Security Boulevard

Are Your Machine Identities As Secure as They Should Be? Machine identities—or Non-Human Identities (NHIs)—are akin to digital citizens journeying across the interconnected landscape of an organization’s network. But how secure are these travelers on their digital voyages? The answer hinges on how effectively their identities and secrets are managed, a concern that’s integral for […]

The post Enhance Your Cyber Resilience with Capable NHIs appeared first on Entro.

The post Enhance Your Cyber Resilience with Capable NHIs appeared first on Security Boulevard.

When the latest PCI DSS 4.0 requirements came into full effect in March 2025, organizations processing cardholder data faced new obligations to protect payment pages from client-side risks. Requirements such as 6.4.3 (script inventory, authorization, and integrity monitoring) and 11.6.1 (detection of unauthorized changes) demanded stronger visibility and control than many teams had in place. […]

The post Imperva Enhances Client-Side Protection to Help You Stay Ahead of PCI-DSS Compliance appeared first on Blog.

The post Imperva Enhances Client-Side Protection to Help You Stay Ahead of PCI-DSS Compliance appeared first on Security Boulevard.

Creator, Author and Presenter: Daniele Romanini, Resolve

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel.

Permalink

The post USENIX 2025: PEPR ’25 – Unlocking Cross-Organizational Insights: Practical MPC for Cloud-Based Data Analytics appeared first on Security Boulevard.

Learn how to transform sensitive data into a safe AI asset for fine-tuning LLMs. This guide walks through a notebook-based workflow in Amazon SageMaker.

The post Turn sensitive data into safe AI assets with Tonic Textual in Amazon SageMaker Unified Studio appeared first on Security Boulevard.

Sep 30, 2025 - Lina Romero - In 2025, AI is everywhere, and so are AI vulnerabilities. OWASP’s Top Ten Risks for LLMs provides developers and security researchers with a comprehensive resource for breaking down the most common risks to AI models. In previous blogs, we’ve covered the first 6 items on the list, and today, we’ll be going over number 7: System Prompt Leakage. System Prompts are used to instruct AI model behaviour, and System Prompt Leakage occurs when sensitive information contained within the prompt is exposed. Once attackers access these secrets, they can use what they’ve learned to facilitate further attacks. The system prompt itself should never be a secret, however, underlying secrets contained within the system prompt, such as guardrails, etc., are what attackers are looking for. The best way to prevent System Prompt Leakage is to avoid hiding sensitive data such as credentials, permissions, data strings or passwords, etc., within the system prompt language. That way even if attackers get a hold of the system prompt, they have not gained any critical insider knowledge. Some common examples of System Prompt Leakage are: Exposure of Sensitive Functionality- Attackers could learn critical confidential information about functionality through a system prompt. For instance, it could reveal the database information is stored in, resulting in a targeted attack.
Exposure of Internal Rules- The system prompt could reveal information on the internal decision-making process which would allow hackers to gain insight into how it works, thus making it easier to hack.
Revealing of Filtering Criteria- Attackers could figure out the limitations of requests and use this to their advantage.
Disclosure of Permissions and User Roles- The system prompt could reveal information about permissions and user roles that could lead to further exploitation. Prevention Strategies: Separate sensitive data from system prompts: As stated above, the best way to avoid system prompt leakage vulnerabilities is to keep secrets and sensitive information outside the system prompt altogether.
Avoid reliance on system prompts for behavior control: Ensure that you are using a variety of security and other controls for each LLM, instead of putting all your eggs in the system prompt basket.
Implement Guardrails: Guardrails that limit the functionality of certain parts of the LLM can also restrict the information attackers are able to access via the system prompt.
Ensure Security Controls are implemented separately from the LLM: When in doubt, outsource- make sure that you are not solely relying on the LLM to keep itself secure. Use security software to place checks on each LLM to prevent system prompt leakage. With AI vulnerabilities on the rise, now more than ever is the time for security researchers to educate themselves on the risks to LLMs and the OWASP Top 10 is a great place to start. System Prompt Leakage occurs when attackers access sensitive information contained within the system prompt of an LLM. They can then use this information to launch further attacks. There are several ways to mitigate the risk of system prompt leakage, but the best way is to ensure that you store sensitive information such as credentials and passwords outside of the system prompt. To learn more about AI security and see how FireTail can help you with your AI security today, schedule a demo or set up a free trial, here.

