Security Boulevard

The financial services industry is in the midst of a thrilling transformation, and Artificial Intelligence (AI) is the spark igniting it all! Picture this: in...Read More

The post The Role of AI in FinTech: Innovation, Transformation, and the Ethics You Can’t Ignore appeared first on ISHIR | Software Development India.

The post The Role of AI in FinTech: Innovation, Transformation, and the Ethics You Can’t Ignore appeared first on Security Boulevard.

A survey of 2,058 security leaders finds nearly half of respondents (46%) are spending more time maintaining tools than they do defending their organization from actual cyberattacks.

The post Survey: Too Much Time Being Spent on Managing Cybersecurity Tools appeared first on Security Boulevard.

May 21, 2025 - Lina Romero - LLM03: Supply Chain
20/5/2025
Excerpt
The OWASP Top 10 List of Risks for LLMs helps developers and security teams determine where the biggest risk factors lay. In this blog series from FireTail, we are exploring each risk one by one, how it manifests, and mitigation strategies. This week, we’re focusing on LLM03: Supply Chain vulnerabilities.
Summary
Supply Chain vulnerabilities can refer to a variety of different risks in the Supply Chains of LLMs. LLMs are unique in that they require third parties to develop the models, and these third parties open the LLMs up to a host of new risks…
Blog text
It is no secret that in 2025, AI is both the biggest advancement and biggest risk in the cyber landscape. LLMs are rising in popularity and with this rise comes a parallel increase in incidents. AI security is still largely misunderstood, but the OWASP LLM Top 10 is a great resource on the biggest risks in the space and how to mitigate them.
What is a Supply Chain Vulnerability?
LLMs require a lot of groundwork to get them up and running. Part of this process includes third-party applications that help connect different components of the LLM, feed it data, etc. However, with these components come risks, as each part is open to its own host of vulnerabilities.
Types of Vulnerabilities
There are a variety of different risks that fall under the category of supply chain vulnerabilities. Traditional Third-Party Package Vulnerabilities: these can include third-party applications with outdated components left vulnerable to exploitation. Licensing Risks: a common risk we see in the space is that developers do not realize some of their data falls under different licensing or compliance requirements. In addition to this, third-party packages also have their own licensing, such as source code licenses and more. When developers have to keep track of all these different licenses, it is easy for things to fall through the cracks, leading to compliance issues and/or vulnerabilities.
Vulnerable Pre-Trained Models: these models are binary black boxes and offer limited security capabilities. Like open-source software, pre-trained models often contain vulnerabilities that developers may not be aware of. Weak Model Provenance: since AI security is still a fairly new concern, there are currently no established provenance assurance standards. Because of this, attackers can compromise supplier accounts or find other ways to insert malicious content into the supply chain using social engineering. Vulnerable LoRA adapters: the Low-Rank Adaptation, or “LoRA” method can make development more efficient, but also introduces new risks. This is because it works by only training a small number of new parameters, rather than the entire model, which saves time but can lead to unpredictable results down the line. Exploit Collaborative Development: model merge and model handling subjects, such as conversions introduce even more vulnerabilities to the LLMs involved. Services such as conversion bot and others similar to it have also been found to create new risks. LLM Model on Device: repackaged LLMs that work on smaller devices and applications often come with new risks that users and developers did not expect. Unclear T&Cs and Policies: when the terms and conditions and data privacy policies are not expressly stated, this can cause confusion and lead to misconfigurations, sensitive information exposure, and risking copyright infringement and more due to murky compliance and licensing requirements.
Mitigation Methods
Most of the mitigation measures recommended to prevent Supply Chain Vulnerabilities boil down to thoroughly vetting and checking all third-party sources and suppliers, using the most up-to-date versions of every software, and staying on top of compliance requirements and more by educating both developers and security teams about their terms, conditions, and similar documentation. Evaluate each third-party model provider by a set of carefully selected criteria to minimize new risks. Implement strict monitoring on third-party LLMs for any irregularities or vulnerabilities. A detailed inventory can also help developers and security teams keep track of the requirements, terms and conditions, security features, and data privacy policies of each model. Compiling all this information into one central, organized space is critical for ensuring everyone involved stays on the same page. Other typical mitigation strategies such as encryption, patching policies, and more can also help security teams stay on top of supply chain vulnerabilities.
Bottom Line
Supply chain vulnerabilities are potentially a huge risk when it comes to LLM adoption. LLMs are complicated to develop, and given the intense competition and speed of evolution, developers may take shortcuts such as using third-party models, repackaged LLMs on devices, and others that can introduce new risks. Supply chain vulnerabilities can refer to a wide range of risks introduced from third-party model vulnerabilities, data quality, licensing issues, outdated models, and more. Essentially, a supply chain vulnerability is any vulnerability that occurs in the process of creating an LLM. Mitigation techniques for supply chain vulnerabilities range from researching third-party models, gathering information into an inventory, vetting each new model, and avoiding things like outdated models, poorly repackaged LLMs on devices, and more. Stay tuned for our next installment on this series next week, where we’ll be deep-diving LLM04: Data and Model Poisoning. If you want to see how FireTail can help you with your AI security posture, schedule a demo or start using our free tier, today!

