Security Boulevard

Why Should Professionals Consider NHI for Security Needs? Is your organization exploring efficient ways to secure cloud environments? By leveraging comprehensive Non-Human Identities (NHIs), businesses can improve their cybersecurity posture while ensuring compliance and efficiency. NHIs, the machine identities, act as the encrypted passports and visas of your digital tourist – the virtual devices, services, […]

The post How NHIs Can Handle Your Security Needs appeared first on Entro.

The post How NHIs Can Handle Your Security Needs appeared first on Security Boulevard.

Is Your Investment in Advanced NHIs Justifiable? Investing in advanced Non-Human Identities (NHIs) is no longer a luxury, but a necessity for businesses, particularly those operating in the cloud. But how can you ensure that your hefty investment in cybersecurity mechanisms is justified? Let’s delve into the strategic importance of managing NHIs and secrets. The […]

The post Justify Your Investment in Advanced NHIs appeared first on Entro.

The post Justify Your Investment in Advanced NHIs appeared first on Security Boulevard.

How Does Cloud Compliance Translate Into Team Satisfaction? Are you worried about securing machine identities? Certainly, managing Non-Human Identities (NHIs) is a complex task that requires the right cybersecurity approach. However, its strategic importance can’t be overstated, especially when it comes to achieving team satisfaction. Indeed, cloud compliance not only increases security but also fosters […]

The post Why Satisfied Teams Use Cloud Compliance Tools appeared first on Entro.

The post Why Satisfied Teams Use Cloud Compliance Tools appeared first on Security Boulevard.

Why do You Need Robust IAM Solutions? How secure are your organizational operations? Establishing a relaxed security management mindset requires a significant leap. The answer could lie in robust Identity and Access Management (IAM) solutions. But, what makes IAM solutions indispensable? A Deep Dive into Non-Human Identity and Secrets Management To understand the value of […]

The post Stay Relaxed with Robust IAM Solutions appeared first on Entro.

The post Stay Relaxed with Robust IAM Solutions appeared first on Security Boulevard.

As the transition period for PCI DSS 4.0 draws to a close on March 31, 2025, PCI DSS 4.0.1 stands as the current version of the standard. More importantly, the March 31, 2025 deadline for full compliance with all new and customized PCI DSS 4.0 requirements is live. 

What's New in PCI DSS 4.0.1?

PCI DSS 4.0.1 represents a limited but important revision to version 4.0. While it doesn't introduce new requirements, it provides crucial clarifications that impact how organizations implement security controls, particularly around multi-factor authentication and payment page security. 

The post PCI DSS 4.0.1: What Changed and How is this the Next Step for Universal MFA appeared first on Security Boulevard.

Enterprise Kubernetes management is at the heart of modern cloud-native strategies, enabling organizations to deploy, scale, and govern applications effectively. In 2025, enterprise Kubernetes has evolved into a critical platform for businesses seeking agility, scalability, and operational efficiency. However, as adoption has accelerated, so have the challenges—complexity, security, cost optimization, and governance top the list.

The post Enterprise Kubernetes Explained: How to Leverage K8s Effectively appeared first on Security Boulevard.

Author/Presenter: Hazel Weakly (Nivenly Foundation; Director, Haskell Foundation; Infrastructure Witch of Hachyderm)

Our sincere appreciation to LinuxFest Northwest (Now Celebrating Their Organizational 25th Anniversary Of Community Excellence), and the Presenters/Authors for publishing their superb LinuxFest Northwest 2025 video content. Originating from the conference’s events located at the Bellingham Technical College in Bellingham, Washington; and via the organizations YouTube channel.

Thanks and a Tip O' The Hat to Verification Labs :: Penetration Testing Specialists :: Trey Blalock GCTI, GWAPT, GCFA, GPEN, GPCS, GCPN, CRISC, CISA, CISM, CISSP, SSCP, CDPSE for recommending and appearing as speaker at the LinuxFest Northwest conference.

Permalink

The post LinuxFest Northwest: The Geology of Open Source appeared first on Security Boulevard.

DoJ, FBI, USSS yoinked USDT: Pretty girls plus investment fraud equals forfeiture recovery (eventually).

The post US Pig Butchering Victims ‘Will’ Get Refunds — Feds Seize $225M Cryptocurrency appeared first on Security Boulevard.

Tonic Validate is a free, open-source library for evaluating RAG and LLM based applications. We recently announced a new listing on GitHub Marketplace that provides a GitHub Actions template to run Tonic Validate against code changes on every commit. Today, we’re following up with an additional listing that allows you to establish integration tests each time a branch is merged into your main branch.

