Security Boulevard

How Can Organizations Ensure AI-Driven Security Certainty? Are you confident in security your organization receives from AI-driven solutions? Ensuring the trustworthiness of AI-driven security mechanisms is vital. With machine identities, known as Non-Human Identities (NHIs), become more prevalent, the focus on safeguarding these entities becomes even more critical. Understanding the Role of NHIs in AI-Driven […]

The post How certain can you be of your AI-driven security appeared first on Entro.

The post How certain can you be of your AI-driven security appeared first on Security Boulevard.

Why Are Non-Human Identities Crucial in Combating Cyber Threats? Have you ever considered the importance of Non-Human Identities (NHIs)? Protecting these machine identities has become as critical as safeguarding human credentials, particularly with the rise of automation and cloud computing. NHIs serve as the backbone of authentication processes in various industries, including financial services, healthcare, […]

The post How safe are Non-Human Identities from cyber threats appeared first on Entro.

The post How safe are Non-Human Identities from cyber threats appeared first on Security Boulevard.

Earlier this year, we asked our team where they expect open source cyberattacks to go next. Sonatype Principal Security Researcher Garrett Calpouzos shared his thoughts about how he anticipated attackers won't simply use automation, but also abuse victims' AI tools:

The post SANDWORM_MODE: The Rise of Adaptive Supply Chain Worms appeared first on Security Boulevard.

Session 14B: Privacy & Cryptography 2

Authors, Creators & Presenters: Yunbo Yang (The State Key Laboratory of Blockchain and Data Security, Zhejiang University), Yuejia Cheng (Shanghai DeCareer Consulting Co., Ltd), Kailun Wang (Beijing Jiaotong University), Xiaoguo Li (College of Computer Science, Chongqing University), Jianfei Sun (School of Computing and Information Systems, Singapore Management University), Jiachen Shen (Shanghai Key Laboratory of Trustworthy Computing, East China Normal University), Xiaolei Dong (Shanghai Key Laboratory of Trustworthy Computing, East China Normal University), Zhenfu Cao (Shanghai Key Laboratory of Trustworthy Computing, East China Normal University), Guomin Yang (School of Computing and Information Systems, Singapore Management University), Robert H. Deng (School of Computing and Information Systems, Singapore Management University)

PAPER
Siniel: Distributed Privacy-Preserving zkSNARK

Zero-knowledge Succinct Non-interactive Argument of Knowledge (zkSNARK) is a powerful cryptographic primitive, in which a prover convinces a verifier that a given statement is true without leaking any additional information. However, existing zkSNARKs suffer from high computation overhead in the proof generation. This limits the applications of zkSNARKs, such as private payments, private smart contracts, and anonymous credentials. Private delegation has become a prominent way to accelerate proof generation. In this work, we propose Siniel, an efficient private delegation framework for zkSNARKs constructed from polynomial interactive oracle proof (PIOP) and polynomial commitment scheme (PCS). Our protocol allows a computationally limited prover (a.k.a. delegator) to delegate its expensive prover computation to several workers without leaking any information about the private witness. Most importantly, compared with the recent work EOS (USENIX'23), the state-of-the-art zkSNARK prover delegation framework, a prover in Siniel needs not to engage in the MPC protocol after sending its shares of private witness. This means that a Siniel prover can outsource the entire computation to the workers. We compare Siniel with EOS and show significant performance advantages of the former. The experimental results show that, under low bandwidth conditions (10 mbps), Siniel saves about 16% time for delegators than that of EOS, whereas under high bandwidth conditions (1000 mbps), Siniel saves about 80% than EOS.

ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.

Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.

Permalink

The post NDSS 2025 – Siniel: Distributed Privacy-Preserving zkSNARK appeared first on Security Boulevard.

Oasis Security researchers find another security problem with the OpenClaw autonomous AI agent, uncovering a vulnerability dubbed "ClawJacked" that allows malicious websites to silently take full control of a developer's system and steal data.

The post Latest OpenClaw Flaw Can Let Malicious Websites Hijack Local AI Agents appeared first on Security Boulevard.

Constella is pleased to announce that Andres Andreu, CEO has been named a finalist for the Resilient CISO Award as part of the 2026 SC Awards, presented by SC Media Awards and CyberRisk Alliance, and sponsored by Absolute Security. Now in its 29th year, the SC Awards recognize solutions, organizations, and leaders advancing the security …

The post Andres Andreu Named a Finalist for the 2026 SC Awards Resilient CISO Award appeared first on Security Boulevard.

via the comic artistry and dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Proof Without Content’ appeared first on Security Boulevard.

Active Directory remains the backbone of enterprise identity. Despite years of modernization efforts, many organizations still rely on legacy authentication protocols that were never designed for today’s threat landscape. New reporting from Dark Reading highlights how attackers continue to abuse NTLM and Kerberos within Microsoft Active Directory environments to escalate privileges, move laterally, and maintain

The post When Trusted Authentication Enables Privilege Escalation appeared first on Seceon Inc.

The post When Trusted Authentication Enables Privilege Escalation appeared first on Security Boulevard.

Open-source ecosystems power modern software development. Millions of developers rely on public repositories to accelerate innovation and reduce development time. That trust, however, is increasingly being weaponized. New reporting from The Hacker News reveals that North Korean threat actors have published 26 malicious packages to the npm registry in an attempt to compromise developer environments

The post North Korean Hackers Target Developers Through npm Packages appeared first on Seceon Inc.

The post North Korean Hackers Target Developers Through npm Packages appeared first on Security Boulevard.