The post LLM03: Supply Chain – FireTail Blog appeared first on Security Boulevard.

Rajesh Khazanchi, CEO & Co-founder of ColorTokens, explains how microsegmentation keeps critical services running in hyper-connected world, delivering true breach readiness and business resilience.

The post Breach Readiness in a World That’s Always Connected appeared first on ColorTokens.

The post Breach Readiness in a World That’s Always Connected appeared first on Security Boulevard.

Authors/Presenters: Ignacio Navarro

Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel.

Permalink

The post BSidesLV24 – GroundFloor – Insert Coin: Hacking Arcades For Fun appeared first on Security Boulevard.

MEDIA ADVISORY Strata Identity VP of Product and Standards to Discuss Future of Authorization at Identiverse 2025 Gerry Gebel to join fellow AuthZEN co-chairs to discuss next-gen authorization interoperability and open standards BOULDER, Colo., May 21, 2025 – Strata Identity, the Identity Orchestration company, today announced that Gerry Gebel, VP of Product and Standards, will...

The post Strata Identity VP of Product and Standards to Discuss Future of Authorization at Identiverse 2025 appeared first on Strata.io.

The post Strata Identity VP of Product and Standards to Discuss Future of Authorization at Identiverse 2025 appeared first on Security Boulevard.

Email spoofing security is an imperative addition to your email’s security posture, here’s why. Email spoofing is a form of internet fraud. Leverage email authentication tools to enhance your domain’s email spoofing security.

The post Email Spoofing Security appeared first on Security Boulevard.

In this fourth installment of Tenable’s “Stronger Cloud Security in Five” blog series, we turn our attention to securing cloud data, a complex endeavor as data grows exponentially and threats become more sophisticated. Check out five DSPM best practices to sharpen your cloud data security and compliance.

As the volume of data stored and processed in your cloud environments grows, so does the complexity of protecting it from cyber thieves and of complying with strict regulations.

While on-premises data centers offer a more controlled environment, data generated in the cloud can be less structured and is often stored in a more diverse array of repositories, increasing the risk that it will be improperly secured.

As GigaOm Analyst Paul Stringfellow tells us, cloud repositories are often deployed outside of normal controls due to their ease of use and their perceived low cost.

“Often, they are used for specific tasks and then discarded and forgotten by original project owners,” he writes. “This leads to shadow data repositories that exist outside of established data storage and security controls.”

The solution? Data security posture management (DSPM) systems, which offer unified visibility of all your cloud data — even if your organization uses multiple cloud service providers (CSPs) — along with other data protection capabilities.

“A key element of data resilience is understanding where sensitive data stores are located and what is inside them. You can't secure something you don't know about, and DSPM helps identify and categorize data stores,” Enterprise Strategy Group Analyst Todd Thiemann indicates.

At Tenable, we believe a key element for securing your cloud data is to have your DSPM tool integrated as part of a comprehensive cloud native application protection platform (CNAPP). 

Combining DSPM functionality with other CNAPP components gives you holistic cloud security that also includes protection for workloads, identities and more, as Tenable Senior Product Marketing Managers Diane Benjuya and Lior Zatlavi explain. 

