Resources · Field notes · Page 2

Cybersecurity blog.

Field notes & analysis.

Threat research, regulatory guidance and lessons from live engagements — written by the people doing the work.

Cloud & IT Security10 Sept 2026

What Is Maritime Cybersecurity? Protecting Philippine Ports and Logistics

Learn how maritime cybersecurity can help Philippine ports and logistics operators defend against ransomware, supply chain attacks, and disruption.

Surya Maulana

Vulnerability Assessment & Penetration Testing03 Sept 2026

What is VAPT (Vulnerability Assessment and Penetration Testing)?

VAPT combines vulnerability scanning with hands-on penetration testing to identify weaknesses, prove which are exploitable, and prioritise fixes based on real-world risk. It should be performed regularly and after major changes or incidents, with retesting to verify vulnerabilities are actually resolved.

Toni Widiarto

AI in Cybersecurity27 Aug 2026

Fine-Tuning An Open-Weight LLM For the SOC

We fine-tuned a 3B open-weight instruct model for SOC operations. The first run took 42 minutes, but the real constraint wasn't the GPU. It was the training corpus and the quality gates defined before building it.

Zentara Labs

Cloud & IT Security19 Aug 2026

What Is Tokenization? Securing Open Finance APIs in the Philippines

Learn how tokenization and API security can help Philippine fintechs protect customer data, prevent BOLA attacks, and secure Open Finance integrations.

Muhammad Ziyad

AI in Cybersecurity18 Aug 2026

What Is Vishing? AI Voice Cloning Threats to Philippine BPOs

Learn what vishing is, how AI voice cloning enables social engineering, and how Philippine BPOs can protect agents from account takeover attacks.

Surya Maulana

Security Operations Center (SOC)14 Aug 2026

Future-Proofing the SOC: Defend Against AI Threats with AI-Assisted Ops

Explore how AI-assisted SOC operations can reduce alert fatigue, prioritise threats, accelerate investigations, and improve response times while keeping human judgement and evidence at the centre.

Zentara Team

Cybersecurity Consulting14 Aug 2026

AFASA Compliance: How Philippine FIs Can Strengthen MFA

Learn how Philippine banks and e-wallets can strengthen AFASA compliance with phishing-resistant MFA, FIDO2 passkeys, and device-bound authentication.

Francesco Catozzo

Cybercrime Investigation & Data Protection13 Aug 2026

SATUSEHAT Security: Protecting Health Data Under UU PDP

Learn how hospitals, healthtech, and pharmaceutical firms can secure SATUSEHAT integrations, protect patient data, and meet UU PDP requirements.

Francesco Catozzo

Cloud & IT Security12 Aug 2026

Securing IKN Nusantara: A Guide to OT and IIoT Cybersecurity

Learn how enterprises and contractors can strengthen IKN Nusantara cybersecurity by securing OT, IIoT, smart buildings, and connected infrastructure.

Muhammad Ziyad

Cloud & IT Security11 Aug 2026

Ransomware in a Multi-Cloud World: Lessons From Indonesia's Data Center Reforms

Learn how Indonesian organisations can strengthen cloud security with immutable backups, disaster recovery, and cross-region failovers amid evolving data sovereignty rules.

Surya Maulana

Cybercrime Investigation & Data Protection10 Aug 2026

Deepfake Fraud in e-KYC: How It Works and How to Stop It

Deepfakes bypassed e-KYC at an Indonesian bank in over 1,100 fraud attempts. Learn how injection attacks work and the defences that stop them.

Trimikha Valentius

Blog31 Jul 2026

OJK Cyber Resilience Rules for Digital Banks in Indonesia 2026

Indonesia now has 17 licensed digital banks, more than any other country in Southeast Asia. Digital banking penetration has grown alongside them, from 31% of the population in 2022 to a projected 39%, roughly 75 million people, by 2026. Operating a digital bank Indonesia service places an institution.

Francesco Catozzo