AI-powered defenses offer clear strategic advantages for telecom providers and enterprise security teams to help combat vishing attacks.
The post Using AI to Identify Patterns in Vishing Attempts appeared first on Security Boulevard.
SANTA CLARA, Calif., June 24, 2025 – Recently, Gartner released the 2025 “Innovation Insight: Adversarial Exposure Validation in China”¹, NSFOCUS was selected as a Representative Provider for its adversarial exposure validation (AEV) capability in the continuous threat exposure management (CTEM) service. Why has ASM become a pain point for enterprises? Asset data is scattered and lacks […]
The post NSFOCUS was Selected as a Representative Provider of Gartner® “Innovation Insight: Adversarial Exposure Validation in China” appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..
The post NSFOCUS was Selected as a Representative Provider of Gartner® “Innovation Insight: Adversarial Exposure Validation in China” appeared first on Security Boulevard.
Vulnerability management is a continuous process of detecting, prioritizing, and addressing security weaknesses in software applications, networks, and systems. This proactive approach is vital for protecting an organization’s digital infrastructure and ensuring overall security. To streamline and enhance this process, integrating artificial intelligence (AI) is key. AI-powered platforms are revolutionizing vulnerability management by enabling quicker […]
The post Role of AI in Vulnerability Management appeared first on Kratikal Blogs - Information Hub For Cyber Security Experts.
The post Role of AI in Vulnerability Management appeared first on Security Boulevard.
Unstructured Data Management: Closing the Gap Between Risk and Response
madhav
Tue, 06/24/2025 - 05:44
The world is producing data at an exponential rate. With generative AI driving 90% of all newly created content, organizations are overwhelmed by an ever-growing data estate. More than 181 zettabytes of data now exist globally—and 80% of it is unstructured. This includes emails, documents, chat transcripts, videos, and collaborative content across platforms like SharePoint, OneDrive, and Slack.
Unlike structured data housed in databases, unstructured data is scattered, unsupervised, and inherently vulnerable. It often contains the most sensitive information—contracts, financial records, IP, or personal data—yet is the least governed. For organizations bound by regulations such as GDPR, HIPAA, PCI DSS, and CCPA, this lack of visibility introduces serious compliance risks, insider threat exposure, and audit challenges.
Thales has long been the global leader in structured data protection, offering database activity monitoring, data discovery, and data classification. But in today’s environment, the distinction between structured and unstructured data no longer excuses blind spots.
That’s why Thales is introducing File Activity Monitoring (FAM): a new, strategic capability built to bring enterprise-grade visibility, control, and intelligence to unstructured data. It represents the next evolution in data-centric security—closing the gap between risk and response—turning unstructured data from a hidden liability into a measurable, manageable asset.
Thales FAM offers the most comprehensive unstructured data protection suite on the market, empowering security and compliance teams to:
1. Discover and Classify Sensitive Data at Scale
Using both agent-based and agentless methods, FAM scans across servers, file shares, cloud services, and collaboration platforms. It classifies data against regulatory and business requirements—like PII, PHI, financial records, and IP—and continuously updates classifications to account for change over time.
2. Monitor Every Access and Detect Anomalies in Real-Time
FAM logs and analyzes every interaction with unstructured files—whether read, modified, copied, or shared. The centralized dashboard offers deep insights into audit trends, coverage gaps, and access patterns across geographic regions and data sources, including unmanaged locations.
3. Simplify Compliance with Audit-Ready Reports
Generate reports tailored to GDPR, HIPAA, PCI DSS, and other frameworks in minutes—not hours. FAM enriches audit trails with data classification context and retains logs across years of access activity, enabling instant response to auditor requests or investigations.
4. Enhance Security Operations with Generative AI
The FAM Generative AI Data Security Assistant leverages Large Language Models to analyze audit data, flag policy violations, generate dashboards, and streamline compliance workflows. This AI-driven assistant helps teams move from reactive to proactive, enabling faster decision-making with less manual effort.
5. Unify Data Security Across All Sources
From Amazon S3 and Azure Blob to Gmail, SharePoint, and Windows file shares—FAM extends visibility into all corners of the data estate. Whether managed or unmanaged, on-prem or in the cloud, the solution integrates with the Thales Data Security Fabric for end-to-end control.
In today’s data-driven enterprise, visibility is control. Thales File Activity Monitoring gives CISOs, CIOs, and data security leaders the intelligence they need to protect what matters—wherever it lives. By unifying structured and unstructured data monitoring, organizations reduce operational risk, improve regulatory posture, and reclaim control over the most complex, overlooked segment of their data estate.
The era of unstructured data darkness is over. With Thales, unstructured data becomes not just secured—but a strategic asset.
