Resources · Field notes · Page 10

Cybersecurity blog.

Field notes & analysis.

Threat research, regulatory guidance and lessons from live engagements — written by the people doing the work.

Blog06 Apr 2026

Zero Trust in Practice: What Enterprises Get Wrong When Implementing It

Zero Trust has become one of the most widely adopted security frameworks in recent years. The principle is simple: never trust, always verify. In an environment where users, devices, and applications operate beyond traditional perimeters, this approach makes sense. On paper, many organizations claim

Darian Kuswanto

Blog03 Apr 2026

Shadow IT in the Age of SaaS: The Security Risks Leaders Ignore

The modern workplace runs on SaaS. From collaboration tools to CRM platforms and analytics dashboards, employees can adopt new software in minutes without relying on IT. This flexibility drives productivity. It also creates a problem that many organisations underestimate. Shadow IT is no longer limi

Zentara Team

Blog02 Apr 2026

API Security Failures: The Quiet Breaches Enterprises Miss

APIs have become the backbone of modern applications. They connect services, enable integrations, and power everything from mobile apps to enterprise platforms. As organisations scale, maintaining a resilient API security posture is no longer optional; it is a fundamental requirement for business co

Toni Widiarto

Blog01 Apr 2026

Penetration Testing vs Red Teaming: What Each One Actually Proves

In many organisations, security validation is treated as a checklist exercise. A penetration test is completed, a report is delivered, and the assumption is that the environment is secure. On paper, everything looks covered. In reality, that assumption often creates a false sense of confidence. As t

Toni Widiarto

AI in Cybersecurity31 Mar 2026

The Hidden Security Risks in AI Adoption: Model Access and Data Leakage

AI adoption is accelerating across industries. From customer support automation to internal analytics and decision-making, organisations are embedding AI into critical workflows at speed. The promise is clear: faster insights, improved efficiency, and competitive advantage. What is less visible is t

Trimikha Valentius

AI in Cybersecurity30 Mar 2026

AI-Generated Phishing: Why Social Engineering Is Getting Harder to Detect

Phishing has always relied on deception, but historically, it was easy to spot. Poor grammar, unusual phrasing, and generic messaging often revealed malicious intent. Users were trained to recognise these signs, and for a time, it worked. That assumption no longer holds. With the rise of AI-generate

Toni Widiarto

Blog27 Mar 2026

Threat Intelligence That Actually Works: Turning Alerts into Decisions

Security teams are not short on alerts; they are short on clarity. A typical organisation generates thousands of alerts every day across endpoints, networks, identities, and cloud systems. On paper, this level of visibility should strengthen security, but in reality, it often creates confusion as an

Surya Maulana

Blog26 Mar 2026

The SOC Maturity Model: How Security Operations Evolve from Monitoring to Defense

In many organisations, the Security Operations Centre (SOC) begins as a visibility function. Logs are collected, alerts are generated, and dashboards provide a sense of control over an increasingly complex environment. On paper, this looks like progress. In reality, visibility alone does not stop at

Marsha Widagdo

Blog25 Mar 2026

Supply Chain Attacks in Southeast Asia: Why “Trusted Partners” Become Entry Points

In Southeast Asia’s digital economy, trust drives growth. Organisations depend on networks of vendors, cloud providers, and outsourcing partners to scale quickly and operate across borders. This interconnected model enables speed and flexibility, but it also expands the attack surface. The more conn

Surya Maulana

Implementing Advanced Sticky Sessions with HAProxy Zentara

Technical Guides06 Mar 2026

How to Implement Advanced HAProxy Sticky Sessions for Scalable Websocket Infrastructure

Why WebSocket Load Balancing Breaks Without Sticky Sessions At Zentara, real-time collaboration tools are the heartbeat of our platform. Therefore, a steady WebSocket connection is the foundation of the user experience. However, scaling stateful protocols like WebSockets behind a high-performance lo

Saddam Mukti

LLM Observability Langchain Langfuse Zentara

AI in Cybersecurity27 Feb 2026

A Recipe for Langchain LLM Observability Using Langfuse

When a standard app fails, you check the stack trace. But when an agent fails, you don’t know what to do. Is the model stuck in a recursive loop? Did it misunderstand the tool output? Is the “Critique Agent” currently hallucinating a list of reasons why the “Research Agent&#8

Saddam Mukti

26 Feb 2026

Indonesia PDPD, PDPA, GDPR: A Practical Compliance Map for Regional Enterprises

For regional enterprises operating across Southeast Asia and beyond, regional data protection compliance has become increasingly complex. Organisations are no longer dealing with a single regulation in a single jurisdiction. Instead, they must navigate Indonesia’s Personal Data Protection Law, vario

Zentara Team