Security Boulevard

How Can Organizations Build Cybersecurity Confidence with Agentic AI? What if there was a way to seamlessly integrate cybersecurity protocols into the very fabric of your organization without compromising on efficiency? Agentic AI fuels this potential, redefining how Non-Human Identities (NHIs) and their secrets are managed securely across industries like financial services, healthcare, and DevOps. […]

The post Can Agentic AI meet future cybersecurity demands? appeared first on Entro.

The post Can Agentic AI meet future cybersecurity demands? appeared first on Security Boulevard.

The Importance of Secure Management of Non-Human Identities (NHIs) Are machine identities, or Non-Human Identities (NHIs), truly as secure as they should be within your organization? Many businesses across various industries grapple with understanding and properly managing these digital passports that permeate their systems, and this lack of clarity can lead to significant security risks. […]

The post Why feel reassured by advanced secrets management? appeared first on Entro.

The post Why feel reassured by advanced secrets management? appeared first on Security Boulevard.

What Makes Smart NHIs the Key to Advanced Threat Detection? How can organizations ensure their systems are shielded from invisible threats? One crucial element is the efficient management of Non-Human Identities (NHIs). While we delve into the complexities of NHIs, it’s vital to grasp their strategic role in threat detection and mitigation. The Anatomy of […]

The post How smart are the latest NHIs in threat detection? appeared first on Entro.

The post How smart are the latest NHIs in threat detection? appeared first on Security Boulevard.

Session 8C: Hard & Firmware Security

Authors, Creators & Presenters: Vasudev Gohil (Texas A&M University), Matthew DeLorenzo (Texas A&M University), Veera Vishwa Achuta Sai Venkat Nallam (Texas A&M University), Joey See (Texas A&M University), Jeyavijayan Rajendran (Texas A&M University)

PAPER
LLMPirate: LLMs for Black-box Hardware IP Piracy

The rapid advancement of large language models (LLMs) has enabled the ability to effectively analyze and generate code nearly instantaneously, resulting in their widespread adoption in software development. Following this advancement, researchers and companies have also begun integrating LLMs across the hardware design and verification process. However, these highly potent LLMs can also induce new attack scenarios upon security vulnerabilities across the hardware development process. One such attack vector that has not been explored so far is intellectual property (IP) piracy. Given that this attack can manifest as rewriting hardware designs to evade piracy detection, it is essential to thoroughly evaluate LLM capabilities in performing this task and assess the mitigation abilities of current IP piracy detection tools. Therefore, in this work, we propose LLMPirate, the first LLM-based technique able to generate pirated variations of circuit designs that successfully evade detection across multiple state-of-the-art piracy detection tools. We devise three solutions to overcome challenges related to integration of LLMs for hardware circuit designs, scalability to large circuits, and effectiveness, resulting in an end-to-end automated, efficient, and practical formulation. We perform an extensive experimental evaluation of LLMPirate using eight LLMs of varying sizes and capabilities and assess their performance in pirating various circuit designs against four state-of-the-art, widely-used piracy detection tools. Our experiments demonstrate that LLMPirate is able to consistently evade detection on 100% of tested circuits across every detection tool. Additionally, we showcase the ramifications of LLMPirate using case studies on IBEX and MOR1KX processors and a GPS module, that we successfully pirate. We envision that our work motivates and fosters the development of better IP piracy detection tools.

ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.

Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.

Permalink

The post NDSS 2025 – LLMPirate: LLMs For Black-box Hardware IP Piracy appeared first on Security Boulevard.

Security researchers with GreyNoise say they've detected a campaign in which the threat actors are targeting more than 70 popular AI LLM models in a likely reconnaissance mission that will feed into what they call a "larger exploitation pipeline."

The post Attackers Probing Popular LLMs Looking for Access to APIs: Report appeared first on Security Boulevard.

By 2026, cybersecurity programs will no longer be evaluated on how many frameworks they “support,” but on whether they can produce defensible decisions at the business's operating speed.

The post The Top Security, Risk, and AI Governance Frameworks for 2026 appeared first on Security Boulevard.

via the comic artistry and dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Jumping Frog Radius’ appeared first on Security Boulevard.

New research reveals how AI agents are transforming retail search. Survey of 6,000 shoppers shows agentic commerce reshaping product discovery. Read the report.

The post Why 38% of Consumers Now Use AI to Shop Online & What Retailers Need to Know appeared first on Security Boulevard.

Learn how to detect and prevent Account Takeover (ATO) attacks. Expert guide for CTOs on credential stuffing, MFA bypass, and enterprise single sign-on security.

The post Account Takeover (ATO) Attacks Explained: Detection, Prevention & Mitigation appeared first on Security Boulevard.

Explore the pros and cons of passwordless authentication for b2b tech. Learn how mfa and ciam shifts impact security and user experience.

The post The Benefits and Risks of Transitioning to Passwordless Solutions appeared first on Security Boulevard.

The post How to Manage SOC Case Management appeared first on AI Security Automation.

The post How to Manage SOC Case Management appeared first on Security Boulevard.

Here is the ugly truth about security incidents today. The bad guys don’t storm the castle breaking down the walls. Most attacks start with a login that was obtained. Once inside they see where they can go and what they can do. They enter the front door with working keys. And now, because the universe..

