal Bureau of Investigation to manage court-authorized surveillance operations. The intrusion, first detected on February 17, 2026, involved systems supporting the FBI’s Digital Collection System Network (DSCNet), infrastructure used to process wiretap and foreign intelligence surveillance requests. While the breach was initially handled quietly, the […]

The post ​​How Chinese Hackers Reached America’s Surveillance Infrastructure appeared first on Centraleyes.

The post ​​How Chinese Hackers Reached America’s Surveillance Infrastructure appeared first on Security Boulevard.

Learn how to secure Model Context Protocol deployments with granular policy enforcement and quantum-resistant encryption. Protect ai infrastructure from tool poisoning.

The post Granular Policy Enforcement in Quantum Secure Discovery Services appeared first on Security Boulevard.

AI is entering organisations faster than the security controls designed
to govern it.

Artificial intelligence is rapidly becoming embedded across organisations.

AI assistants are now writing code, summarising documents, analysing data,
and supporting operational decisions.

What began as experimentation is quickly becoming operational
dependency.

For security teams, the challenge is not simply adopting AI. The real
challenge is understanding how AI changes the way cybersecurity controls
need to be validated.

In many organisations, AI tools are already interacting with corporate
data, internal systems, and operational workflows.

Yet when security leaders ask a simple question

“How do we know these AI systems are operating within our control
boundaries?”

…the answer is often less clear than expected.

Why AI Security Controls Are Different

Traditional software behaves in predictable ways. Security teams can audit
code, validate configuration, monitor logs, and confirm whether controls are
operating as intended.

AI systems behave differently.

Modern AI models generate probabilistic outputs rather than deterministic
ones. The same prompt may produce different responses, models can evolve
through updates, and outputs may influence decisions that were never
explicitly coded into the system.

This creates a shift in how security controls need to be assessed.

Controls designed for traditional systems do not always translate neatly
into AI-driven environments.

Examples are already appearing in practice:

• AI coding assistants generating insecure or non-compliant code
• Employees uploading confidential documents into AI tools
• AI platforms accessing internal data through integrations
• AI agents interacting with APIs or automation platforms beyond their
  intended scope

In many cases, organisations technically have policies that cover these
scenarios.

The real challenge is proving those policies are actually effective in
practice.

The Growing Problem of Shadow AI

Just as “Shadow IT” emerged when employees adopted unsanctioned cloud
services, many organisations are now experiencing Shadow AI.

Employees are increasingly using AI tools independently to improve
productivity. These tools often bypass procurement processes, security
reviews, and governance frameworks

Common examples include:

• Uploading documents into AI summarisation tools
• Using AI assistants to analyse internal reports or spreadsheets
• Generating code snippets with public AI models
• Connecting AI plug-ins to automate existing workflows

From a security perspective, this creates several unknowns.

Organisations may not know:

• Which AI tools are being used
• What data is being shared with them
• Whether prompts or outputs are stored externally
• How AI-generated outputs influence operational decisions

The result is a widening gap between policy intent and operational
reality.

AI Governance Without Visibility

Many organisations have already responded to AI risk by introducing
policies, governance groups, or internal guidance.

These are important foundations.

But policy alone does not create assurance.

The real question is whether organisations can demonstrate that controls
around AI usage are actually working.

That means being able to answer questions such as:

• Do we know where AI tools are being used across the organisation?
• Can we detect when sensitive data is submitted to external AI
  services?
• Are AI-generated outputs influencing critical processes without
  validation?
• Do we monitor AI integrations and access permissions?

Without measurable answers, AI governance risks becoming another form of
dashboard compliance.

Controls may appear compliant on paper but lack operational
validation.

Moving Toward Practical AI Security Assurance

Organisations that are managing AI adoption successfully are beginning to
treat AI risk in the same way they treat other critical security
controls.

The focus shifts from policy statements to evidence, monitoring, and
validation.

Practical steps increasingly include:

• Maintaining an inventory of approved AI systems
• Monitoring integrations and API activity
• Detecting data flows to external AI platforms
• Ensuring human oversight for critical AI outputs
• Continuously reviewing permissions and access scope

These measures do not remove risk entirely.

But they shift the conversation from:

“Do we have an AI policy?” to the far more important question

“Can we prove our AI controls are working?

The Next Cybersecurity Challenge

Every major technology shift has forced organisations to rethink how
security controls are validated.

Cloud computing did. DevOps did. SaaS platforms did. AI is now doing the same.

The organisations that manage this transition successfully will not
necessarily be those that deploy AI the fastest.

They will be the ones that understand how to measure and validate the
controls surrounding it.

Because in cybersecurity, the most important question is rarely whether a
control exists.

The real question is whether it works.

The post AI Is Moving Faster Than Security Controls appeared first on Security Boulevard.

AI-based assistants or "agents" -- autonomous programs that have access to the user's computer, files, online services and can automate virtually any task -- are growing in popularity with developers and IT workers. But as so many eyebrow-raising headlines over the past few weeks have shown, these powerful and assertive new tools are rapidly shifting the security priorities for organizations, while blurring the lines between data and code, trusted co-worker and insider threat, ninja hacker and novice code jockey.

The post How AI Assistants are Moving the Security Goalposts appeared first on Security Boulevard.

This week on the Lock and Code podcast, we speak with Matthew Guariglia about Ring smart doorbells and the surveillance network they create.

The post Ring doorbells: Won’t you see my neighbor? (Lock and Code S07E05) appeared first on Security Boulevard.

Are Organizations Fully Equipped to Manage Non-Human Identities? The increasing integration of technology across various sectors brings to light the significant role of Non-Human Identities (NHIs) in enterprise security. Unfortunately, the traditional security frameworks that mainly focus on human identities often overlook these non-human elements, which can lead to vulnerabilities. So, how can organizations ensure […]

The post Why proactive AI agents redefine enterprise security appeared first on Entro.

The post Why proactive AI agents redefine enterprise security appeared first on Security Boulevard.