Security Boulevard2h
One PUT Request to Own Tomcat: CVE-2025-24813 RCE is in the Wild
A devastating new remote code execution (RCE) vulnerability, CVE-2025-24813, is now actively exploited in the wild. Attackers need just one PUT API request to take over vulnerable Apache Tomcat ...
Security Boulevard13h
Silk Typhoon Targeting IT Supply Chains and Network Devices, Microsoft Reports
Microsoft Threat Intelligence has issued new reporting about tactics being used by Silk Typhoon (also called APT27 or HAFNIUM ...
Security Boulevard8h
Tova Dvorin
SafeBreach has added coverage against the Medusa ransomware variant, which has been used to target critical infrastructure ...
Security Boulevard14h
Moving Past Compensating Controls: The Long-Term Value of Tokenization for PCI DSS
With the deadline for PCI DSS 4.0 compliance just around the corner, it’s decision time for organizations. For many, ...
Security Boulevard23h
Breaking the Barriers to a Password-Free Life in Enterprise: Meet SafeNet eToken Fusion NFC PIV security key
Meet SafeNet eToken Fusion NFC PIV security key - 06:46 As large organizations increasingly shift towards passwordless ...
Security Boulevard14h
ICYMI: Interesting Things We Learned at the HIMSS 2025 Conference
We had a good time talking to folks last week in our ColorTokens booth at the Healthcare Information and Management Systems ...
Security Boulevard16h
Application Attacks Rise Significantly | February Attack Data | Contrast Security
The number of attacks on individual applications are up significantly month to month, according to research from Contrast ...
Security Boulevard8h
What security considerations should I keep in mind for NHI automation?
Why are Security Considerations Essential for Non-Human Identities Automation? The age of automation has dawned upon us. Automation carries the promise of immense business benefits, yet, it brings ...
Security Boulevard8h
What role do APIs play in automating NHI management?
Could API Automation Be The Missing Piece In Your NHI Management? One critical question stands out: Could the underutilized potential of API automation be the missing piece in your Non-Human ...
Security Boulevard12h
AD Lite Password Auditor Report: Key Insights and Data
Enzoic AD Lite Password Auditor Report In an era where cyber threats continue to evolve, password security remains one of the most critical yet often overlooked components of an organization’s ...
Security Boulevard15h
Hackers Use Trump’s Coin, Binance’s Name in Crypto Phishing Scam
Threat actors are running an email phishing scam to entice victims to install Binance software in hopes of collecting TRUMP coins. However, if they try, they instead get the ConnectWise RAT installed ...
Security Boulevard14h
Cyberattacks on Water Facilities Are Growing | Aria Cybersecurity
The water industry provides the drinking water and wastewater systems we all use every day. As such, it counts as a key piece of the nation’s critical infrastructure. But it is also in the crosshairs ...