When I travel abroad, I become a different person. I find myself doing things i would never do at home. Last week I landed in Billund. It’s small, Danish town, and home of Lego. The hotel was in Aarhus. Perfectly reasonable. Except getting there required taking a coach. A coach. At home, I would rather … Continue reading Travel-tinted glasses →

The post Travel-tinted glasses appeared first on Security Boulevard.

Two cybersecurity companies told me they're optimizing for Perplexity. Their buyer? Enterprise CISOs. The data shows ChatGPT leads at 67% enterprise adoption and 87.4% of AI referral traffic. Only 11% of domains get cited by both ChatGPT and Perplexity. Most B2B companies are optimizing wrong.

The post You’re Optimizing for the Wrong AI Engine. And It’s Costing You Enterprise Deals. appeared first on Security Boulevard.

Learn how to detect anomalous context injections in MCP deployments using post-quantum cryptography and ai-driven behavioral analysis to prevent puppet attacks.

The post Anomalous Context Injection Detection in Post-Quantum Environments appeared first on Security Boulevard.

How Prepared Are AI Systems Against Emerging Cyber Threats? Can Artificial Intelligence (AI) really keep up with evolving cyber threats? With technology evolves at an unprecedented pace, so do the tactics and techniques employed by cybercriminals. This poses a critical question for cybersecurity experts: Are adaptive AI systems truly equipped to counter these emerging dangers? […]

The post Are current AI systems adaptable to new cyber threats appeared first on Entro.

The post Are current AI systems adaptable to new cyber threats appeared first on Security Boulevard.

How Do Non-Human Identities Enhance AI Threat Detection? Is your organization leveraging Non-Human Identities (NHIs) to elevate its cybersecurity strategy? Managing NHIs becomes a pivotal factor in ensuring robust cloud security and improving AI threat detection capabilities. Understanding and managing machine identities can streamline security operations, reduce risks, and boost organizational efficiency across various sectors […]

The post How proactive is your AI in detecting cyber threats appeared first on Entro.

The post How proactive is your AI in detecting cyber threats appeared first on Security Boulevard.

How Can Organizations Ensure the Trustworthiness of Their AI’s Self-Management in Security? Have you ever wondered how much trust you can place in Artificial Intelligence to safeguard its own security? While we delve, the management of Non-Human Identities (NHIs) has become crucial. This focus aligns with the need for a secure cloud environment and effective […]

The post Can you trust your AI to manage its own security appeared first on Entro.

The post Can you trust your AI to manage its own security appeared first on Security Boulevard.

Why Are Non-Human Identities Crucial for Cybersecurity? Have you ever considered the significance of machine identities in your cybersecurity strategy? With cybersecurity becomes a more pressing concern, the focus has expanded beyond human credentials to encompass Non-Human Identities (NHIs). These machine identities, composed of secrets like encrypted passwords, tokens, or keys, and the permissions they […]

The post How are NHIs empowering businesses against cyber threats appeared first on Entro.

The post How are NHIs empowering businesses against cyber threats appeared first on Security Boulevard.

Nisos
Exposing a Fraudulent DPRK Candidate

With DPRK IT worker schemes on the rise, Nisos exposed a fraudulent DPRK candidate posing as a U.S. AI architect, revealing stolen PII...

The post Exposing a Fraudulent DPRK Candidate appeared first on Nisos by Nisos

The post Exposing a Fraudulent DPRK Candidate appeared first on Security Boulevard.

Session 14B: Privacy & Cryptography 2

Authors, Creators & Presenters: (All Via The Hong Kong University of Science and Technology) Dongwei Xiao, Zhibo Liu, Yiteng Peng, Shuai Wang

PAPER
MTZK: Testing and Exploring Bugs in Zero-Knowledge (ZK) Compilers

Zero-knowledge (ZK) proofs have been increasingly popular in privacy-preserving applications and blockchain systems. To facilitate handy and efficient ZK proof generation for normal users, the industry has designed domain-specific languages (DSLs) and ZK compilers. Given a program in ZK DSL, a ZK compiler compiles it into a circuit, which is then passed to the prover and verifier for ZK checking. However, the correctness of ZK compilers is not well studied, and recent works have shown that de facto ZK compilers are buggy, which can allow malicious users to generate invalid proofs that are accepted by the verifier, causing security breaches and financial losses in cryptocurrency. In this paper, we propose MTZK, a metamorphic testing framework to test ZK compilers and uncover incorrect compilations. Our approach leverages deliberately designed metamorphic relations (MRs) to mutate ZK compiler inputs. This way, ZK compilers can be automatically tested for compilation correctness using inputs and mutated variants. We propose a set of design considerations and optimizations to deliver an efficient and effective testing framework. In the evaluation of four industrial ZK compilers, we successfully uncovered 21 bugs, out of which the developers have promptly patched 15. We also show possible exploitations of the uncovered bugs to demonstrate their severe security implications.

ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.

Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.

The post NDSS 2025 – MTZK: Testing And Exploring Bugs In Zero-Knowledge (ZK) Compilers appeared first on Security Boulevard.

An unknown hacker used jailbreaking tactics against Anthropic's Claude and OpenAI's ChatGPT AI chatbots to exploit multiple weaknesses in Mexico's government networks and steal as much as 150GB of sensitive data, from 195 million taxpayer records to voting records and government employee credentials, according to Bloomberg.

The post Hacker Uses Claude, ChatGPT AI Chatbots to Breach Mexican Government Systems appeared first on Security Boulevard.

Master WS-Federation for enterprise SSO. Learn how Passive Requestor Profiles bridge legacy ASP.NET, SharePoint, and ADFS with modern identity architectures.

The post Web Single Sign-On: Understanding WS-Federation appeared first on Security Boulevard.