The post From Chaos to Control: Mastering the 3 Rs of Cybersecurity appeared first on Votiro.
The post From Chaos to Control: Mastering the 3 Rs of Cybersecurity appeared first on Security Boulevard.
The global network security market is on track to reach $38 billion by 2029, growing at a 10% annual rate, according to a report from Dell’Oro Group.
The post Network Security Market to Hit $38 Billion by 2029: Cloud, AI Drive Growth appeared first on Security Boulevard.
The popular and controversial Chinese social media app TikTok is pushing forward with Project Clover, a €12 billion, 10-year initiative aimed at bolstering the protection of European user data.
The post TikTok’s Project Clover Evolves With PETs, Data Access Controls appeared first on Security Boulevard.
DeepSeek is a Chinese artificial intelligence startup that has recently garnered significant attention for its AI chatbot, which rivals leading models like OpenAI’s ChatGPT. DeepSeek has encountered several issues recently. The U.S. Navy has banned its members from using the DeepSeek app due to concerns over potential security and ethical issues, fearing that sensitive user […]
The post Major AI Security Breach: DeepSeek’s Database Exposed Sensitive Data first appeared on StrongBox IT.
The post Major AI Security Breach: DeepSeek’s Database Exposed Sensitive Data appeared first on Security Boulevard.
In recent years, the healthcare sector has emerged as a primary target for cyberattacks, which is mainly due to the highly sensitive nature of medical information.
The post Transforming Healthcare Security: Why Zero-Trust is Essential appeared first on Security Boulevard.
Cybersecurity is no longer just an IT issue—it’s a business imperative that affects every department within an organization. Organizations must direct the responsibility for security beyond the Chief Information Security Officer (CISO) to all leaders throughout the C-Suite because cyber threats evolve and regulations grow strict. Each executive within the company contributes to enhancing security […]
The post Cybersecurity Responsibilities Across the C-Suite: A Breakdown for Every Executive first appeared on StrongBox IT.
The post Cybersecurity Responsibilities Across the C-Suite: A Breakdown for Every Executive appeared first on Security Boulevard.
Discover the top 6 DMARC solutions for MSPs to improve email security, prevent spoofing, and streamline DMARC monitoring for your clients.
The post Top 6 DMARC Solutions for MSPs in 2025 appeared first on Security Boulevard.
AI - Top-of-Mind in 2025
madhav
Thu, 01/30/2025 - 05:25
“Round and round and round we go. Where we stop, nobody knows,” goes the popular children’s refrain. The same could be said of the AI merry-go-round as security analysts, lawmakers, and consumers alike process its break-neck evolution and hold tight for the ride ahead.
But the AI roller coaster is just one ride at the park. Also worth noting are impending advancements in quantum computing, a rise in deepfakes prompting a crack-down on identities, and data privacy conversations moving to priority one for many of the world’s largest stages.
Here’s a look at what we think is in store for artificial intelligence in 2025.
Where AI is heading in 2025It’s hard to believe that ChatGPT was released just a little over 24 months ago (opening the floodgates for generative AI). Nothing has taken up so much mindshare in the security space since the internet became, well, the internet. Now we are here, grappling with the challenges and gearing up for whatever 2025 will bring.
And what is that exactly? We predict a few things:
If GenAI is powerful, GenAI plus the power of quantum computing has the potential to “catapult AI’s capabilities into a realm where it can solve complex problems faster, generate more sophisticated and nuanced outputs, and unlock mysteries across various fields." As has been true so far, this can be both good and bad.
In anticipation, NIST released its first sets of post-quantum encryption standards. System admins are encouraged to transition over “as soon as possible,” and NIST already has its second set of algorithms underway. Hence, we anticipate crypto agility will be a major business imperative of 2025, with crypto centers of excellence cropping up among major enterprises. Large organizations will need to stay (or become) crypto-agile to keep pace with quantum-resistant cryptography.
Third Parties and B2B IdentitiesThird-party identities will face increased scrutiny as supply chain attacks continue to gain prominence in the public security consciousness. Enterprises are expanding their third-party reach in the inevitable growth towards increased digital connectedness, and that trend is only likely to continue. External identities will soon outnumber internal identities 3:1.
