Alisa Viejo, United States, 20th January 2026, CyberNewsWire
The post One Identity Unveils Major Upgrade to Identity Manager, Strengthening Enterprise Identity Security appeared first on Security Boulevard.
Digitally signing Java applications improves authenticity, integrity, and trust. DigiCert KeyLocker allows you to sign .jar files securely using keys stored in DigiCert’s cloud-based Hardware Security Modules (HSMs) and the DigiCert KSP Library. This guide explains how to establish your environment and use JarSigner to sign Java applications from KeyLocker. What Is DigiCert KeyLocker? DigiCert… Read More How to Configure KeyLocker for JarSigner using the DigiCert KSP Library?
The post How to Configure KeyLocker for JarSigner using the DigiCert KSP Library? appeared first on SignMyCode - Resources.
The post How to Configure KeyLocker for JarSigner using the DigiCert KSP Library? appeared first on Security Boulevard.
Kimwolf botnet exploits smart gadgets for DDoS attacks, highlighting security lapses in device protection and supply chains.
The post What’s On the Tube Or Rather in the Tube: Kimwolf Targets Android-based TVs and Streaming Devices appeared first on Security Boulevard.
In late 2025 and early 2026, one of the world’s most advanced scientific organizations, the European Space Agency (ESA), faced a string of cyberattacks that exposed severe weaknesses in its cybersecurity posture. Hackers stole hundreds of gigabytes of data. Among the data stolen were proprietary software, credentials, and mission documents. As a final act, the […]
The post When Space Isn’t Safe: Inside the European Space Agency’s Massive Cyberattack appeared first on Kratikal Blogs.
The post When Space Isn’t Safe: Inside the European Space Agency’s Massive Cyberattack appeared first on Security Boulevard.
Thales named Growth Index leader in Frost Radar™: Data Security Platforms Report
madhav
Tue, 01/20/2026 - 04:29
Data has always been the backbone of enterprise operations, but the rise of cloud, big data, and GenAI has multiplied its value and, with it, the motivation for attackers. In parallel, regulatory expectations are increasing and evolving. The result is a fragmented security landscape where different tools protect different “data entry points” (databases, SaaS, endpoints, identities, access permissions, and more), often deployed at various times and with inconsistent context and policy enforcement.
Frost & Sullivan’s perspective is clear: data protection must be approached through a data lifecycle lens, where visibility, governance, security, and compliance are applied continuously as data changes type and state.
Data Security Lynne Murray | Director of Product Marketing for Data Security
More About This Author >
Data has always been the backbone of enterprise operations, but the rise of cloud, big data, and GenAI has multiplied its value and, with it, the motivation for attackers. In parallel, regulatory expectations are increasing and evolving. The result is a fragmented security landscape where different tools protect different “data entry points” (databases, SaaS, endpoints, identities, access permissions, and more), often deployed at various times and with inconsistent context and policy enforcement.
Frost & Sullivan’s perspective is clear: data protection must be approached through a data lifecycle lens, where visibility, governance, security, and compliance are applied continuously as data changes type and state.
That is the strategic imperative behind the modern Data Security Platform (DSP) category, and it is why Thales latest recognition matters.
In the Frost Radar™: Data Security Platforms benchmarking, Frost & Sullivan shortlisted 11 vendors and evaluated them across 10 Growth and Innovation criteria. The outcome?
Thales is recognized as the leader in the Growth Index and ranks second in the Innovation Index.
Per the report analysts: “Thales is the Growth Index leader on the Frost Radar™ thanks to its unmatched global footprint, diversified customer base, extensive channel ecosystem, and a growth rate that remains largely in line with the overall market’s.”
Frost & Sullivan further attributes this leadership to Thales’ extensive channel ecosystem and market-aligned growth rate.
The DSP imperative: one platform across the data lifecycleFrost & Sullivan argues that the “DSP” lens helps organizations move beyond acronym-driven point solutions and instead prioritize underlying capabilities tied together by a centralized policy and intelligence engine, enabling the controls to remain consistent across environments and data states.
From this lifecycle-centric view, the ideal DSP delivers core capabilities spanning:
Frost & Sullivan’s assessment highlights the primary Thales differentiator: bringing together two historically separate domains - deep encryption and key management, plus real-time visibility and analytics - into a cohesive DSP approach, so sensitive data remains protected even if perimeter- or identity-based defenses are bypassed.