Data Security Compliance Insider Threat Steve Years | Product Marketing, Data Protection
More About This Author >
Schema
{
"@context": "https://schema.org",
"@type": "BlogPosting",
"headline": "Unstructured Data Management: Closing the Gap Between Risk and Response",
"description": "Discover how Thales File Activity Monitoring (FAM) empowers organizations to protect unstructured data, reduce risk, and ensure compliance through visibility, classification, and AI-driven insights.",
"author": {
"@type": "Person",
"name": "Stephen Years",
"url": "https://www.linkedin.com/in/stephenyears/"
},
"publisher": {
"@type": "Organization",
"name": "Thales Group",
"description": "The world relies on Thales to protect and secure access to your most sensitive data and software wherever it is created, shared, or stored. Whether building an encryption strategy, licensing software, providing trusted access to the cloud, or meeting compliance mandates, you can rely on Thales to secure your digital transformation.",
"url": "https://cpl.thalesgroup.com",
"logo": {
"@type": "ImageObject",
"url": "https://cpl.thalesgroup.com/sites/default/files/content/footer/thaleslogo-white.png"
},
"sameAs": [
"https://www.x.com/ThalesCyberSec",
"https://www.linkedin.com/company/thalescloudsec",
"https://www.youtube.com/ThalesCloudSec"
]
},
"mainEntityOfPage": {
"@type": "WebPage",
"@id": "https://cpl.thalesgroup.com/blog/data-security/unstructured-data-management-file-activity-monitoring"
},
"datePublished": "2025-06-24",
"dateModified": "2025-06-24"
}
The post Unstructured Data Management: Closing the Gap Between Risk and Response appeared first on Security Boulevard.
See how Grip’s Jira integration automates SaaS security workflows, removes manual gaps, streamlines follow-up, and helps teams stay efficient and ahead of risk.
The post Bulletproof Security Workflows with Grip’s Jira Integration appeared first on Security Boulevard.
Following last week’s U.S. airstrikes targeting Iranian nuclear sites, cybersecurity experts and government officials are now warning of a possible digital retaliation, a surge in cyber threats originating from Iran. On June 22, the Department of Homeland Security (DHS) issued a National Terrorism Advisory System Bulletin warning of a “heightened threat environment” in the United..
The post Heightened Cyber Threat from Iran Sparks Urgent Calls for Vigilance and Mitigation appeared first on Security Boulevard.
Jun 23, 2025 - - In 2025, virtually no one is a stranger to OpenAI’s ChatGPT. It is one of the most popular AI applications on the Internet, and almost everyone is using it from your boss, to your neighbor, to the passive-aggressive friend sending you oddly phrased text messages.But since it is relatively new, researchers are always finding new vulnerabilities in ChatGPT, including ways it can be exploited by bad actors.Social EngineeringOn the social engineering side, bad actors figured out how to automate resume generation, simulate live interviews and configure remote access for deceptive employment schemes.They also were able to craft personas which could translate outreach for espionage, mimic journalists and think-tank analysts in order to extract information from targets. Malware and HackingBad actors could build malware by troubleshooting Go-based implants, evading Windows Defender, and configuring stealthy C2 infrastructure.They could also execute automated recon, penetration testing scripts, C2 (Command and Control server) configurations and social media botnet management using ChatGPT. Below are a few examples of ways bad actors have been using ChatGPT for their benefit.Propaganda/InfluenceChatGPT could generate propaganda on platforms like TikTok, X, Telegram, and more with fake personas and often fake engagement. The themes of the propaganda ranged from geopolitical agendas to US polarization and election interference in Germany, et cetera.ScamsScammers also used ChatGPT to aid in scam messaging, creating scams where victims would be lured into fake jobs with false promises of high pay that would turn out to extort them.AI Use AttributionThe following table shows a breakdown of the bad actors who were using ChatGPT for different malicious purposes. Some uses were from known adversaries Russia, China, Iran, and North Korea, while others were from Cambodia and the Philippines.TakeawaysUnfortunately, this is likely only the beginning of bad actors using ChatGPT for their purposes. As AI continues to advance, we can only expect hackers to continue to find new ways to exploit it. And with AI security still being relatively new, staying on top of these rising attacks is increasingly difficult.To see how FireTail can help with your own AI Security, schedule a demo or start a free trial today.
The post OpenAI Used Globally for Attacks – FireTail Blog appeared first on Security Boulevard.
Are You Truly Harnessing the Power of NHIs for Cloud Compliance? My professional journey has revealed a critical, yet often overlooked, component of cloud compliance – the effective management of Non-Human Identities (NHIs). NHIs, the machine identities used in cybersecurity, are the unsung heroes of compliance and security. Yet, one can’t help but wonder, are […]
The post Optimistic About Cloud Compliance? Boost It with NHIs appeared first on Entro.
