Security Boulevard

Trump’s new cyber directive would let vetted private security firms work with federal agencies to disrupt ransomware gangs and other overseas criminal networks, marking a major shift toward offensive public-private cyber operations. See how far the U.S. is willing to go on offense: 🔗 https://buff.ly/tF0adnF #Cybersecurity #Cyberwarfare #Ransomware #InfoSec

Google Workspace is now using Device Bound Session Credentials to bind authenticated sessions to hardware-backed device keys, stopping stolen authentication cookies from being reused on another machine. The feature, publicly available in Chrome for Windows, is moving through the W3C standards process and expanding to macOS and federated identity environments as Google makes cookie theft far less useful to attackers. Read the full article to see how DBSC works and its current limitations: https://lnkd.in/e9c7AmS3 #Google #DBSC #Cybersecurity #CookieTheft

The White House has created a program authorizing vetted American companies to conduct offensive cyber operations against foreign criminal groups, a 21st-century letter of marque in everything but name. Sir Walter Raleigh's royal commission made him a privateer to England and a pirate to Spain, and the same ambiguity now threatens to multiply as governments around the world claim the right to license private cyber force. Read the full analysis of the risks and legal questions behind America's cyber privateers: https://lnkd.in/eE-cEQzt #CyberSecurity #Privateers #CyberPolicy #TechPolicy

Recent cyberattacks on U.S. water systems are renewing calls for stronger security requirements across critical infrastructure. The proposed Water Cyber Shield Act would establish baseline cybersecurity standards while providing funding to help utilities strengthen their defenses. Read the full article: https://lnkd.in/e5wKfb9M #Cybersecurity #CriticalInfrastructure #WaterSecurity #CyberPolicy

A new Futurum Group survey of 929 enterprise decision-makers finds risk management has overtaken platform and tool modernization as the leading driver of cybersecurity budget growth, with 48% citing it as their top investment priority. See the full survey findings and what they mean for security budget strategy: https://lnkd.in/e54A4d-S #Cybersecurity #CISO #BudgetStrategy #RiskManagement

Autonomous AI agents recently executed a multi-day breach of Taiwanese government systems without real-time human control, exposing gaps in cyber insurance policies that still assume attackers are humans. Attribution delays and nation-state exclusions could leave coverage unresolved just as coordinated agent swarms become a routine threat. Read the full article to learn how autonomous attacks are stress-testing cyber insurance: https://lnkd.in/es-P8HkG #AI #CyberInsurance #AutonomousAI #CyberRisk

A rogue Wi-Fi network called "Delta WiFi Fast" surfaced on a flight full of DEF CON attendees, forcing crew to disable onboard Wi-Fi and echoing Chris Roberts' aircraft security debates from a decade ago. Eleven years later, the tools have shrunk from modified Ethernet cables to pocket-sized access points, and the next surprise at 30,000 feet might not come from a hacker but from an AI agent that outgrew its containment. Read the full article to see where cybersecurity and aviation are heading next: https://buff.ly/m57YIk3 #Cybersecurity #Aviation #AgenticAI #DEFCON #RogueWiFi

Nobody actually reads privacy policies or terms of service because the time required makes it impossible, and yet courts enforce these contracts as if they were meaningful agreements. AI agents could soon change that by reading, comparing, and negotiating digital agreements on our behalf, potentially shifting the balance of power back to users. Read the full article to see how AI could rewrite the rules of online contracting: https://lnkd.in/eix_s6kg #AI #LegalTech #DigitalRights #ConsumerProtection

AI is dramatically shrinking the time needed to turn software vulnerabilities into working exploits. Researchers used fewer than 20 prompts and 24 hours to exploit a critical Zoom flaw, raising the pressure on defenders to find and patch vulnerabilities faster. Read the full article: https://lnkd.in/eBBjViAB #Cybersecurity #Zoom #VulnerabilityManagement #Security