1. A multilayered architecture anchored in Thales CipherTrust DSP and the Data Security Fabric
Frost & Sullivan describes Thales DSP architecture as anchored by Thales CipherTrust DSP for centralized management of discovery, classification, encryption, key management, and tokenization, and complemented by Data Security Fabric for real-time visibility and risk analytics. This approach delivers “full-spectrum” protection across on-premises, hybrid, and cloud environments.
2. Defense-in-depth at the data layer
A key Innovation differentiator Frost & Sullivan calls out is Thales operational model: even if visibility or governance layers fail, sensitive data remains protected through specialized encryption techniques—an explicit defense-in-depth stance anchored at the data layer.
The report also details Thales capabilities for securing data at rest through centralized encryption, masking, and tokenization supported by unified key management and techniques such as transparent encryption, application protection via SDK, and database column-level encryption.
3. Visibility, analytics, and response—built to reduce false positives
Frost & Sullivan notes that the Data Security Fabric improves detection by combining predetermined rules with rich context, including access patterns and risk profiles derived from application/database traffic, enabling more accurate anomaly detection and more precise blocking. It also supports responses via native actions and automated workflows, with broad integrations across SIEM, XDR, DLP, CNAPP, and ticketing systems, as well as a catalog of over 2,000 pre-built integrations.
4. GenAI and forward-looking roadmap investments
On AI, Frost & Sullivan highlights capabilities to inventory AI models, audit access patterns, and profile LLM behavior for anomalies, alongside additional protections for LLM use cases, including RAG paired with CipherTrust Transparent Encryption. The roadmap direction cited includes deeper DevSecOps integration, more GenAI use cases, and investments toward quantum-resistant encryption.
5. Scale advantages that translate to Growth Index performance
Frost & Sullivan links Thales Growth leadership to execution capacity: global delivery across sectors (including BFSI, manufacturing, retail/eCommerce), amplification from the Imperva acquisition, flexible and scalable pricing (including volume-based licensing), and a go-to-market model combining direct sales with a partner ecosystem of 6,700 technology, service provider, and OEM partners. The report also cites operational depth, including 11 SOCs globally and multilingual support teams.
What this recognition signals for security and business leadersThe DSP market is expanding quickly. Frost & Sullivan cites a 2025 revenue growth expectation of 29.0% and a 2025–2030 CAGR anticipated at 23.2%, driven by the need for enterprises to prioritize unified visibility, consistent controls, and compliance across increasingly complex data estates.
Thales’ placement - #1 in Growth Index and #2 in Innovation Index - is a strong validation of a pragmatic DSP vision: unify governance and intelligence with robust data-layer protection, and extend that model to modern realities like multi-cloud, unstructured data, and GenAI.
Download the full Frost Radar™: Data Security Platform, 2025 report today.
studio THALES BLOG Thales named Growth Index leader in Frost Radar™: Data Security Platforms ReportJanuary 20, 2026
The post Thales named Growth Index leader in Frost Radar™: Data Security Platforms Report appeared first on Security Boulevard.
Learn how Just-in-Time (JIT) provisioning automates user account creation in SSO. Expert guide for CTOs on SAML, SCIM vs JIT, and enterprise IAM security.
The post Just-in-Time (JIT) Provisioning: How Automated User Provisioning Works in SSO appeared first on Security Boulevard.
Comparing SAML and OIDC for enterprise SSO. Learn which protocol works best for web, mobile, and CIAM solutions in this deep dive for CTOs.
The post SAML vs OIDC: Choosing the Right Protocol for Modern Single Sign-On appeared first on Security Boulevard.
Secure your Model Context Protocol (MCP) deployments with granular policy enforcement and post-quantum cryptography. Prevent tool poisoning and puppet attacks.
The post Granular Policy Enforcement for Decentralized Model Context Resources appeared first on Security Boulevard.