The post Tonic Validate is now on GitHub Marketplace! (Part 2) appeared first on Security Boulevard.

We are proud to announce that we have successfully completed our HIPAA certification, marking a significant milestone in our commitment to data security and privacy. This achievement underscores our dedication to providing secure data environments for our clients, particularly those in the healthcare industry handling protected health information (PHI).

The post Tonic.ai Achieves HIPAA Compliance Certification, Ensuring Enhanced Security for Protected Health Information appeared first on Security Boulevard.

Tonic Validate, our free, open-source library for evaluating RAG and LLM-based applications, can be run entirely as a GitHub Action. And it's now available for quick deployment on GitHub Marketplace!

The post Tonic Validate is now available on GitHub Marketplace! appeared first on Security Boulevard.

A month or so ago a friend of mine received the following message on Steam from someone in their Friends list (they were already friends):

Figure 1 - 'this is for you'                     

 

 

 

 

 

The two links are different and refer to a Gift Card on Steam's community platform. As you might have noticed, the domain is not related to Steam at all, but rather is an attempt at phishing.

 The URLs are:

stermcormmunity[.]com/gift-card/
steamcoummuniity[.]com/gift-card/

The differences are subtle enough that you may just miss it. When you click on the link, you are redirected to a 'Summer Gift Marathon'.

Figure 2 - Fake Steam website

Once you log in to the fake Steam website, your credentials are stolen and will be used to spread more phishing, likely steal your inventory items and so on.

Other phishing sites related to this campaign are:

steam-pubgvn[.]top
steamauthconnection[.]store
steamcommnunity[.]com
steamcommunitay[.]com
steamcommunitfy[.]com
steamcommunitihy[.]icu
steamcommunitiny[.]com
steamcommunitweya[.]art
steamcommunl1ty[.]com
steamcommunllity[.]com
steamcommunty[.]ru
steamcommununity[.]cam
steamcommunutiy[.]com
steamcomnunityty[.]com
steamcomnunlity[.]com
steamcomnuty[.]com
steamcomrnnunlty[.]com
steamcomun1ty[.]com
steamcomuniry[.]com
steamconmunify[.]com
steamconnection[.]store
steamcornmunlty[.]ru
steamcornrnunlty[.]ru
steamlinks-short[.]com
stearncommunjty[.]com
stearncommunnity[.]com
stearncomnunity[.]com
stearncornnunity[.]com
steeamcommunitty[.]com
unevwsteeamcommunitty[.]com 

New ones do pop up from time to time, so stay vigilant. 

Tips   Only log in on the legitimate Steam community website, this being https://steamcommunity.com/. An extra tip is to bookmark the legitimate site, so even if you do get a message like this, you can go straight to your bookmark and search what you need from there.   If someone new tries to add you as a Friend and immediately sends a message like the above, alarm bells should start ringing.   If someone already on your Friends list suddenly sends a random message with an even more random link out of the blue, cue the alarm bells again.    If you want to check the website out in a safe manner, then you can use URLscan.io, which will give you a verdict of the website as well as an image preview. In addition, you can use VirusTotal to review a website's reputation.   Note that an 'all clean' does not necessarily mean it is. Caution above all!    Follow Steam's Account Security Recommendations to stay safe.

 

 

The post Steam Phishing: popular as ever appeared first on Security Boulevard.

Remote attackers can trigger an avalanche of internal ESI requests, exhausting memory and causing denial-of-service in Apache Traffic Server. Executive Summary Imperva’s Offensive Security Team discovered CVE-2025-49763, a high-severity vulnerability (CVSS v3.1 estimated score: 7.5) in Apache Traffic Server’s ESI plugin that enables unauthenticated attackers to exhaust memory and potentially crash proxy nodes. Given ATS’s […]

The post CVE-2025-49763 – Remote DoS via Memory Exhaustion in Apache Traffic Server via ESI Plugin appeared first on Blog.

The post CVE-2025-49763 – Remote DoS via Memory Exhaustion in Apache Traffic Server via ESI Plugin appeared first on Security Boulevard.

Imagine if every doctor had an invisible assistant, one that quietly listens during every patient interaction, captures every detail with precision, and instantly writes the...Read More

The post Top 7 Ambient Listening AI Tools Revolutionizing Healthcare in 2025 appeared first on ISHIR | Software Development India.

The post Top 7 Ambient Listening AI Tools Revolutionizing Healthcare in 2025 appeared first on Security Boulevard.