The post LLM07: System Prompt Leakage – FireTail Blog appeared first on Security Boulevard.

The Cold Hard Truth: Patches Are Not Enough In recent weeks, the cybersecurity world has seen urgent warnings from CISA and major vendors about the active exploitation of critical vulnerabilities. Specifically, zero-day exploits targeting Cisco Adaptive Security Appliances (ASA) firewalls and platforms like Fortra GoAnywhere MFT have demonstrated a troubling trend: attackers are not just

The post Zero-Day Crisis: Detecting Evasive Cisco ASA and GoAnywhere MFT Attacks with AI appeared first on Seceon Inc.

The post Zero-Day Crisis: Detecting Evasive Cisco ASA and GoAnywhere MFT Attacks with AI appeared first on Security Boulevard.

Creator, Author and Presenter: Alex Kulesza

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel.

Permalink

The post USENIX 2025: PEPR ’25 – Practical Considerations For Differential Privacy appeared first on Security Boulevard.

Sep 30, 2025 - Lina Romero - In 2025’s fast-moving cyber landscape, attacks are everywhere and AI and APIs are the biggest targets. We’ve spoken before about hackers exploiting Docker Swarm to launch cryptomining attacks, but now attackers are using Docker APIs for other malicious purposes. It started this June. Trend Micro noticed abnormal activity in Docker’s APIs- attacks that started as requests to exposed APIs to retrieve a list of containers. The bad actors would then create a novel container to connect to the host root and carry out their attack on the host system. However, an encoded payload hidden in the initial request executes a shell script that sets up the Tor browser in the container and fetches a payload over the Tor network (Security Week). The attackers can then deploy a malicious shell script and modify the SSH configuration of the host system. At this point, the attackers deploy a binary acting as a dropper for an XMRig cryptocurrency miner and “all necessary execution stops internally, allowing it to deploy the miner without requiring the download of any external components” in order to avoid detection (Trend Micro). However, this was only the beginning- on September 8th of this year, hackers launched similar attacks, but with a twist: after carrying out the same initial steps, they proceeded to block external access to the Docker API by writing a command to the cron tab file to create a cron job that blocks its access every minute. From there, threat actors can perform mass scans for other open ports, and propagate malware in new containers using the exposed APIs. Researchers from Trend Micro determined that the attackers used AI in the creation of these tools. What is especially troubling is that these attacks are growing more advanced and may only continue to increase in volume and complexity. As AI and API attacks surge, Docker APIs are a popular target for attackers. Maintaining strong API security is the corner store of cybersecurity as a whole- after all, API security IS AI security. To learn more about securing AI and APIs, check out FireTail’s all-in-one approach. Set up a demo or start a free trial today.

The post Docker APIs Targeted – FireTail Blog appeared first on Security Boulevard.

The Rising Stakes in Critical Infrastructure Security

Cybersecurity has traditionally been framed as an IT issue, protecting desktops, databases, and cloud platforms. But the real frontier is deeper. It's in the industrial systems that power our grids, drive our factories, safeguard our hospitals, and keep our transportation moving. 

The post Meeting IEC 62443 Compliance: How CimTrak Secures Industrial Control Systems appeared first on Security Boulevard.

Discover Mend.io’s AI Security Dashboard.

The post Introducing Mend.io’s AI Security Dashboard: A Clear View into AI Risk appeared first on Security Boulevard.