“In light of the massive increase in data-related breaches – and their cost – integrating DSPM in CNAPP is essential to reduce risk. It also simplifies security efforts, improves compliance and ensures that data security is an integral part of your overall security strategy,” they write.

Below we unpack five DSPM best practices that are key for securing your data across your multi-cloud environment.

1 - Continuously discover and classify cloud data 

You need to have full, continuously updated visibility into all your data — including AI models, cloud workloads and storage buckets. It’s particularly important to detect unknown “shadow data” that is generated and stored without the knowledge of the IT and security teams. In fact, IBM’s “Cost of a Data Breach Report 2024” found that “shadow data” stored in unmanaged data sources were involved in 35% of all data breaches. 

All data assets must be assigned risk-severity levels based on their sensitivity, as well as be organized into categories, such as confidential company data and customer personal information.

When this data visibility is combined with other CNAPP functions, such as cloud security posture management (CSPM), organizations can pinpoint security gaps, toxic combinations and potential breach impacts, as well as prioritize necessary prevention and mitigation measures.

2 - Proactively prevent data breaches

It’s critical to leverage advanced analytics and flag suspicious activity that could lead to data breaches. With these actionable insights and recommendations, your team is empowered to stay a step ahead of attackers by proactively investigating and addressing these risk scenarios.

For example, integrating DSPM with your CNAPP’s cloud infrastructure entitlements management (CIEM) alerts you to anomalous behavior from human or machine identities that might endanger the security of sensitive cloud data. With these insights, you can take the appropriate corrective action and block a potential attack path by, say, reducing or entirely revoking a suspicious identity’s data access.

3 - Streamline comprehensive regulatory compliance

The number of data privacy and data security laws, regulations, industry mandates, internal policies and voluntary frameworks increases with each passing year, making compliance a daunting challenge.

To stay on top of all these data-protection rules and requirements, you need to continuously assess your data-security compliance posture by automating the processes of: 

• discovering and classifying cloud data; 
• enforcing your data-protection policies;
• addressing violations like unauthorized access with step-by-step remediation guidance;
• and generating detailed, audit-ready compliance reports.

Here again, a CNAPP-integrated DSPM not only automates these processes but also offers invaluable insights with rich-context on the threats to your cloud data that put you at risk of non-compliance, including vulnerabilities, misconfigurations and overprivileged identities. 

4 - Conduct fast, precise incident response

If a data breach happens, time is of the essence. You need to respond quickly and decisively. With the context-rich analytics provided by your DSPM, your security team is better able to: 

• Assess the scope of the breach
• Pinpoint its cause
• Flag the compromised data
• Prioritize remediation
• Contain the breach

To get this expansive visibility and understanding of a data breach, it’s key for your DSPM to perform a comprehensive analysis – leveraging its CNAPP integration – that takes into account the full context of the incident, since your data protection posture can’t be assessed in a vacuum. As we learned from Verizon’s “2025 Data Breach Investigations Report” (DBIR), data thieves use a variety of attack methods — particularly their preferred ones: compromising credentials and exploiting vulnerabilities.

5 - Bake data security into your cloud growth

As your multi-cloud deployment inevitably grows, data security and compliance must be at the heart of your environment’s expansion. In this growth scenario, a CNAPP-integrated DSPM empowers your security team to build data-protection organically into these efforts in a number of key ways, including by:

• Having complete, continuously updated visibility of cloud data and its risks
• Providing context-rich insights into the data security posture of the mapped data stores, including configurations and identity permissions
• Categorizing data assets’ sensitivity
• Identifying which human and machine identities have access to cloud data
• Helping prioritize issues and prescribing actionable, concrete remediation steps 

Find out how you can take action to boost your cloud security in just five minutes.

Learn more:

• "Stronger Cloud Security in Five: The Importance of Cloud Configuration Security"
• "Stronger Cloud Security in Five: How To Protect Your Cloud Workloads"
• "Stronger Cloud Security in Five: Securing Your Cloud Identities"

The post Cloud Data Protection: How DSPM Helps You Discover, Classify and Secure All Your Data Assets appeared first on Security Boulevard.