Check out highlights from Tenable’s “2025 Cloud Security Risk Report,” which delves into the critical risk from insecure cloud configurations. Plus, Google reveals a Russia-sponsored social engineering campaign that targeted prominent academics’ Gmail accounts. And get the latest on AI system security, just-in-time access, CIS Benchmarks and more!

Dive into six things that are top of mind for the week ending June 20.

1 - Tenable report: Oops, your cloud data and secrets might be lounging in public

Houston, we have a cloud data-security problem.

Tenable’s “2025 Cloud Security Risk Report,” published this week, found that 9% of publicly accessible cloud-storage resources hold sensitive data, almost all of which – 97% – is labeled as either restricted or confidential.

“This kind of exposure creates an ideal entry point for threat actors and poses a serious, immediate security risk,” reads the report, which provides in-depth coverage of cloud security issues including data and secrets exposure; identity management; cloud workload protection; and artificial intelligence (AI) defense.

The report, authored by the Tenable Cloud Research team, is based on workload telemetry analysis from public cloud and enterprise environments scanned with the Tenable Cloud Security cloud native application protection platform (CNAPP) between October 2024 and March 2025.

Other key findings include:

• 54% of the organizations using Amazon Web Services (AWS) Elastic Container Service (ECS) task definitions have at least one secret – meaning, a privileged credential – embedded in their configurations, which creates a direct attack path.
• 29% of organizations have at least one toxic cloud trilogy — meaning a cloud workload that is publicly exposed, critically vulnerable and highly privileged. This stat is down nine percentage points from the previous report, but it’s still too high.
   

(Tenable’s “2025 Cloud Security Risk Report,” June 2025)

Here are some solid tips and best practices from the report:

• Continuously monitor for public access and automate detection of misconfigured storage services.
• Safeguard secrets by using the secrets-management tools that cloud service providers (CSPs) provide.
• Detect toxic cloud trilogies by correlating identity, vulnerability and network configuration data.
• Boost cloud identity security by adopting just-in-time access capabilities, which put a time limit on access granted to identities.
• Inventory, classify and track your sensitive data in your cloud environment.

To get more details, check out:

• The blog “Secrets in the Open: Cloud Data Exposures That Put Your Business at Risk”
• The announcement “Tenable Research Finds Pervasive Cloud Misconfigurations Exposing Critical Data and Secrets”
• The full report “2025 Cloud Security Risk Report”
• The upcoming webinar “Why Your Cloud Data May Not Be Secure After All: Insights from Tenable Research”
• The blog “Harden Your Cloud Security Posture by Protecting Your Cloud Data and AI Resources”

2 - Google: Academics and Russia critics targeted in social engineering impersonation campaign

A threat actor sponsored by the Russian government recently impersonated U.S. Department of State staff and gained persistent access to the email mailboxes of prominent academics and Russia critics.

That’s according to the Google Threat Intelligence Group, which detailed the social engineering impersonation scheme in a blog post this week.

The threat actor targeted its victims between April and early June of this year by establishing rapport with them and luring them to set application specific passwords (ASPs).

An ASP is a ransonly-generated 16-digit passcode that allows a Google user to grant access to their Google account to a third-party app or device that doesn’t support “Sign in with Google” authentication nor two-step verification.
 

In this case, the threat actor emailed victims a PDF document inviting them to access a fraudulent State Department cloud environment. The instructions prompted victims to create an ASP.

“Once the target shares the ASP passcode, the attackers establish persistent access to the victim’s mailbox,” reads the blog post, which cites research from Citizen Lab about this same campaign. Google has “re-secured” the Gmail accounts compromised during this social engineering campaign.

In the blog, Google states that using ASPs isn’t recommended and that they’re “unnecessary in most cases.” If a user generates an ASP, Google sends a notification to their Gmail account, recovery email address and any devices signed into the Google account. Users can revoke ASPs on demand.

For more information about preventing social engineering attacks:

• “How to avoid and prevent social engineering attacks” (TechTarget)
• “Understanding Social Engineering: Tactics, Threats, and Prevention” (CTO Magazine)
• “Phishing attacks: defending your organisation” (U.K. National Cyber Security Centre)
• “What are social engineering attacks?” (TechTarget)
• “How AI is making phishing attacks more dangerous” (TechTarget)

3 - Report breaks down AI system “tech stack” to help cyber defenders

Looking to boost your strategies and practices for securing your AI systems? A new report aims to unpack the technology layers that make up an AI system, hoping that a clearer understanding of this “tech stack” will lead to improved AI security.

