Learn when SaaS teams should adopt passwordless authentication to boost security, reduce friction, and accelerate secure product development.
The post Building Secure Authentication Faster: When SaaS Teams Should Go Passwordless appeared first on Security Boulevard.
Why D3 Morpheus’s alert-native autonomy delivers true L2+ investigation, self-healing integrations, and faster time-to-value without the engineering burden.
The post Don’t Settle for an AI SOAR: The Case for Autonomous SOC Operations appeared first on D3 Security.
The post Don’t Settle for an AI SOAR: The Case for Autonomous SOC Operations appeared first on Security Boulevard.
Learn how PIM login security protects product data with strong authentication, access controls, and secure identity management.
The post PIM Login Security appeared first on Security Boulevard.
Event Summary In February 2025, the North Korea-linked APT group Lazarus launched a highly sophisticated supply chain attack against the prominent cryptocurrency exchange Bybit, successfully stealing over 400,000 ETH and stETH—valued at approximately $1.5 billion. This incident marks the largest single security breach in the global cryptocurrency sector to date. The attack exposed critical vulnerabilities […]
The post Top Security Incidents of 2025: Lazarus Group’s Cryptocurrency Heist appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks..
The post Top Security Incidents of 2025: Lazarus Group’s Cryptocurrency Heist appeared first on Security Boulevard.
AI automation, RaaS, a significant bump in vulnerability disclosures, and a rise in new ransomware gangs are reshaping the threat landscape and forcing defenders to change strategies.
The post AI and RaaS Alter Threat Landscape, New Ransomware Groups Grow by 30% appeared first on Security Boulevard.
In this episode, we discuss two major tech stories impacting privacy and security. First, we analyze Ring’s new AI-powered ‘Search Party’ feature and its controversial Super Bowl ad that sparked privacy concerns. We then transition to a breaking story about a zero-click remote code execution flaw in the Claude Desktop, highlighting the potential risks of […]
The post Ring’s Search Party ‘Dystopia’ Debate & Claude Zero-Click RCE Vulnerability appeared first on Shared Security Podcast.
The post Ring’s Search Party ‘Dystopia’ Debate & Claude Zero-Click RCE Vulnerability appeared first on Security Boulevard.
Firewall penetration testing examines the firewall as a security control and identifies the weaknesses that allow unwanted traffic to reach internal systems. It helps to make the network secure by checking that inbound and outbound filtering rules block unwanted traffic correctly. It also protects the perimeter by keeping internal-to-external boundaries intact and preventing external probes […]
The post Firewall Penetration Testing: Definition, Process and Tools appeared first on Security Boulevard.
Learn how Zero-Knowledge Proofs (ZKP) provide verifiable tool execution for Model Context Protocol (MCP) in a post-quantum world. Secure your AI infrastructure today.
The post Zero-Knowledge Proofs for Verifiable MCP Tool Execution appeared first on Security Boulevard.
How Can Non-Human Identities Shape Data Security? Have you ever wondered how organizations manage to keep their sensitive data secure in rising cybersecurity threats? With digital expanding rapidly, handling sensitive data securely has never been more crucial. One key player is the management of Non-Human Identities (NHIs), especially in cloud environments. Cybersecurity experts have long […]
The post Can businesses truly trust Agentic AI with sensitive data handling? appeared first on Entro.
The post Can businesses truly trust Agentic AI with sensitive data handling? appeared first on Security Boulevard.
Are Machine Identities the Missing Link in Financial Services Security? What role do machine identities, often referred to as Non-Human Identities (NHIs), play in ensuring the robustness of protected data exchanges? Where digital transformation is both a boon and a challenge, machine identities have become pivotal for a seamless yet secure operation across various sectors, […]
The post How are NHIs ensuring protected data exchanges in financial services? appeared first on Entro.
The post How are NHIs ensuring protected data exchanges in financial services? appeared first on Security Boulevard.
How Are Non-Human Identities Transforming Cybersecurity in Healthcare? What happens when machine identities outstrip human ones in a healthcare setting? The proliferation of Non-Human Identities (NHIs) in cybersecurity is reshaping how we think about securing medical records. While these machine identities—secure passports if you will—navigate our digital environments, they reveal both vulnerabilities and opportunities. Understanding […]
The post What makes an Agentic AI system safe for medical records management? appeared first on Entro.
The post What makes an Agentic AI system safe for medical records management? appeared first on Security Boulevard.
The Role of NHIs in Compliance Frameworks: What Do Companies Think? Are organizations truly satisfied with integrating Non-Human Identities (NHIs) into their compliance frameworks? The conversation around machine identities and their management in cybersecurity is gaining momentum, especially given the rapid shift to cloud environments. Companies across sectors like finance, healthcare, and travel are keen […]
The post How satisfied are companies after integrating NHIs in compliance frameworks? appeared first on Entro.
The post How satisfied are companies after integrating NHIs in compliance frameworks? appeared first on Security Boulevard.