This will drive an increased need for organizations to understand business-to-business (B2B) identities, which has not been an area of much focus historically. We predict this will change in 2025, with B2B identity security taking up an increased share of organizations’ strategic security planning.
Data Security and Privacy LegislationCurrently, the US lags behind other international entities, like the EU, in comprehensive data privacy legislation. Typically allocated to states’ decision-making processes, we predict that the data privacy discussion in the US will evolve along more federal lines in the coming year.
The American Privacy Rights Act (ARPA), introduced in 2024, is still awaiting approval. The needle will likely continue to move in this direction as advances in AI (and geopolitical threats) bring increased risk to personally identifiable data (PII) and other federally held classified information pertaining to national security. As risks to critical infrastructure increase, we predict that comprehensive federal data privacy laws will become an ever-bigger topic of discussion in the US.
Internationally and domestically, new regulations such as NIS2, DORA, PCI DSS 4.0, the UK Cyber Resilience Act, and the EU AI Act will likely push companies to re-examine their practices and double down on governance, risk, and compliance.
ConclusionWe are in a time when changes come quickly, and organizations must stay light on their feet. Those hoping to weather 2025 well will need to stay attuned to current trends because they are coming regardless of whether teams are ready.
AI will play an ever-larger role in “business as usual” within the digital realm. Supply chains will continue to grow, so long-term plans for scaling them securely need to be in place. Companies must start planning now to adjust to future changes in computing and compliance.
As teams plan for what’s ahead, one underlying theme unifies what might seem like otherwise disparate directions. Protecting access to sensitive data still matters most, and organizations that can maintain strong data protection policies will keep the “big picture” in sight.
Data Security Cloud Computing Regulation and compliance Chris Harris | Associate VP, Sales Engineering
More About This Author >
Schema
{
"@context": "https://schema.org",
"@type": "BlogPosting",
"headline": "How AI is Shaping Cybersecurity Trends in 2025",
"description": "Discover the key cybersecurity trends for 2025, including AI advancements, quantum computing, and evolving data privacy legislation, and learn how to prepare your organization.",
"image": "https://cpl.thalesgroup.com/sites/default/files/content/white-paper/tn/2025-AI-Security-Predictions.webp",
"author": {
"@type": "Person",
"name": "Chris Harris",
"url": "https://cpl.thalesgroup.com/blog/author/charris"
},
"publisher": {
"@type": "Organization",
"name": "Thales Group",
"description": "The world relies on Thales to protect and secure access to your most sensitive data and software wherever it is created, shared, or stored. Whether building an encryption strategy, licensing software, providing trusted access to the cloud, or meeting compliance mandates, you can rely on Thales to secure your digital transformation.",
"url": "https://cpl.thalesgroup.com",
"logo": "https://cpl.thalesgroup.com/sites/default/files/content/footer/thaleslogo-white.png",
"sameAs": [
"https://www.facebook.com/ThalesCloudSec",
"https://www.twitter.com/ThalesCloudSec",
"https://www.linkedin.com/company/thalescloudsec",
"https://www.youtube.com/ThalesCloudSec"
]
},
"datePublished": "2025-01-30",
"mainEntityOfPage": "https://cpl.thalesgroup.com/blog/data-security/how-ai-is-shaping-cybersecurity-trends-2025",
"dateModified": "2025-01-30"
}
The post AI – Top-of-Mind in 2025 appeared first on Security Boulevard.
OpenAI and Microsoft suspect theft, highlighting the need for better AI security
The post One Explanation for DeepSeek’s Dramatic Savings: IP Theft appeared first on Security Boulevard.
Discover how Alibaba's Qwen 2.5-Max AI model with Mixture-of-Experts architecture outperforms DeepSeek V3 in key benchmarks, challenges OpenAI, and revolutionizes healthcare, finance, and content creation. Explore technical breakthroughs and industry implications.
The post Alibaba’s Qwen 2.5-Max: The AI Marathoner Outpacing DeepSeek and Catching OpenAI’s Shadow appeared first on Security Boulevard.
Author/Presenter: Gregory Carpenter, DrPH
Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.