The post Zero-Trust Isn’t Optional Anymore—It’s Your AI Agent Fire Drill appeared first on Security Boulevard.

Session 8C: Hard & Firmware Security

Authors, Creators & Presenters: René Helmke (Fraunhofer FKIE), Elmar Padilla (Fraunhofer FKIE, Germany), Nils Aschenbruck (University of Osnabrück)

PAPER
Mens Sana In Corpore Sano: Sound Firmware Corpora for Vulnerability Research

Firmware corpora for vulnerability research should be scientifically sound. Yet, several practical challenges complicate the creation of sound corpora: Sample acquisition, e.g., is hard and one must overcome the barrier of proprietary or encrypted data. As image contents are unknown prior analysis, it is hard to select high-quality samples that can satisfy scientific demands. Ideally, we help each other out by sharing data. But here, sharing is problematic due to copyright laws. Instead, papers must carefully document each step of corpus creation: If a step is unclear, replicability is jeopardized. This has cascading effects on result verifiability, representativeness, and, thus, soundness. Despite all challenges, how can we maintain the soundness of firmware corpora? This paper thoroughly analyzes the problem space and investigates its impact on research: We distill practical binary analysis challenges that significantly influence corpus creation. We use these insights to derive guidelines that help researchers to nurture corpus replicability and representativeness. We apply them to 44 top tier papers and systematically analyze scientific corpus creation practices. Our comprehensive analysis confirms that there is currently no common ground in related work. It shows the added value of our guidelines, as they discover methodical issues in corpus creation and unveil minuscule step stones in documentation. These blur visions on representativeness, hinder replicability, and, thus, negatively impact the soundness of otherwise excellent work. Finally, we show the feasibility of our guidelines and build a new corpus for large-scale analyses on Linux firmware: LFwC. We share rich meta data for good (and proven) replicability. We verify unpacking, deduplicate, identify contents, provide ground truth, and demonstrate LFwC's utility for research.

ABOUT NDSS
The Network and Distributed System Security Symposium (NDSS) fosters information exchange among researchers and practitioners of network and distributed system security. The target audience includes those interested in practical aspects of network and distributed system security, with a focus on actual system design and implementation. A major goal is to encourage and enable the Internet community to apply, deploy, and advance the state of available security technologies.

Our thanks to the Network and Distributed System Security (NDSS) Symposium for publishing their Creators, Authors and Presenter’s superb NDSS Symposium 2025 Conference content on the Organizations' YouTube Channel.

Permalink

The post NDSS 2025 – Mens Sana In Corpore Sano: Sound Firmware Corpora For Vulnerability Research appeared first on Security Boulevard.

Discover Palo Alto Networks' SHIELD framework for securing applications developed with vibecoding techniques, outlining essential best practices to mitigate cybersecurity risks.

The post Palo Alto Networks Defines SHIELD Framework to Secure Vibecoding appeared first on Security Boulevard.

NASA acknowledges independent researcher Hasan İsmail Gülkaya for discovering vulnerabilities through its Vulnerability Disclosure Program, highlighting the importance of ethical hacking in cybersecurity.

The post Turkish Security Researcher Gets Nod From NASA Over Vulnerability Discoveries  appeared first on Security Boulevard.

Explore the troubling trend of teenagers being recruited into hacking groups, the challenges in countering this rise, and the efforts to redirect their skills towards ethical hacking.

The post We’re Hiring: Hacking Groups Recruit Teens While Feds Want to Ground Them  appeared first on Security Boulevard.

Gavin Webb from the National Crime Agency receives the OBE award from King Charles for his strategic role in Operation Cronos, disrupting the LockBit ransomware group.

The post Operation Cronos Leader Gets Nod From King Charles  appeared first on Security Boulevard.

How Agentic AI Can Reduce the Compliance Burden Have you ever wondered how much time and resources your organization spends on meeting compliance obligations? Regulatory is complex and changing, creating a significant burden for organizations striving to maintain compliance, especially in sectors like financial services and healthcare. Agentic AI is emerging as a promising solution […]

The post Can Agentic AI reduce the burden of compliance? appeared first on Entro.

The post Can Agentic AI reduce the burden of compliance? appeared first on Security Boulevard.

How Can We Securely Manage Non-Human Identities (NHIs) in the Age of Agentic AI? Have you ever pondered how machine identities are secured? The answer revolves around the robust management of Non-Human Identities (NHIs) and secrets security. With rising threats, a comprehensive approach to safeguarding these identities is more pressing than ever. Understanding Non-Human Identities […]

The post What innovative approaches exist for Agentic AI security? appeared first on Entro.

The post What innovative approaches exist for Agentic AI security? appeared first on Security Boulevard.

What Is Driving the Need for a Scalable NHI Management Strategy? Is your organization grappling with the complexities of managing Non-Human Identities (NHIs)? With digital transformation continues to redefine operational, the management of machine identities becomes a pivotal concern across industries. NHIs, which are essentially machine identities, serve as the linchpin in ensuring robust cybersecurity […]

The post What makes an NHI management strategy scalable? appeared first on Entro.

The post What makes an NHI management strategy scalable? appeared first on Security Boulevard.