Key Takeaways Healthcare breaches have cost an eye‑watering $7.42 million per incident in 2025, and it’s not surprising that regulators are dialing up new requirements like multi‑factor authentication, encryption for all ePHI, and yearly audits. Small practices may be able to get by with basic tools, but larger organizations need more robust systems. The best […]
The post Top 10 HIPAA Compliance Software Solutions appeared first on Centraleyes.
The post Top 10 HIPAA Compliance Software Solutions appeared first on Security Boulevard.
Are You Maximizing the Potential of AI in Cloud-Native Security? The intersection of artificial intelligence (AI) and cloud-native security is transforming how organizations safeguard their digital. With AI capabilities advancing rapidly, security is witnessing unprecedented changes that promise more robust protection mechanisms. But are businesses leveraging AI to its fullest potential in their cloud environments? […]
The post What capabilities does AI add to cloud-native security appeared first on Entro.
The post What capabilities does AI add to cloud-native security appeared first on Security Boulevard.
How Can Non-Human Identities Enhance Cloud Security? Can organizations truly secure their cloud environments without addressing the role of Non-Human Identities (NHIs)? With technology continues to advance, NHIs have become a crucial component, particularly in managing secrets and enhancing security postures across various sectors. Understanding Non-Human Identities in Cybersecurity At the core of NHIs are […]
The post Can AI independently manage secrets without human oversight appeared first on Entro.
The post Can AI independently manage secrets without human oversight appeared first on Security Boulevard.
How Can Organizations Effectively Manage Non-Human Identities? Are you aware of the potential threats posed by machine identities in your organization? With cybersecurity professionals navigate the complexities of managing Non-Human Identities (NHIs), understanding the nuances of these machine identities becomes crucial. In domains such as financial services, healthcare, and travel, safeguarding NHIs and their associated […]
The post How proactive can AI be in secrets rotation processes appeared first on Entro.
The post How proactive can AI be in secrets rotation processes appeared first on Security Boulevard.
Is Your Organization Truly Safe from Non-Human Identity Threats? Could a digital passport be the source of your organization’s next major security breach? Understanding the dynamics of Non-Human Identities (NHIs) is crucial for organizations aiming to secure their operations against cyber threats. With the integration of AI-driven strategies, NHI security is becoming a viable path […]
The post Is AI the key to impenetrable non-human identity security appeared first on Entro.
The post Is AI the key to impenetrable non-human identity security appeared first on Security Boulevard.
Session 9B: DNN Attack Surfaces
Authors, Creators & Presenters: Myungsuk Moon (Yonsei University), Minhee Kim (Yonsei University), Joonkyo Jung (Yonsei University), Dokyung Song (Yonsei University)
PAPER
ASGARD: Protecting On-Device Deep Neural Networks with Virtualization-Based Trusted Execution Environments
On-device deep learning, increasingly popular for enhancing user privacy, now poses a serious risk to the privacy of deep neural network (DNN) models. Researchers have proposed to leverage Arm TrustZone's trusted execution environment (TEE) to protect models from attacks originating in the rich execution environment (REE). Existing solutions, however, fall short: (i) those that fully contain DNN inference within a TEE either support inference on CPUs only, or require substantial modifications to closed-source proprietary software for incorporating accelerators; (ii) those that offload part of DNN inference to the REE either leave a portion of DNNs unprotected, or incur large run-time overheads due to frequent model (de)obfuscation and TEE-to-REE exits. We present ASGARD, the first virtualization-based TEE solution designed to protect on-device DNNs on legacy Armv8-A SoCs. Unlike prior work that uses TrustZone-based TEEs for model protection, ASGARD's TEEs remain compatible with existing proprietary software, maintain the trusted computing base (TCB) minimal, and incur near-zero run-time overhead. To this end, ASGARD (i) securely extends the boundaries of an existing TEE to incorporate an SoC-integrated accelerator via secure I/O passthrough, (ii) tightly controls the size of the TCB via our aggressive yet security-preserving platform- and application-level TCB debloating techniques, and (iii) mitigates the number of costly TEE-to-REE exits via our exit-coalescing DNN execution planning. We implemented ASGARD on RK3588S, an Armv8.2-A-based commodity Android platform equipped with a Rockchip NPU, without modifying Rockchip- nor Arm-proprietary software. Our evaluation demonstrates that ASGARD effectively protects on-device DNNs in legacy SoCs with a minimal TCB size and negligible inference latency overhead.
ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.
Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.
The post NDSS 2025 – ASGARD appeared first on Security Boulevard.
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
The post Randall Munroe’s XKCD ‘Funny Numbers’ appeared first on Security Boulevard.
Visualize web and API coverage, validate attack paths, and confirm every executed action with screenshots and logs in Escape
The post How to Visualize Web & API Coverage with Screenshots and Validate Attack Paths in Escape appeared first on Security Boulevard.
Nicholas Moore, a 24-year-old Tennessee man, pleaded guilty to using stolen credentials of authorized users to hack into computer systems of the Supreme Court, VA, and AmeriCorps, obtaining sensitive information and then posting it online to his Instagram account.
The post Hacker Pleads Guilty to Access Supreme Court, AmeriCorps, VA Systems appeared first on Security Boulevard.
Session 9B: DNN Attack Surfaces
Authors, Creators & Presenters: Yanzuo Chen (The Hong Kong University of Science and Technology), Yuanyuan Yuan (The Hong Kong University of Science and Technology), Zhibo Liu (The Hong Kong University of Science and Technology), Sihang Hu (Huawei Technologies), Tianxiang Li (Huawei Technologies), Shuai Wang (The Hong Kong University of Science and Technology)
PAPER
BitShield: Defending Against Bit-Flip Attacks on DNN Executables
Recent research has demonstrated the severity and prevalence of bit-flip attacks (BFAs; e.g., with Rowhammer techniques) on deep neural networks (DNNs). BFAs can manipulate DNN prediction and completely deplete DNN intelligence, and can be launched against both DNNs running on deep learning (DL) frameworks like PyTorch, as well as those compiled into standalone executables by DL compilers. While BFA defenses have been proposed for models on DL frameworks, we find them incapable of protecting DNN executables due to the new attack vectors on these executables. This paper proposes the first defense against BFA for DNN executables. We first present a motivating study to demonstrate the fragility and unique attack surfaces of DNN executables. Specifically, attackers can flip bits in the section to alter the computation logic of DNN executables and consequently manipulate DNN predictions; previous defenses guarding model weights can also be easily evaded when implemented in DNN executables. Subsequently, we propose BitShield, a full-fledged defense that detects BFAs targeting both data and sections in DNN executables. We novelly model BFA on DNN executables as a process to corrupt their semantics, and base BitShield on semantic integrity checks. Moreover, by deliberately fusing code checksum routines into a DNN's semantics, we make BitShield highly resilient against BFAs targeting itself. BitShield is integrated in a popular DL compiler (Amazon TVM) and is compatible with all existing compilation and optimization passes. Unlike prior defenses, BitShield is designed to protect more vulnerable full-precision DNNs and does not assume specific attack methods, exhibiting high generality. BitShield also proactively detects ongoing BFA attempts instead of passively hardening DNNs. Evaluations show that BitShield provides strong protection against BFAs (average mitigation rate 97.51%) with low performance overhead (2.47% on average) even when faced with fully white-box, powerful attackers.
ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.
Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.
The post NDSS 2025 – BitShield: Defending Against Bit-Flip Attacks On DNN Executables appeared first on Security Boulevard.
As businesses continue their digital transformation journeys, they are exposed to an ever-expanding attack surface. With the proliferation of cloud environments, remote work, and the increasing use of IoT devices, the complexity of cybersecurity threats has intensified. In this fast-evolving landscape, traditional security tools—based on signatures and static rule-based methods—are no longer sufficient. Organizations need
The post Real-time Threat Intelligence: Empowering Proactive Cybersecurity with Seceon appeared first on Seceon Inc.
The post Real-time Threat Intelligence: Empowering Proactive Cybersecurity with Seceon appeared first on Security Boulevard.
Every startup ecosystem has two founder types investors will not back. Both show up all the time. Both believe they will win. Neither will. They...Read More
The post Why Most Startup Founders Fail and How ISHIR Texas Venture Studio Helps the Right Ones Win appeared first on ISHIR | Custom AI Software Development Dallas Fort-Worth Texas.
The post Why Most Startup Founders Fail and How ISHIR Texas Venture Studio Helps the Right Ones Win appeared first on Security Boulevard.