The post DEF CON 32 – Tough Adversary Don’t Blame Sun Tzu appeared first on Security Boulevard.
Security teams can now validate WAF rules before they hit production, thanks to Impart Security's new WAF Rule Tester. No more crossing fingers and hoping for the best when deploying new rules.
The Old Way: Hope-Driven Security
Traditionally, testing WAF rules has been a nerve-wracking experience:
- Push rules to production in monitor mode
- Wait anxiously for days to spot issues
- Hope nothing breaks while you wait
- Struggle to simulate sophisticated attacks and edge cases
- Cross your fingers and promote to blocking mode
The Better Way: Test-Driven Security
WAF Rule Tester brings confidence and speed to WAF management through powerful test cases that let you:
- Validate rules against synthetic HTTP traffic in seconds, not days
- Simulate complex scenarios including business logic attacks
- Test rule interactions and chain effects
- Verify blocking, rate limiting, and detection behaviors
- Integrate WAF testing directly into your CI/CD pipeline
How It Works
1. Define your test case with synthetic HTTP requests/responses
2. Configure your expected behaviors and assertions
3. Run the test and get results in seconds
4. Deploy with confidence knowing exactly how your rules will behave
Ready to bring confidence to your WAF management?
- Follow us on LinkedIn for product updates
- Schedule a demo to see WAF Rule Tester in action
Don't let WAF testing be your security team's bottleneck. With WAF Rule Tester, you can move fast AND stay secure.
The post Introducing WAF Rule Tester: Test with Confidence, Deploy without Fear | Impart Security appeared first on Security Boulevard.
Instantly assess your website’s vulnerability to bot attacks with DataDome’s free Bot Vulnerability Assessment. Get real-time insights & secure your business today.
The post How to Instantly Assess Your Vulnerability to Bot Attacks appeared first on Security Boulevard.
Identity management has long been a pillar of any sound cybersecurity program, ensuring that only authorized persons and machines have access to specific data and systems. Today, the rapid adoption of artificial intelligence (AI) is making it much more complicated to manage the identities of machines, making the appearance of the OWASP Non-Human Identities Top 10 very timely.
The post The OWASP NHI Top 10 and AI risk: What you need to know appeared first on Security Boulevard.
With a high-stakes battle between OpenAI and its alleged Chinese rival, DeepSeek, API security was catapulted to priority number one in the AI community today. According to multiple reports, OpenAI and Microsoft have been investigating whether DeepSeek improperly used OpenAI’s API to train its own AI models. Bloomberg reported that Microsoft security researchers "detected that [...]
The post API Security Is At the Center of OpenAI vs. DeepSeek Allegations appeared first on Wallarm.
The post API Security Is At the Center of OpenAI vs. DeepSeek Allegations appeared first on Security Boulevard.
via the comic humor & dry wit of Randall Munroe, creator of XKCD
The post Randall Munroe’s XKCD ‘Muons’ appeared first on Security Boulevard.
Watch this: Want more “speculative execution” bugs? You’re gonna be in a great mood all day.
The post SLAP/FLOP: Apple Silicon’s ‘Son of Spectre’ Critical Flaws appeared first on Security Boulevard.
The Government Accountability Office states that customers are usually unaware of the potential privacy risks and biases that arise from use of personal information.
The post Our Digital Footprints are Breadcrumbs for Mapping our Personal Behavior appeared first on Security Boulevard.
The Codefinger ransomware represents a new frontier in cyber threats, specifically targeting AWS S3 buckets. By exploiting Server-Side Encryption with Customer-Provided Keys (SSE-C), attackers gain control over the encryption process, rendering recovery impossible without their AES-256 keys.
The post Codefinger Ransomware: Detection and Mitigation Using MixMode appeared first on Security Boulevard.
Old accounts are often unmaintained and forgotten - which can be problematic when you want to "clean up" some of your digital footprint by deleting them or go back to secure them with stronger passwords/MFA.
How do you find these old accounts when your recollection isn't enough? Fortunately, we all have some tricks up our sleeves for doing so. Some methods may be more effective for some users.
