Resources · Blog · Page 11

Field notes & analysis

Written by the people doing the work — threat research, regulatory guidance, and what we learn on live engagements.

Blog28 Jan 2026

When to Hire, When to Automate: A Staffing Model for Modern Security Operations

Security operations teams are under pressure from both sides. On one hand, threats are increasing in volume and sophistication. On the other, hiring experienced security talent is expensive, slow, and increasingly competitive. CISOs are left with a recurring question that has no simple answer. When

Marsha Widagdo

AI in Cybersecurity27 Jan 2026

AI in Project Management: How AI Is Changing the Role of Project Managers

Artificial Intelligence is no longer a future concept in project management—it’s already reshaping how projects are planned, tracked, and delivered. But with headlines claiming that “AI will replace 80% of project managers’ work in the next five years”, many professionals are left wondering: Will AI

Riri

Blog27 Jan 2026

MFA Is Failing: How Attackers Bypass Authentication and What Comes Next

Multi-factor authentication has long been promoted as a cornerstone of modern cybersecurity. For years, organizations were told that adding an extra authentication factor would dramatically reduce the likelihood of account compromise. While MFA still raises the bar, attackers have adapted. Today, MF

Surya Maulana

AI in Cybersecurity22 Jan 2026

Third-Party Risk Assessments: How to Stop Vendors From Becoming Your Weakest Link

Modern enterprises don’t operate in isolation. Cloud providers, SaaS platforms, payment processors, development partners, logistics vendors—every business today runs on an extended ecosystem of third parties. Each one expands capability. Each one also expands risk. High-profile breaches over the las

Surya Maulana

Blog21 Jan 2026

Business Email Compromise: How Enterprises Stop BEC Without Blocking Work

Email is still the backbone of enterprise communication. It is how deals are approved, invoices are authorised, and sensitive instructions move across organisations every day. It is also the primary entry point for business email compromise, often referred to as BEC. BEC attacks do not rely on malwa

Marsha Widagdo

AI in Cybersecurity20 Jan 2026

AI in Project Management for Enterprises: What to Automate (and What Not To)

Artificial intelligence is already embedded in how enterprise projects are planned, tracked, and reported. From automated scheduling to predictive risk analysis, AI tools are changing day-to-day project management faster than most organizations expected. For Project Managers, the real question is no

Anthony Reza

Blog14 Jan 2026

How to Roll Out AI in the PMO Without Breaking Compliance

AI is Entering the PMO, Ready or Not Artificial intelligence is no longer a future concept for project management offices. It is already embedded in scheduling tools, portfolio forecasting, risk prediction, and automated reporting. For many PMOs, the pressure to adopt AI is coming from the top, driv

Muhammad Ziyad

Cloud & IT Security07 Jan 2026

Security Metrics That Matter: KPIs for CISOs in 2026

Why Security Metrics Are Under Pressure For years, CISOs have been asked the same question by boards and executive teams: are we secure? The uncomfortable truth is that many dashboards still struggle to answer it. In 2026, this challenge is becoming impossible to ignore. Attack surfaces are expandin

Surya Maulana

Cloud & IT Security06 Jan 2026

Top 5 Cloud Security Risks Most Enterprises Still Underestimate

Cloud adoption has fundamentally changed how enterprises build and scale systems. Infrastructure is elastic, deployments are automated, and identities now define access far more than network boundaries. Yet many security strategies still assume risks that resemble traditional data centers rather tha

Surya Maulana

Technical Guides05 Jan 2026

Guide for Installing Docker on Ubuntu

At Zentara, we understand that true security isn’t just about the policies you write, but the integrity of the infrastructure you run them on, so we’re working hard to eliminate every possible weak link in our software supply chain. To address this, we treated our infrastructure setup like cod

Adam

AI in Cybersecurity05 Jan 2026

AI vs Hackers: How Automated Attacks Are Evolving in 2026

Cyberattacks are no longer shaped primarily by individual skill or manual effort. They are increasingly defined by automation. By 2026, the defining characteristic of the threat landscape will not be that attackers use artificial intelligence, but that attacks themselves operate as automated systems

Trimikha Valentius

AI in Cybersecurity02 Jan 2026

How to Build a Security Operations Center That Actually Prevents Breaches

Breaches don’t occur because organisations lack security products. They happen because defenders fail to detect and respond before attackers move. A Security Operations Centre (SOC) should prevent that. But too many SOCs end up as log-collectors, alert generators, or compliance checkboxes, not as re

Surya Maulana