Virtual machines (VMs) have become ubiquitous in the enterprise by offering flexibility, scalability, and cost savings. But widespread adoption has outpaced traditional security controls, which often rely on runtime access or agent-based monitoring.

The post Boost VM security: 8 key strategies appeared first on Security Boulevard.

Artificial intelligence (AI) continues to redefine what is possible in software, from predictive models to generative content. But as AI systems grow in power, so too do the threats targeting their foundations, including a particularly insidious category: data and model poisoning.

The post The OWASP LLM Top 10 and Sonatype: Data and model poisoning appeared first on Security Boulevard.

The Israel-South Korea defense partnership has evolved from basic procurement relationships into a sophisticated technological alliance.

The post Strategic Defense Innovation: Israel and South Korea’s Technological Partnership  appeared first on Security Boulevard.

In a significant escalation of cyber warfare, over 1.5 million Indian websites have been targeted in a series of coordinated cyberattacks attributed to seven Advanced Persistent Threat (APT) groups, primarily based in Pakistan. These attacks, following the Pahalgam terror strike and India’s subsequent Operation Sindoor, aimed at critical infrastructure and government websites across the country.

The post Over 1.5 Million Indian Websites Targeted in Coordinated Attacks appeared first on Seceon Inc.

The post Over 1.5 Million Indian Websites Targeted in Coordinated Attacks appeared first on Security Boulevard.

Dover, United States, 21st May 2025, CyberNewsWire

The post Attaxion Becomes the First EASM Platform to Integrate ENISA’s EU Vulnerability Database (EUVD) appeared first on Security Boulevard.

Is Choosing Cloud Security a Complex Task? From financial services and healthcare to DevOps and SOC teams, businesses across sectors are grappling with the complexity of managing Non-Human Identities (NHIs). NHIs, essentially machine identities, are a critical component of an organization’s cybersecurity. They play a pivotal role in reducing threats by securing both the machine […]

The post Free to Choose the Right Security for Your Cloud appeared first on Entro.

The post Free to Choose the Right Security for Your Cloud appeared first on Security Boulevard.

How Can You Make Cybersecurity Budget Allocations Effective? How do organizations allocate effective funds to cybersecurity? The million-dollar question remains unanswered for many businesses, irrespective of their sizes. It’s not just a matter of investment in security, but also strategizing on where the cybersecurity budget needs to be applied. The holistic Approach to Cybersecurity Budgeting […]

The post Fitting Cybersecurity Investments into Your Budget appeared first on Entro.

The post Fitting Cybersecurity Investments into Your Budget appeared first on Security Boulevard.

Today’s enterprises have embraced digital evolution. Business deals are conducted in online spaces, contracts are signed with a keyboard, data is held in physical servers and the cloud, and client...

The post Attack Surface Reduction for Enterprises: A Guide appeared first on Security Boulevard.

Author/Presenter: Fabricio Gimenes

Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel.

Permalink

The post BSidesLV24 – GroundFloor – Windows EventLog Persistence? The Windows Can Help Us appeared first on Security Boulevard.

SLASH YOUR MTTR! Join Us for a Live Webinar on Faster Incident Response & Reduced Downtime. MTTR (Mean Time to Response) isn’t just a buzzword — it’s a crucial metric that can make or break your organization’s ability to bounce back from incidents quickly. But here’s the thing: most teams misunderstand what MTTR really means. […]

The post Why Your MTTR Is Too Slow — And How to Fix It Fast appeared first on Security Boulevard.

via the cosmic humor & dry-as-the-desert wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Renormalization’ appeared first on Security Boulevard.

Microsegmentation has become a foundational component of enterprise security and a Zero Trust Architecture (ZTA). As threats continue to grow in complexity, the ability to contain and limit the spread of an attack inside the network is critical. Traditional perimeter-focused security … Read More

The post The Role of Microsegmentation in Managing Lateral Movement Through Inbound and Outbound Traffic Policies  appeared first on 12Port.

The post The Role of Microsegmentation in Managing Lateral Movement Through Inbound and Outbound Traffic Policies  appeared first on Security Boulevard.