The post Optimistic About Cloud Compliance? Boost It with NHIs appeared first on Security Boulevard.
Are You Leveraging the Power of NHI Management? Cybersecurity is no longer a mere operational concern limited to IT departments. It has become a strategically integral part of businesses around the globe. With the surge in cloud technology, the need for robust security management has escalated. In these scenarios, the question arises, is your team […]
The post Is Your Team Capable of Managing NHIs Effectively? appeared first on Entro.
The post Is Your Team Capable of Managing NHIs Effectively? appeared first on Security Boulevard.
Can we redefine cloud data safety? The increased shift to the cloud has expanded the playing field for cyber threats. This amplifies the urgency for superior security strategies, with Non-Human Identities (NHIs) and Secrets Management playing critical roles. But is enough being done to fortify cybersecurity protocols for NHIs? Are effective NHI practices being observed? […]
The post Keeping Your Cloud Data Safe with Better NHI Practices appeared first on Entro.
The post Keeping Your Cloud Data Safe with Better NHI Practices appeared first on Security Boulevard.
Why is Confidence in Security the Cornerstone for an Effective IAM Strategy? Confidence in security, particularly in Identity and Access Management (IAM), is essential for any organization where data breaches and cyber threats are commonplace. The question is, how can you build such confidence? The answer lies in understanding and effectively managing Non-Human Identities (NHIs) […]
The post Gain Confidence in Your IAM Strategy with NHIs appeared first on Entro.
The post Gain Confidence in Your IAM Strategy with NHIs appeared first on Security Boulevard.
With daring military attacks, kinetic warfare is shifting the balance of power in regions across the globe, upending the perception of power projection. Powerful nations are reeling from the impacts of bold assaults and seeking additional methods to drive foreign policy — cyber may look as an appealing asymmetric warfare capability that is worth doubling-down on.
Powerful militaries were traditionally believed to be a stabilizing force that possessed depth for protection of key political assets, national critical infrastructures, and powerful weapon systems that influence geopolitics.
Times change.
Fall of the MightyWe have seen two of the most powerful nations have their military severely degraded by kinetic attacks from much smaller adversaries. In Europe, Ukraine has punched well above its weight class. It has gutted the world’s largest tank force, air defenses, and injured or killed upwards of a million Russian soldiers — which was considered the 2nd most formidable military force before the shooting began.
The recent spectacular attack, Operation Spiders Web, leveraged Ukrainian domestically produced weaponized drones to strike against Russian long-range bomber aircraft at their airbases, far from the front lines, seriously impacting Russia’s strategic military capability. The covert attack involved over 100 drones, targeted five Russian airbases, and destroyed or damaged at least 20 strategic bombers, including deep strikes into Siberia.
In the Middle East, Isreal has swept aside Iran’s missile defense and air force to dominate the skies above a nation that possesses the 8th largest military. It is striking targets day and night with impunity, even in the capital of Tehran. In addition to targeting military aircraft, air defenses, ballistic missile launch sites, and leadership personnel, the focus has been to destroy the massive uranium enrichment capabilities that Iran has been maturing for decades. Iran has spent enormous resources on refinement facilities and now possesses a significant quantity, well over 800 pounds, of 60% enriched nuclear material. This uranium is very close to the 90% grade needed for nuclear weapons and far from the 3% refinement needed for fuel in nuclear power plants.
In both regions, powerful air campaigns from smaller adversaries have decimated the capabilities and strategic assets of the powerhouses in their region.
So, what is a nation to do when their superior conventional weapons are either woefully insufficient or significantly degraded to strike back?
As it turns out, the asymmetric characteristics of cyber warfare begins to look like a very appealing strategic investment to support desirable outcomes.
Nation State Cyberattacks Are Not NewRussia, Iran, China, and North Korea are well known to be the most aggressive nations that back offensive cyberattacks against their adversaries. They undermine national critical infrastructures, commit fraud and extortion to fund operations, and steal intellectual property to advance domestic industries. Russia and Iran have also conducted or attempted cyberattacks that targeted the military industrial base, misinformation to manipulate national policies and garner public sympathy, and impactful hacks on the critical infrastructures of their adversaries — essentially committing acts of cyberwar against their stated enemies.
Such attacks have had less than desired and limited impacts in the past. It has not brought adversaries to their knees, changed political landscapes, or created significant barriers to military operational effectiveness. The potential is there, but no nation has proven a grasp of the perfect tactics to wield cyber-attacks in devastating ways. Not yet anyways.
This is where an increase in investment and research, loosening of the rules-of-engagement, and fostering innovation with less-than-scrupulous partners, may open new avenues for greater impacts.
