For any company involved in any facet of payment card processing, March 31, 2025, looms as the deadline for meeting the updated Payment Card Industry Data Security Standard (PCI DSS) version 4.0, first issued April 1, 2024.
The post ADR for PCI DSS 4.0 Compliance | Contrast Security appeared first on Security Boulevard.
The rise of the extended Internet of Things (XIoT) across industrial (IIoT), healthcare (IoMT), commercial (OT, BMS/EMS/ACS/iBAS/FMS), and other sectors […]
The post Rethinking Risk: ICS & OT Security with Purdue 2.0 and GRC appeared first on Security Boulevard.
Organizations that adopt these AI-driven strategies will not only improve the accuracy and efficiency of their threat detection but also gain a competitive edge by making smarter, faster decisions in every aspect of their operations.
The post Transforming Security Operations With Generative AI appeared first on Security Boulevard.
CISA, in collaboration with the FBI and NSA, identified and attributed multiple attacks to Russian entities, emphasizing the risks posed by state-backed Advanced Persistent Threats (APTs).
The post “My Vas Pokhoronim!” appeared first on Security Boulevard.
Really interesting research: “How WEIRD is Usable Privacy and Security Research?” by Ayako A. Hasegawa Daisuke Inoue, and Mitsuaki Akiyama:
Abstract: In human factor fields such as human-computer interaction (HCI) and psychology, researchers have been concerned that participants mostly come from WEIRD (Western, Educated, Industrialized, Rich, and Democratic) countries. This WEIRD skew may hinder understanding of diverse populations and their cultural differences. The usable privacy and security (UPS) field has inherited many research methodologies from research on human factor fields. We conducted a literature review to understand the extent to which participant samples in UPS papers were from WEIRD countries and the characteristics of the methodologies and research topics in each user study recruiting Western or non-Western participants. We found that the skew toward WEIRD countries in UPS is greater than that in HCI. Geographic and linguistic barriers in the study methods and recruitment methods may cause researchers to conduct user studies locally. In addition, many papers did not report participant demographics, which could hinder the replication of the reported studies, leading to low reproducibility. To improve geographic diversity, we provide the suggestions including facilitate replication studies, address geographic and linguistic issues of study/recruitment methods, and facilitate research on the topics for non-WEIRD populations...
The post Is Security Human Factors Research Skewed Towards Western Ideas and Habits? appeared first on Security Boulevard.
Attackers increasingly leverage AI-powered exploitation and can quickly identify vulnerable systems, infiltrate networks unnoticed and move laterally to compromise critical assets.
The post The Future of Enterprise Security: AI-powered Lateral Defense in a Dynamic Threat Landscape appeared first on Security Boulevard.
The Open Worldwide Application Security Project (OWASP) has just unveiled its Top 10 Non-Human Identities (NHI) Risks for 2025. While OWASP has long provided resources on application and API security, none have specifically addressed the unique challenges associated with NHIs. This new document bridges that gap, highlighting critical yet often overlooked risks that pose significant […]
The post Top 10 Non-Human Identities Risks by OWASP appeared first on Kratikal Blogs - Information Hub For Cyber Security Experts.
The post Top 10 Non-Human Identities Risks by OWASP appeared first on Security Boulevard.
Unlocking Data Control Across Regions: Oracle and Thales Enhance CipherTrust Cloud Key Management for OCI Vault EKMS
madhav
Tue, 03/18/2025 - 04:20
Oracle and Thales are excited to announce CipherTrust Cloud Key Management’s (CCKM) support for Oracle Cloud Infrastructure‘s (OCI) new cross-site replication functionality for its Dedicated Region Cloud@Customer and OCI Alloy offerings. Cross-site replication with OCI Vault EKMS and Thales CipherTrust Cloud Key Management facilitates secure, customer-controlled encryption and key management across multiple connected DRCC and Alloy sites.
So far, 2025 has been nothing short of unpredictable. Geopolitical uncertainty and the subsequent effects on confidence in the global economy have renewed customer emphasis on remaining in control of their operations and mitigating risks both known and unknown. Contributing to this uncertainty is the growing tension from the rapid advancements in AI and quantum computing - probably best illustrated by DeepSeek’s surprise progress announcement which turned conventional AI orthodoxy on its head. Customers need control of their data, but they must also continue to innovate with the latest cloud technologies to remain competitive in a quickly evolving global context. To say this is tricky is a massive understatement.
