Security Boulevard

𝗔𝗜 𝗡𝗮𝘁𝗶𝘃𝗲𝗗𝗲𝘃 is flexible by design. Drop in throughout the day, follow the discussions that matter most to you, and connect with practitioners working directly with AI-native development and security. Make this an easy stop during RSAC. 📍 March 23 📍 Room 306 🎟️ Free with RSAC badge 🔗 buff.ly/AAnFn1e #AINativeDev #RSAC #TechEvents

Traditional AppSec is failing the financial services speed test. Join us March 23 to learn how teams can reduce risk, maintain governance, and keep pace with AI-driven development. 👉Register at: buff.ly/heSRAkB

The FBI has seized two websites belonging to the pro-Iranian hacktivist group Handala, which claimed responsibility for a data-wiping attack on U.S. medical tech company Stryker that erased data from roughly 80,000 corporate and personal devices. Find out more here: zpr.io/dVfMUdGAFRgp #FBI #CyberAttack #Iran

FBI Director Kash Patel confirmed this week that the agency purchases commercially available data tracking Americans' movements, reopening a contentious debate over privacy and surveillance. Law enforcement must obtain a warrant to access location data directly from telecom providers, but third-party data brokers operate under a different framework, allowing agencies to buy similar information without judicial approval. Understand the debate over buying Americans' location data: zpr.io/4bqKFQvmfGf2 #FBI #Privacy #Surveillance

The RSAC Innovation Sandbox has generated $50B+ in investments and acquisitions. @ashimmy speaks with @CMarinier and @lkoetzle to break down a new report on its impact and what it means for the next wave of cybersecurity leaders. ▶️ Watch: buff.ly/CLMN9BG #RSAC #Cybersecurity #Innovation

Meta's AI Glasses promise to be "designed for privacy, controlled by you." But a class action lawsuit alleges that videos captured by the glasses are routed to contractors in Kenya, where human workers review footage, including people changing clothes and using the bathroom, to train AI systems. Read the full story of how the lawsuit claims Meta's privacy promises obscure a system working exactly as designed: zpr.io/7fG7c9nwr4Zb #Meta #AIglasses #Privacy

@securityblvd @NetworkingNerd @mitchellashley AI Regulation Before RSAC: Why Cybersecurity Needs Real Rules | Security Boulevard Episode 23 🌐 ▶️ youtu.be/GLdZDSQf5qM?si… @TheFuturumGroup @SecurityBlvd @NetworkingNerd @MitchAshley #RSAC2026 #TFDx #Cybersecurity #AI #AISecurity #AgenticAI #AgenticDevelopment

A single Kubernetes cluster can spawn hundreds of service accounts with sprawling privileges. Code assistants run with API tokens that open the doors to production. RPA bots operate with superuser rights by design. When any of these autonomous agents gets compromised, attackers inherit all that trust instantly. Read the full analysis of why overprivileged machines are becoming the next major insider threat: zpr.io/EREUy3rKUHuZ #InsiderThreat #AISecurity #CyberRisk

Is the era of “wild west” AI development ending—or just getting more controlled? On @SecurityBlvd, @NetworkingNerd, @MitchellAshley, and Fernando Montenegro explore how AI regulation has rapidly evolved into a critical cybersecurity priority. #Cybersecurity #SecurityBoulevard

Recent malware frameworks like VoidLink don't need novel techniques to be effective. They exploit what already exists in most enterprises: inconsistent configurations, over-permissioned identities, and limited runtime visibility. What makes VoidLink concerning isn't the individual components, but how they're chained together and adapted in real time based on the environment it encounters, behaving like a capable attacker operating at speed. Read the full analysis of why adaptability matters more than novelty: zpr.io/93hD7L8NprZB #Malware #CyberSecurity #CloudNative

Menlo Security today launched a platform to secure AI agents running in browsers, providing a dedicated cloud environment where agents can access applications without requiring IT teams to maintain VPNs. The platform converts legacy application UIs into machine-readable data that AI agents can invoke, while enforcing separation between instructions and data to prevent malicious commands from being mistaken for legitimate ones. Learn more about how Menlo Security is applying its Browser Security Platform to the challenge of securing autonomous agents: zpr.io/LaTTyKgyDQRB #MenloSecurity #AIAgents #BrowserSecurity

For years, cybersecurity awareness has been built on the assumption that people are the weakest link, a risk to be mitigated rather than a strength to be cultivated. That mindset has shaped policies, training, and the language of security, creating a culture of fear and disengagement. If organizations want security awareness to stick, they need to move from blame to belonging, from correcting users to collaborating with them. Read the full argument for designing systems that support human judgment instead of trying to override it: zpr.io/RYHRFT74ZM5E #CyberSecurity #Tech #DevOps

War-driven cyberattacks pile up and get more destructive. Akamai researchers see a 245% spike in attacks against businesses and government organizations in the first two weeks of the U.S. and Israeli war against Iran, and the cyberthreats will only increase as long as the kinetic war rages on. Read the full analysis 👉 buff.ly/qie5Gr7 #Cyberattacks #Akamai #US #Iran

Security doesn’t get easier as AI is introduced. It gets more interconnected. Caroline Wong, a security leader and practitioner, joins 𝗔𝗜 𝗡𝗮𝘁𝗶𝘃𝗲𝗗𝗲𝘃 to discuss what it takes to build secure foundations as AI becomes embedded across software creation, delivery, and governance. Add this to your RSAC plan. 📍 March 23 at RSAC 🎟️ Included with RSAC badge 🔗 buff.ly/AAnFn1e #AINativeDev #RSAC #SecureDevelopment #AIEngineering

The risk isn't AI getting an answer wrong. The risk is AI taking action, and that's where SOCs are heading. Agentic systems can now decide and execute across identity, endpoint, cloud and network controls, turning the SOC from a detection function into an execution engine. Read the full breakdown of what must be true before you let AI execute containment actions: zpr.io/VJKyMLhmSG7i #AgenticAI #SOC #CyberSecurity

SaaS stacks expand faster than governance ever could; tools get added to solve immediate problems, then stitched together through APIs, SSO, and permissions that rarely get revisited. Attackers understand this shift. Compromising a single SaaS account often unlocks data, workflows, and downstream integrations far beyond its original scope, with lateral movement happening through trusted APIs instead of malware. Learn where risk actually clusters inside your SaaS environment: zpr.io/tJyYY7ztBiHA #SaaS #CyberSecurity #AccessManagement

Traditional cybersecurity can’t keep pace with today’s threats. B2B leaders must embed AI at the core of their strategy for proactive threat detection, faster response, and smarter risk management. @securityblvd #Cybersecurity #AI hubs.li/Q0423Syk0

🤖 Shadow AI is creating a new enterprise security problem. 🎙️ Alan Shimel speaks with Snyk CIO Manoj Nair about how insecure AI-generated code, prompt injection and untested APIs can combine into cascading risk. Watch full interview here: techstrong.tv/videos/intervi…

@Transform_Sec @securityblvd Great read on the rising cyber threats targeting executives! Keeping our digital defense strategies sharp is crucial. 😊 StaySecure

CrowdStrike is adding AI agents developed with NVIDIA into its MDR services. Announced at NVIDIA GTC 2026, the company is also adding an open source runtime to securely deploy AI agents. Find out more here 👉 buff.ly/RTl0f0F #NVIDIA #CrowdStrike #AgenticAI #Cybersecurity #NVIDIAGTC