Cyber operations are relatively inexpensive as compared with kinetic based heavy-metal weapon systems. They easily cross borders and can attack anyone around the globe. The experts are often well protected and the talent pipeline is easily sustainable for autocratic regimes. Most importantly, they hold the potential to disproportionately impact western countries, as their reliance on Information & Communications Technology (ICT) is must higher. Everything from food distribution, electrical power, shipping logistics, financial services, healthcare, and government operations are heavily dependent on relatively fragile computing systems and networks.
Cyber as the Next FrontierIf such nations choose to deeply expand their current investments into cyberattacks, it could push past a tipping point. As more serious vulnerabilities are discovered, they are exploited faster, and the damages become more severe. All this for a fraction of the cost of replacing destroyed military aircraft.
In the end, both military and cyber attacks are simply tools for nations to push their national and foreign policy agendas. Military assets are expensive, vulnerable, and have a very limited range of influence. The current events may be a catalyst for shifting the defense economics of warfare.
Cybersecurity professionals must be prepared and vigilant. Offensive cyber, orchestrated from powerful nation states, may become a top tier investment that has a force multiplier impact for future battles and conflicts. The impacts of such stratagems will impact every public and private sector. Cybersecurity must be ready.
For more cybersecurity insights, follow me:The post Successful Military Attacks are Driving Nation States to Cyber Options appeared first on Security Boulevard.
The 2025 JWT vulnerabilities remind us that security is not a destination—it's an ongoing journey that requires expertise, vigilance, and the right tools. The question is: do you want to make that journey alone, or do you want a trusted partner who specializes in exactly this challenge?
The post JWT Security in 2025: Critical Vulnerabilities Every B2B SaaS Company Must Know appeared first on Security Boulevard.
Author/Presenter: Chris Beckman (Principal Security Engineer At Taxbit)
Our sincere appreciation to LinuxFest Northwest (Now Celebrating Their Organizational 25th Anniversary Of Community Excellence), and the Presenters/Authors for publishing their superb LinuxFest Northwest 2025 video content. Originating from the conference’s events located at the Bellingham Technical College in Bellingham, Washington; and via the organizations YouTube channel.
Thanks and a Tip O' The Hat to Verification Labs :: Penetration Testing Specialists :: Trey Blalock GCTI, GWAPT, GCFA, GPEN, GPCS, GCPN, CRISC, CISA, CISM, CISSP, SSCP, CDPSE for recommending and appearing as speaker at the LinuxFest Northwest conference.
The post LinuxFest Northwest: Applying The Hybrid Threat Modeling Method appeared first on Security Boulevard.
DUBAI, United Arab Emirates, 23rd June 2025, CyberNewsWire
The post 1inch rolls out expanded bug bounties with rewards up to $500K appeared first on Security Boulevard.
Simbian’s approach offers a new blueprint for how to evaluate and evolve AI for real-world use, without losing sight of the human element.
The post Simbian Advances the AI Frontier With Industry’s First Benchmark for Measuring LLM Performance in the SOC appeared first on Security Boulevard.
Key Takeaways Zero Trust is a fundamental shift in how we think about protecting our networks. If you’ve been in the industry long enough, you probably hear the term thrown around all the time, but you might still be wondering, “Does it really work? And is it worth the investment?” Zero Trust Security Model: A […]
The post Zero Trust Security Model: Key Strategies, Benefits, and Implementation Best Practices appeared first on Centraleyes.
The post Zero Trust Security Model: Key Strategies, Benefits, and Implementation Best Practices appeared first on Security Boulevard.
Okta Inc. on Monday said it has created a new protocol to secure artificial intelligence (AI) agents to bring visibility, control and governance to agent-driven and app-to-app interactions. The Cross App Access platform is especially important as more AI tools use protocols like Model Context Protocol (MCP) to connect their AI learning models to important..
The post Okta Introduces Cross App Access to Secure AI Agents in Enterprise appeared first on Security Boulevard.
Every CEO and CFO understands how to quantify operational risk. Market volatility, supply chain disruptions, and regulatory compliance are all baked into financial projections and boardroom discussions. Yet, when it comes to cyber risk, most companies are flying blind. And that opens them up to potential breaches that can cost, on average, $4.8 million, according to IBM's 2024 Cost of a Data Breach Report.
The post A Multimillion-Dollar Risk: How CEOs Can Better Assess Cybersecurity Threats appeared first on Security Boulevard.
Even when infrastructure improves, enterprises still face a fundamental hurdle: AI systems don’t behave like traditional software.
The post Closing the Gap Between AI Ambition and Enterprise Reality appeared first on Security Boulevard.