It is against this backdrop that Oracle and Thales collaborate to expand our customer-controlled “Hold Your Own Key” integration using OCI Vault EKMS.
What does this mean for customers?
In short, it means they can continue to own and centrally control their data in more extensive and more complex OCI DRCC and Alloy deployments. Phase one of the integration with with OCI Vault EKMS allowed customers to externally store and control master keys securing OCI based data in a Thales cloud-based service, or virtual or physical appliance. Now, in phase two, the same Alloy and DRCC EKMS master keys on CipherTrust Cloud Key Management will be accessible from the additional sites that customers use for back-up and disaster recovery. CCKM offers seamless OCI Vault EKMS failover preventing any interruption in service when using cross-region replication. This year, cross-site replication will also support Fusion SaaS apps to broaden the number of cases where customers can control their encryption keys in OCI.
Beyond the essential questions of control, our new joint release also simplifies encryption key administration by making the keys from multiple clouds and services manageable from the same console.
All of these benefits accrue to customers using CipherTrust Cloud Key Management for OCI DRCC, but they additionally accrue to the customers who choose to purchase OCI Alloy-based services. Alloy is designed for service providers and large public sector customers who intend to host and manage their own type of service offering, giving end-users greater controlWhether it’s a telecom company using Alloy to provide a dedicated business cloud or a government building a national sovereign cloud the same separation of duties principals apply. End customers want to remain in control of their data irrespective of where it resides. With Thales those customers get to manage and control their Alloy keys in the same place as they would the keys they use on-premises or in their other cloud infrastructure.
Game Changing Security
Despite my best efforts, this blog post doesn’t capture the magnitude of what Oracle and Thales are able to offer these customers today. Oracle’s innovative approach to cloud – and specifically to private cloud initiatives geared toward large enterprise customers – is changing the game. Tying together their innovations in this space to allow for centralized data-at-rest security management changes the scale at which customers will design and build their own digitally sovereign offerings. There is more in store. Oracle and Thales continue to collaborate to make the cloud more secure, agile, and innovative. Stay tuned for exciting things ahead.
To learn more about the Thales and Oracle partnership please visit
OCI Key Management for Digital Sovereignty & Compliance Requirements
Alex Hanway | Director of Business Development
More About This Author >
Schema
{
"@context": "https://schema.org",
"@type": "BlogPosting",
"mainEntityOfPage": {
"@type": "WebPage",
"@id": "https://cpl.thalesgroup.com/blog/encryption/oci-vault-ekms-thales-cckm-integration
"
},
"headline": "Enhancing OCI Vault EKMS with Thales CCKM Integration",
"description": "Discover how Thales CCKM enhances OCI Vault EKMS, enabling secure, customer-controlled encryption, cross-site replication, and centralized key management.",
"image": "",
"author": {
"@type": "Person",
"name": "Alex Hanway",
"url": "https://cpl.thalesgroup.com/blog/author/ahanway"
},
"publisher": {
"@type": "Organization",
"name": "Thales Group",
"description": "The world relies on Thales to protect and secure access to your most sensitive data and software wherever it is created, shared, or stored. Whether building an encryption strategy, licensing software, providing trusted access to the cloud, or meeting compliance mandates, you can rely on Thales to secure your digital transformation.",
"url": "https://cpl.thalesgroup.com",
"logo": "https://cpl.thalesgroup.com/sites/default/files/content/footer/thaleslogo-white.png",
"sameAs": [
"https://www.facebook.com/ThalesCloudSec",
"https://www.twitter.com/ThalesCloudSec",
"https://www.linkedin.com/company/thalescloudsec",
"https://www.youtube.com/ThalesCloudSec"
]
},
"datePublished": "2025-03-18",
"dateModified": "2025-03-18"
}
The post Unlocking Data Control Across Regions: Oracle and Thales Enhance CipherTrust Cloud Key Management for OCI Vault EKMS appeared first on Security Boulevard.
A recent vulnerability discovered in an UK National Health Service HS API has once again highlighted the risks associated with insecure mobile application programming interfaces (APIs). The flaw reportedly allowed unauthorized access to sensitive patient data, raising serious concerns about the security of healthcare applications.