Session 12C: Membership Inference
Authors, Creators & Presenters:
PAPER
Yuefeng Peng (University of Massachusetts Amherst), Ali Naseh (University of Massachusetts Amherst), Amir Houmansadr (University of Massachusetts Amherst)
Deep learning models, while achieving remarkable performances across various tasks, are vulnerable to membership inference attacks (MIAs), wherein adversaries identify if a specific data point was part of the model's training set. This susceptibility raises substantial privacy concerns, especially when models are trained on sensitive datasets. Although various defenses have been proposed, there is still substantial room for improvement in the privacy-utility trade-off. In this work, we introduce a novel defense framework against MIAs by leveraging generative models. The key intuition of our defense is to *remove the differences between member and non-member inputs*, which is exploited by MIAs, by re-generating input samples before feeding them to the target model. Therefore, our defense, called Diffence, works *pre inference*, which is unlike prior defenses that are either training-time (modify the model) or post-inference time (modify the model's output). A unique feature of Diffence is that it works on input samples only, without modifying the training or inference phase of the target model. Therefore, it can be cascaded with other defense mechanisms as we demonstrate through experiments. Diffence is specifically designed to preserve the model's prediction labels for each sample, thereby not affecting accuracy. Furthermore, we have empirically demonstrated that it does not reduce the usefulness of the confidence vectors. Through extensive experimentation, we show that Diffence can serve as a robust plug-n-play defense mechanism, enhancing membership privacy without compromising model utility--both in terms of accuracy and the usefulness of confidence vectors--across standard and defended settings. For instance, Diffence reduces MIA attack accuracy against an undefended model by 15.8% and attack AUC by 14.0% on average across three datasets, all without impacting model utility. By integrating Diffence with prior defenses, we can achieve new state-of-the-art performances in the privacy-utility trade-off. For example, when combined with the state-of-the-art SELENA defense it reduces attack accuracy by 9.3%, and attack AUC by 10.0%. Diffence achieves this by imposing a negligible computation overhead, adding only 57ms to the inference time per sample processed on average.
ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.
Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.
The post NDSS 2025 – Diffence: Fencing Membership Privacy With Diffusion Models appeared first on Security Boulevard.
How Can We Streamline NHI Lifecycle Management for Better Cloud Security? What if you could seamlessly integrate non-human identity management into your cybersecurity strategy to bolster cloud security across your organization? With digital transforms rapidly, the importance of proactive NHI lifecycle management becomes ever more crucial. Let’s explore how organizations can optimize NHI lifecycle management […]
The post What proactive measures can be taken for NHI lifecycle management? appeared first on Entro.
The post What proactive measures can be taken for NHI lifecycle management? appeared first on Security Boulevard.
Can Non-Human Identities Reinvent Cybersecurity with Agentic AI? What if the key to fortifying cybersecurity lies not in more layers of defense, but in effectively managing the machine identities that already exist within your organization’s infrastructure? Enter Non-Human Identities (NHIs)—the machine identities that are increasingly important. Understanding Non-Human Identities NHIs function much like machine passports. […]
The post Are there guaranteed cybersecurity benefits with Agentic AI implementation? appeared first on Entro.
The post Are there guaranteed cybersecurity benefits with Agentic AI implementation? appeared first on Security Boulevard.
How Does Non-Human Identity Management Enhance Identity Security Assurance? How can organizations bolster their identity security assurance amidst the growing complexity of cloud environments and the proliferation of machine identities? The answer lies in adopting Non-Human Identities (NHIs). This approach is increasingly crucial for diverse industries, providing a comprehensive solution to the security challenges posed […]
The post How assured is identity security with the adoption of NHIs? appeared first on Entro.
The post How assured is identity security with the adoption of NHIs? appeared first on Security Boulevard.
Why Should IT Managers Prioritize Non-Human Identities and Secrets Security Management? How well do you know the invisible workforce within your organization? No, it’s not the human workforce that charms at meetings or brainstorms ideas in conference rooms. Instead, it’s the machine identities—also known as Non-Human Identities (NHIs)—that silently perform myriad tasks, from managing applications […]
The post Why should IT managers feel relieved by advanced secrets management? appeared first on Entro.
The post Why should IT managers feel relieved by advanced secrets management? appeared first on Security Boulevard.
Identity risk scoring has become a critical input for fraud prevention, security operations, and trust decisions. Organizations increasingly rely on risk scores to decide when to step up authentication, block access, or flag activity for investigation. But despite widespread adoption, many identity risk programs struggle with the same problem: Risk scores are generated, but teams …
The post Identity Risk Scoring Only Works If Attribution Is Defensible appeared first on Security Boulevard.
Session 12C: Membership Inference
Authors, Creators & Presenters: Yan Pang (University of Virginia), Tianhao Wang (University of Virginia)
PAPER
Black-box Membership Inference Attacks against Fine-tuned Diffusion Models
With the rapid advancement of diffusion-based image-generative models, the quality of generated images has become increasingly photorealistic. Moreover, with the release of high-quality pre-trained image-generative models, a growing number of users are downloading these pre-trained models to fine-tune them with downstream datasets for various image-generation tasks. However, employing such powerful pre-trained models in downstream tasks presents significant privacy leakage risks. In this paper, we propose the first scores-based membership inference attack framework tailored for recent diffusion models, and in the more stringent black-box access setting. Considering four distinct attack scenarios and three types of attacks, this framework is capable of targeting any popular conditional generator model, achieving high precision, evidenced by an impressive AUC of 0.95.
ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.
Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.
The post NDSS 2025 – Black-Box Membership Inference Attacks Against Fine-Tuned Diffusion Models appeared first on Security Boulevard.
Part 3 of a 4-Part Series: The SEG Breakup Guide for MSPs
The post The Relationship Tax: What Staying With Your SEG Is Really Costing Your MSP appeared first on Security Boulevard.
