Resources · Field notes · Page 11

Cybersecurity blog.

Field notes & analysis.

Threat research, regulatory guidance and lessons from live engagements — written by the people doing the work.

Cybersecurity Consulting25 Feb 2026

Security Audits vs. Security Assessments: What You Need for Compliance and What You Need for Safety

The digital landscape is defined by a paradox: organisations are more “compliant” than ever, yet sophisticated breaches continue to make headlines. This disconnect often stems from a fundamental misunderstanding of two critical pillars of defence. When leadership asks, “Are we secu

Toni Widiarto

Incident Response & Digital Forensics24 Feb 2026

Digital Forensics Explained: What Evidence You Can Actually Recover After an Incident

In 2026, the aftermath of a cyberattack is no longer a “black box” of lost data. As organisations transition to hyper-automated and cloud-native environments, the trail of digital forensic evidence left behind has become more complex but also more detailed than ever before. Whether you a

Toni Widiarto

AI in Cybersecurity20 Feb 2026

A Technical Guide to Choosing SIEM: When Classic SIEM Is Enough, and When Agentic SOC Is Needed

SOC in Southeast Asia in Critical Condition SOC (Security Operations System) teams in Southeast Asia are currently in a critical state and experiencing extraordinary pressure. Based on a report recorded by Indonesia’s BSSN (National Cyber and Crypto Agency), there were 3.64 billion cyberattacks or a

Alisha Deana

AI in Cybersecurity20 Feb 2026

ISO 27001 Readiness Without the Pain: A Step-by-Step Implementation Plan

For many enterprises, ISO 27001 certification feels overwhelming before it even begins. There are controls to map, documents to draft, risks to assess, and audits to prepare for. Without structure, the process quickly becomes bloated, bureaucratic, and expensive. But ISO 27001 readiness does not hav

Zentara Team

AI Hallucination in Critical Systems Zentara

AI in Cybersecurity19 Feb 2026

AI Hallucinations in Critical Systems: Detection, Prevention, and Mitigation

Artificial intelligence is now embedded in critical systems, from cybersecurity operations and healthcare diagnostics to legal analysis and enterprise decision-making. As adoption accelerates, one structural risk has become impossible to ignore: AI hallucinations. Recent real-world incidents have sh

Trimikha Valentius

Blog18 Feb 2026

Data Loss Prevention Strategy: Where DLP Fails and How to Fix It

Most enterprises have invested in Data Loss Prevention. Policies are written, tools are deployed, and dashboards show activity. Yet sensitive data still leaks through email, cloud apps, personal devices, and trusted users. This gap matters more than ever. Data is now everywhere. It lives across SaaS

Saddam Mukti

AI in Cybersecurity17 Feb 2026

Mobile App Security Testing: The Vulnerabilities Attackers Exploit Most

Mobile applications now handle banking transactions, healthcare data, enterprise credentials, and personal identities. For attackers, that makes them high-value targets. Yet many organizations still treat mobile app security testing as a release checkbox rather than a continuous security function. F

Toni Widiarto

AI in Cybersecurity11 Feb 2026

Moltbook and the Reality Check Every AI Social Network Needs

The rapid rise of Moltbook has been framed as a glimpse into the future of the internet: an AI social network populated by autonomous agents that post, interact, debate, and evolve without constant human input. For technologists, it was fascinating. For security professionals, it was inevitable that

Trimikha Valentius

Blog11 Feb 2026

Malware Removal for Enterprises: What “Clean” Really Means After Infection

When a malware alert is resolved, many organisations breathe a sigh of relief. The file is deleted. The endpoint is reimaged. The ticket is closed. On paper, the system is clean. In reality, that assumption is one of the most dangerous moments in enterprise security. This is why malware removal for

Toni Widiarto

Blog04 Feb 2026

Ransomware Response Plan: The Decisions You Must Make in the First 60 Minutes

Ransomware is no longer a distant, hypothetical risk. It is a board-level crisis that can unfold in minutes and escalate globally in hours. For many organisations, the real damage does not come from the malware itself, but from hesitation and confusion in the first 60 minutes after detection. This m

Surya Maulana

Blog03 Feb 2026

XDR vs SIEM vs SOAR: What Each One Does and Where Teams Misuse Them

Security teams are not short on tools. They are short on clarity. SIEM, SOAR, and XDR are often discussed as interchangeable or as successive “upgrades” to one another. In reality, they solve different problems, operate at different layers, and fail for different reasons when misused. Understanding

Darian Kuswanto

Blog02 Feb 2026

Stop Using “async def” For Your ML Models Unless You Like Latency

A while ago, I was on my way to approve a pull request for a production ready ML internal microservice. The Machine Learning (ML) team had built a working, performant model and wrapped it in FastAPI. The unit tests were all green. During load testing, some of the tests timed out. So I thought maybe

Saddam Mukti