Creator, Author and Presenter: Curtis Mitchell, xD, United States Census Bureau

Additional Authors: Gary Howarth And Justin Wagner, NIST; Jess Stahl, Census; Christine Task And Karan Bhagat, Knexus; Amy Hilla And Rebecca Steinberg, MITRE

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel.

Permalink

The post USENIX 2025: PEPR ’25 – Establishing Privacy Metrics For Genomic Data Analysis appeared first on Security Boulevard.

Strange factors: Yet another security problem plaguing SonicWall customers.

The post ‘Aggressive’ Akira Ransomware Blitz Clubs SonicWall 2FA to DEATH appeared first on Security Boulevard.

Microsoft used AI-based tools in Defender for Office 365 to detect and block a phishing campaign in which Security Copilot determined the malicious code was likely written by a LLM, marking the latest incident in which AI security tools were used to combat an AI-based cyberattack.

The post Microsoft Sniffs Out AI-Based Phishing Campaign Using Its AI-Based Tools appeared first on Security Boulevard.

via the comic artistry and dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘’Biology Department” appeared first on Security Boulevard.

Creator, Author and Presenter: Marc-Antoine Paré

Our thanks to USENIX for publishing their Presenter’s outstanding USENIX Enigma ’23 Conference content on the organization’s’ YouTube channel.

Permalink

The post USENIX 2025: PEPR ’25 – My $5MM Differential Privacy Visualizations appeared first on Security Boulevard.

Authorities in 14 African countries arrested 260 people, seized 1,235 electronic devices and took down 18 criminal infrastructures in a sprawling Interpol operation aimed at the growing global problem of romance and sextortion scams being run via social media and other platforms. The operation is part of a larger effort to address the problem of scam centers, which started in Southeast Asia but are spreading globally.

The post African Authorities Arrest 260 Suspects in Romance, Sextortion Scams appeared first on Security Boulevard.

Let's have a look at how to integrate NHI Governance with AWS IAM to get detailed security insights into your dashboard.

The post How to Use NHI Governance as Your Central Dashboard to Monitor AWS IAM appeared first on Security Boulevard.

The November 10th deadline for Cybersecurity Maturity Model Certification (CMMC) compliance is approaching fast. For CISOs, risk managers, and compliance leaders across the defense industrial base, this date represents more than a regulatory milestone;  it’s a make-or-break moment for securing and maintaining DoD contracts.

Don't let manual compliance processes slow down your ability to meet this deadline. Compliance shouldn't cost your organization the risk of losing contracts. Keep reading to learn what you must do before the November 10th deadline and recommendations for streamlining compliance. 

The post CMMC Compliance: What Your Need to Know Ahead of November 10 appeared first on Security Boulevard.

In today's digital landscape, organizations face an unprecedented volume of cybersecurity alerts on a daily basis. While these alerts are crucial for maintaining security, their sheer volume can overwhelm security teams, a phenomenon known as alert fatigue. This issue not only hampers the effectiveness of cybersecurity measures but also poses significant risks to business operations, financial performance, and organizational reputation. As CEOs and CFOs, understanding and addressing this challenge is imperative to safeguard your organization's assets and ensure sustained growth.​

The post Cybersecurity Alert Overload is a CEO’s Problem; Here’s How to Fix It appeared first on Security Boulevard.

Notion just released version 3.0, complete with AI agents. Because the system contains Simon Willson’s lethal trifecta, it’s vulnerable to data theft though prompt injection.

First, the trifecta:

The lethal trifecta of capabilities is:

• Access to your private data—one of the most common purposes of tools in the first place!
• Exposure to untrusted content—any mechanism by which text (or images) controlled by a malicious attacker could become available to your LLM
• The ability to externally communicate in a way that could be used to steal your data (I often call this “exfiltration” but I’m not confident that term is widely understood.)...

The post Abusing Notion’s AI Agent for Data Theft appeared first on Security Boulevard.