Security Boulevard

Elastic Brings Agentic AI to the SIEM Platform

Elastic today previewed an agentic artificial intelligence (AI) capability that it has embedded into its security information ...
Security Boulevard

Suspected TraderTraitor Group Uses Trojanized Terraform Provider to Deliver Cross-Platform Malware

IntroductionIn July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat actor ...
Security Boulevard

AI Agent Security: How Enterprises Can Build a Trusted Security Layer for Autonomous AI Systems

AI agents are becoming part of engineering teams, but most organizations have no identity, governance or security model for ...
Security Boulevard

The ShinyHunters Attack That Failed

A caller reaches an employee and says they're from the security team. They know the employee's name. They ask them to sign in to a page that looks exactly like the company's single sign-on portal. The ...
Security Boulevard

Hijacked TensorLake npm Turned Install Into Credential Risk

TL;DR A malicious release of TensorLake's TypeScript SDK, tensorlake@0.5.144, used an install hook to search for developer credentials and accept remote commands. Sonatype's code review found that its ...
Security Boulevard

Q3 2026 Open Source Malware Index: When Compromise Compounds

Since Sonatype began tracking malicious open source packages in 2017, we have logged nearly 2 million malicious packages.
Security Boulevard

Flock You and the Horse You Rode In On – Federal Court Rules Flock Violates Fourth Amendment

Flock around. Find out.An Oklahoma federal judge has delivered a rather expensive reminder that just because technology can ...
Security Boulevard

Attackers Hijack 3 Country-code Registries, Obtain Google Certificates

Home » Attackers Hijack 3 Country-code Registries, Obtain Google Certificates Attackers Hijack 3 Country-code Registries, Obtain Google Certificates 5 Stars4 Stars3 Stars2 Stars1 Star (1 votes, ...
Security Boulevard

Insignary Launches Clarity AIR to Detect Undeclared Open-Source and AI-Written Code

Clarity AIR is available now directly from Insignary and through its partner channel, deployed on customer-owned infrastructure. Trial licenses are available on request at insignary.com. A free, ...
Security Boulevard

GRIT Q3 2026 Ransomware and Cyber Threat Insights Report: Top Takeaways

Top Takeaways October 8, 2026 Laura Babbili BLOG  5 min. Key findings from the GRIT Q3 2026 Ransomware and Cyber Threat ...
Security Boulevard

Podcast: ShinyHunters Leaked 5,000 Agents’ Home Addresses Over One FBI Advisory

ShinyHunters Leaked 5,000 Agents’ Home Addresses Over One FBI Advisory Tova Dvorin Welcome to the Cyber Resilience Brief, a ...
Opinion
Security BoulevardOpinion

Rethinking Vulnerability Management: “If It’s Not in the Scanner, It Didn’t Happen” Needs to Go

Recently, somebody from a fairly mature security team told me something I did not want to hear: if software vendors run “Mythos-class” models on their own code and fix what they find, they must ...