The Paladin Global Institute’s “The AI Tech Stack: A Primer for Tech and Cyber Policy” report is aimed at cybersecurity practitioners, IT professionals and policy makers, because it’s critical for these three groups to have a solid grasp of how AI systems are built and deployed.

“This framing will give policymakers and tech innovators the tools to take an informed approach to AI security,” Kemba Walden, President of Paladin Global Institute, said in a statement.

The report outlines five core, interdependent layers of the AI “tech stack”:

• Governance: This layer includes a scaffolding of security protocols, legal requirements, ethical principles and policies for secure AI development and deployment.
• Application: This layer consists of the user interface via which AI capabilities are offered to users, including AI chatbots, search engines and voice assistants.
• Infrastructure: This layer is made up of the computational foundation powering AI systems, such as data centers, networks and energy systems.
• Model: This is the “core computational component” where data is processed according to sophisticated AI algorithms in order to pinpoint patterns, generate decisions and more.
• Data: Here resides the foundational raw information that fuels AI models.

“Robust security across this stack is a technical necessity and a strategic imperative,” the report reads.

As shown in the table below, the report explains the security risks in each layer of the AI “tech stack.”

(Source: Paladin Global Institute’s “The AI Tech Stack: A Primer for Tech and Cyber Policy” report, June 2025)

The report also offers recommendations for preventing and mitigating the key cyber threats faced by AI systems. It argues that the right security strategy is to take a systemic approach, as opposed to isolated controls. The report also calls for embedding security starting in the early stages of AI system development.

Recommendations include:

• Securing the data layer with encryption and access controls
• Housing the model layer in environments protected with robust access controls and secure APIs
• Applying foundational cybersecurity practices to the infrastructure and application layers, as well as AI-specific protections
• Developing dynamic, interoperable standards in the governance layer, in order to boost trust in AI systems

For more information about AI security, check out these Tenable resources:

• “Know Your Exposure: Is Your Cloud Data Secure in the Age of AI?” (on-demand webinar)
• “Who's Afraid of AI Risk in Cloud Environments?” (blog)
• “Tenable Cloud AI Risk Report 2025” (research report)
• “2025 Cloud AI Risk Report: Helping You Build More Secure AI Models in the Cloud” (on-demand webinar)
• “How AI Can Boost Your Cybersecurity Program” (blog)

4 - Tenable webinar poll: Are you using JIT access and automating identity protection?

During our recent webinar “Tenable Cloud Security Customer Update, June 2025,” we polled attendees about their use of just-in-time (JIT) access and about how automated their detection of overprivileged identities is. Check out what they said.

(19 webinar attendees polled by Tenable, June 2025)

(19 webinar attendees polled by Tenable, June 2025)

Watch this on-demand webinar to learn about how JIT access can slash your exposures from compromised identities.

5 - CISA warns: Ransomware gangs exploiting SimpleHelp RMM vuln

Attackers are launching ransomware attacks by exploiting vulnerabilities in SimpleHelp’s eponymous remote monitoring and management product.

That’s the warning from the U.S. Cybersecurity and Infrastructure Security Agency (CISA), which added that victims include customers of a utility billing software provider.

“This incident reflects a broader pattern of ransomware actors targeting organizations through unpatched versions of SimpleHelp RMM since January 2025,” reads CISA’s cybersecurity advisory.
 

 

SimpleHelp’s versions 5.5.7 and earlier contain several vulnerabilities, including the path traversal vulnerability CVE-2024-57727, which is likely the one the ransomware attackers are exploiting, according to CISA.

Recommended mitigations include:

• Vulnerable third-party vendors:
  • Immediately upgrade from SimpleHelp versions 5.5.7 or earlier to the latest version of the product.
  • Direct your downstream customers to secure their endpoints and conduct threat hunting on their network.
• Vulnerable downstream customers and end users:
  • Determine if you’re running an unpatched SimpleHelp version directly or embedded in third-party software.
  • Immediately upgrade to the latest version of the product.
• Downstream customers and end users with systems encrypted via ransomware:
  • Take the compromised system offline.
  • Reinstall the operating system using a bootable USB drive or DVD
  • Wipe the system and restore data exclusively from a clean backup.

CISA also offers proactive mitigation recommendations, such as:

• Keep an update inventory of all your software and hardware assets.
• Back up your system on a daily basis to a separate offline device.
• If possible, don’t expose remote access services to the web.

To get more details, read:

• The CISA advisory “Ransomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider”
• The CISA alert “CISA Releases Cybersecurity Advisory on SimpleHelp RMM Vulnerability”

6 - CIS updates Benchmarks for AWS, GCP, Microsoft products

If your organization uses the CIS Benchmarks to tighten up software configurations, this one's for you.