The post UK NHS API Flaw Exposes Critical Mobile Security Risks appeared first on Security Boulevard.
The post SOAR vs SIEM: What’s the Difference? appeared first on AI Security Automation.
The post SOAR vs SIEM: What’s the Difference? appeared first on Security Boulevard.
Learn how our commitment to innovation, excellence, and client success made this achievement possible The security industry is undergoing a profound transformation. The convergence of digital and physical threats, the overwhelming surge of data, and the rise of misinformation have made staying ahead of risks more challenging than ever. For too long, security has been…
The post Ontic Named Frost and Sullivan’s Company of the Year for Revolutionizing Security Technology appeared first on Ontic.
The post Ontic Named Frost and Sullivan’s Company of the Year for Revolutionizing Security Technology appeared first on Security Boulevard.
Roopa Makam, Prekshya Basnet, and Nicole Miller have forged unique paths in cybersecurity, shaping the industry with their expertise and perspectives. They share their career journeys, challenges, and insights on fostering inclusivity—from mentorship to workplace flexibility.
The post Celebrating Women in Cybersecurity for Women’s History Month appeared first on Security Boulevard.
Frankfurt, Germany, Mar. 17, 2025, CyberNewswire — Cyberattacks are no longer an abstract threat – they dominate risk planning for companies worldwide.
The latest Link11 European Cyber Report shows an alarming trend: the number of DDoS attacks has more than … (more…)
The post News alert: Link11’s research shows DDoS attacks are more targeted — and doubled — year-over-year first appeared on The Last Watchdog.
The post News alert: Link11’s research shows DDoS attacks are more targeted — and doubled — year-over-year appeared first on Security Boulevard.
Morpheus’s AI-augmented SOC workspace streamlines Jinja transformations, automates Python scripts, and uncovers deep incident insights.
The post Inside the Morpheus AI-Assisted Workspace: Bridging the Gap Between Complex Data and Rapid Response appeared first on D3 Security.
The post Inside the Morpheus AI-Assisted Workspace: Bridging the Gap Between Complex Data and Rapid Response appeared first on Security Boulevard.
Join Paul Asadoorian for an eye-opening webinar exploring the meteoric growth of affordable hardware hacking devices, from the FlipperZero to ESP32-based platforms, and their implications for cybersecurity. This session is a must for security professionals, researchers, IT decision-makers, and anyone concerned about balancing innovation with security in the age of cheap, accessible hardware hacking tools. […]
The post Hardware Hacking: Tools, Tips & Tricks for Total Domination appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.
The post Hardware Hacking: Tools, Tips & Tricks for Total Domination appeared first on Security Boulevard.
Author/Presenter: Cory Turner
Our thanks to Bsides Exeter, and the Presenters/Authors for publishing their timely Bsides Exeter Conference content. All brought to you via the organizations YouTube channel.
The post BSides Exeter 2024 – Red Track – OfCORS! How To Do Cross Origin Resource Sharing (im)properly appeared first on Security Boulevard.
Cybersecurity can quickly spiral out of control. Dashboards pile up, alerts never stop buzzing, and vulnerabilities keep pouring in faster than teams can handle. That’s exactly why we built BX5, our latest AI engine, and enhanced our GenAI cybersecurity assistant, BIX—to bring clarity and speed back into your security operations. And today we are very …
The post Fast Answers, Less Noise: Meet BX5, Our New AI Engine, and the Heavily Updated BIX appeared first on Security Boulevard.
CIAM has evolved from a security tool into a business advantage. This comprehensive guide explores how CIAM solutions balance robust security with seamless user experiences, helping organizations build trust, enhance customer engagement, and navigate complex privacy regulations.
The post CIAM Basics: A Comprehensive Guide to Customer Identity and Access Management in 2025 appeared first on Security Boulevard.
via the comic humor & dry wit of Randall Munroe, creator of XKCD
The post Randall Munroe’s XKCD ‘Omniroll’ appeared first on Security Boulevard.
Generic secrets are hard to detect and are getting leaked more often. See how GitGuardian offers advanced protection where GitHub's push protection falls short.
The post Addressing The Growing Challenge of Generic Secrets: Beyond GitHub’s Push Protection appeared first on Security Boulevard.