TABLE OF CONTENTS
Everything you do on the internet leaves a trace, which is commonly collectively referred to as your digital footprint. Creating accounts - whether you use them or not - is a part of this digital footprint.
I probably don't really need to explain it to you if you're reading this, as you likely understand that there's an account for just about everything on the internet. According to a survey conducted by NordPass in 2024, the average user has around 168 passwords to manage (which for the most part translate into accounts). Their survey also indicated this is an upward trend.
A proliferation of accounts and their subsequent management contributes to users' "attack surface" as well, as the more accounts increases the the possible points an unauthorized user can gain access to the information connected to/stored in the account. In this use case, this is typically by breaking into the account itself, a data leak, or a data breach.
The term "attack surface" is typically used for organizations to describe the avenues for attacks, but on the topic of accounts and users, its principles apply here as well. The short story is the less accounts you have, the less "attack surface" you have as a user; though this is primarily a cybersecurity topic, it actually extends to privacy as well.
Of course, you can minimize this attack surface by following and maintaining good cybersecurity hygiene, which includes having good password management and using MFA to secure your accounts. However, note that even following these practices can't mitigate data breaches where the service itself is compromised by a threat actor.
On the privacy front, the less accounts you create, then the less avenues for data breaches (which can leak your personal information) and the less trust you must have in third parties not to disclose personal information - including usage data, device and connection info connected to the account - to potential "adversaries."
Unmaintained "old" accounts can be problematic, especially if you've forgotten about them. They can use weak/leaked passwords and any data contained in the account can be weak to credential stuffing attacks from threat actors... or the account data leaked in a data breach of the service itself. If the account is no longer desired or needed, deletion is the best course of action.
Finding old accountsThere are many ways to find accounts to delete. You probably know of the accounts you currently use - but here are some tips to find old accounts so you can delete them, hopefully reducing your digital footprint and "attack surface."
Check your password managerUsing a password manager is a great way to improve password management - primarily by generating and securely storing strong passwords. Regardless of your password manager - whether it is cloud-based or note, open source (which is preferable) or not, a great place to look for accounts to delete could easily begin in your current password manager vault.
Check stored credentials in the browserMost modern browsers have a built-in "password manager" able to store website credentials. Users can search these saved logins, which may contain old/abandoned accounts, though doing so varies slightly depending on the browser. Review your browser's help pages to access/search saved logins.
Note: Using a browser "password manager" is not recommended. Dedicated password managers provide more features, usability, and security.
iOS and macOS users: Review accounts in the "Keychain"Apple devices (iOS and macOS) have a built-in credential manager, "Keychain." On iOS this is the new default "Passwords" app.
If you've had or currently have an Apple device, there's a high likelihood you've used Keychain - and it may have old accounts you no longer use stored. If you've ever transitioned from iOS/macOS or have transitioned to using another password manager, then this is a great place to look.
Android (and Google account users): Check the Google password managerWhen users are signed into their Google accounts - especially when using Google Android or Google Chrome - the Google password manager may automatically capture and store login information for websites and apps.
As such, it may contain old accounts - especially if users have multiple Google accounts, have used Google Android, or have signed into their Google account when using Google Chrome.
Search inboxes of old email accountsIf you still have access to your old(er) email accounts, searching these inboxes can provide clues to accounts you may have forgotten about - especially if you created them before using a password manager. Many of us don't delete emails; so upon creating an account, it's highly likely you could still have the welcome email for long forgotten accounts.
Some helpful search terms ideas include:
Similarly, even if the original welcome email is not in your inbox, you may also find old accounts from password reset messages, one-time passwords (OTP), or account information changes. With account information changes, many services will send "confirmation" of key account changes, such as address changes, payment changes, or email address changes.
Some helpful search strings could include:
Data breach databases often house information exposed in data breaches and data leaks, which can include email addresses and password hashes/plaintext equivalents. Most breach databases can be easily searched - typically, users will be required to input an email address, username, or phone number to check against the database records.
Common (and reputable) breach databases include:
Searching breach databases can be useful for uncovering old, long abandoned or “dead” accounts that may have been involved...
The post How to Find Old Accounts for Deletion appeared first on Security Boulevard.