The Center for Internet Security (CIS) has updated 12 of its CIS Benchmarks secure configuration guidelines, including those for Amazon Elastick Kubernetes Service, Microsoft 365 and Google Cloud Platform.

Specifically, these CIS Benchmarks were updated:

• CIS Amazon Elastic Kubernetes Service (EKS) Benchmark v1.7.0
• CIS Cisco IOS XE 17.x Benchmark v2.2.0
• CIS Google Cloud Platform Foundation Benchmark v4.0.0
• CIS Microsoft 365 Foundations Benchmark v5.0.0
• CIS Microsoft SQL Server 2019 Benchmark v1.5.0 — Final Update
• CIS Microsoft SQL Server 2022 Benchmark v1.2.0
• CIS Microsoft Windows 10 Enterprise Benchmark v4.0.0
• CIS Microsoft Windows 11 Stand-alone Benchmark v4.0.0
• CIS Microsoft Windows Server 2022 Benchmark v4.0.0
• CIS Oracle Cloud Infrastructure Container Engine for Kubernetes (OKE) Benchmark v1.7.0
• CIS SUSE Linux Enterprise 12 Benchmark v3.2.1
• CIS VMware ESXi 7.0 Benchmark v1.5.0
   

In addition, CIS released these three brand new Benchmarks:

• CIS Apple MacOS 14.0 Sonoma Intune Benchmark v1.0.0
• CIS Apple MacOS 15.0 Sequoia Intune Benchmark v1.0.0
• CIS Ubuntu Linux 22.04 LTS STIG Benchmark v1.0.0

You can use the CIS Benchmarks’ configuration recommendations to harden products against attacks. There are more than 100 Benchmarks for 25-plus vendor product families. Product categories covered by the CIS Benchmarks include cloud platforms; databases; desktop and server software; mobile devices; operating systems; and more.

To get more details, read the CIS blog “CIS Benchmarks June 2025 Update.” For more information about the CIS Benchmarks list, check out its home page and FAQ, as well as:

• “Getting to Know the CIS Benchmarks” (CIS)
• “Security Via Consensus: Developing the CIS Benchmarks” (Dark Reading)
• “How to Unlock the Security Benefits of the CIS Benchmarks” (Tenable)
• “CIS Benchmarks Communities: Where configurations meet consensus” (Help Net Security)
• “CIS Benchmarks: DevOps Guide to Hardening the Cloud” (DevOps)
   

The post Cybersecurity Snapshot: Tenable Report Spotlights Cloud Exposures, as Google Catches Pro-Russia Hackers Impersonating Feds appeared first on Security Boulevard.

Companies with $1 billion in revenue or less might want to give a heads-up to HR to kickstart the search for a new CISO — because according to a study from IANS Research, your current CISO might be out the door within a year.  The 363 CISOs in SMBs surveyed for the 2025 Small and..

The post Is Your CISO Ready to Flee?  appeared first on Security Boulevard.

Managing certificates in-house using private CAs offers enterprises greater security, compliance, and long-term cost savings. With the shift toward shorter certificate lifespans and rising complexity in modern IT environments, public CAs often fall short. Private CAs empower businesses with agility, automation, and control while supporting post-quantum cryptography and hybrid infrastructure needs. Tools like Sectigo streamline the transition and amplify ROI through flexible deployment and centralized management.

The post The ROI of moving certificate management in-house with internal CAs appeared first on Security Boulevard.

Alright, let’s be honest — login systems are everywhere. From your favourite pizza delivery app to your office tools, every app asks you to Sign in with Google or Log in with Microsoft. Ever wondered how that works under the hood? That’s where OpenID Connect (OIDC) comes into play. In simple terms, OIDC is a...

The post What’s OpenID Connect (OIDC) and Why Should You Care? appeared first on Security Boulevard.

We’ve officially entered the era of agentic AI—where systems do more than just follow instructions. These AI agents can now act autonomously, make decisions, execute tasks, and learn continuously from their interactions within digital environments. In the context of network infrastructure and penetration testing, agentic AI marks a major leap forward. Instead of waiting for […]

The post How Agentic AI Can Secure Network Infrastructure? appeared first on Kratikal Blogs - Information Hub For Cyber Security Experts.

The post How Agentic AI Can Secure Network Infrastructure? appeared first on Security Boulevard.

Cold email still works in 2025—but only if done right. Learn best practices, deliverability tips, and how to secure your domain for real results.

The post Is Cold Email Still Effective in 2025? Best Practices for Outreach and Security appeared first on Security Boulevard.