Resources · Blog · Page 3

Field notes & analysis

Written by the people doing the work — threat research, regulatory guidance, and what we learn on live engagements.

Blog03 Jul 2026

Third-Party Risk Management in the Philippines: A Guide for SMEs

Have you ever been asked by a premium enterprise client to complete a comprehensive security questionnaire or present verifiable proof of your defensive capabilities before signing a commercial contract? Many expanding businesses across the Philippines are encountering this operational hurdle. As en

Zentara Team

Blog02 Jul 2026

What Is Threat Hunting? Detecting Hidden Threats in the Philippines

As cyber threats become more sophisticated, organisations can no longer rely solely on automated security alerts and traditional monitoring tools. Some attackers are specifically designed to avoid detection, quietly maintaining access to systems for weeks or even months before taking action. This is

Zentara Team

Blog01 Jul 2026

How to Strengthen Ransomware Protection Against Modern Attacks

Ransomware continues to be one of the most damaging cyber threats facing organisations worldwide. What was once primarily a disruption issue has evolved into a broader business risk involving data theft, operational downtime, regulatory scrutiny, and reputational damage. As organisations strengthen

Zentara Team

MAS TRM and the Quantum Threat, Why Financial Institutions Must Act Now

Blog30 Jun 2026

E-Governance Philippines: Securing Interoperable Services

The Philippines is entering a definitive phase of digital transformation with the implementation of Republic Act No. 12254, widely known as the E-Governance Act. This landmark legislation aims to establish a more integrated, citizen-centric government by connecting public services, backend systems,

Zentara Team

Blog26 Jun 2026

What Is Cloud Security? Everything You Need to Know

Cloud adoption is now the default, and the security risks have grown with it. IBM’s Cost of a Data Breach Report 2025 found that breaches spanning public cloud, private cloud, and on-premises environments cost an average of $5.05 million, the highest of any setup, and take 276 days to detect.

Zentara Team

Cybersecurity Audit Checklist: Free Template and Best Practices

Blog25 Jun 2026

What Is the NIST Cybersecurity Framework?

A strong security programme needs more than tools. It needs a structure that decides what to protect, in what order, and how to prove it works. The NIST Cybersecurity Framework gives organisations that structure, and it has become the most widely adopted cybersecurity framework in the world. IDC est

Zentara Team

AI in Cybersecurity24 Jun 2026

LLM Refusal Behavior on Open-Weight Model

Written by: Trimikha Valentius (CAIO, Head of ZENTARA Labs), Alisha Deana (AI Researcher) Conversational language models refuse harmful requests because a thin behavioural layer is added on top of a pretrained base during post-training. This article treats refusal as exactly that: a layer, not a pro

Trimikha Valentius

Cloud Security Under Singapore's New Cross-Border Rules

Blog24 Jun 2026

Account Security in 2026: Why Attackers No Longer Need to Break In

The old picture of a hacker breaking through firewalls is completely out of date. Today’s attackers do not break in, they log in. They buy a real employee’s username and password from a dark web market, use an automated tool to defeat the one-time password (OTP), and walk into a company&

Zentara Team

Third-Party Risk Management Under Singapore's Cybersecurity Act

Blog23 Jun 2026

A Guide to Hybrid Cloud and the US-Indonesia Data Deal

In February 2026, Indonesia and the United States signed a landmark trade agreement that quietly shifted how Indonesian companies move data across borders. For any business running part of its systems in the cloud, maintaining robust cloud security matters more than it first appears. The agreement s

Zentara Team

Blog22 Jun 2026

Indonesia’s Data Protection Authority and the Move to Active UU PDP Enforcement

Indonesia’s data protection law, called UU PDP (Law No. 27 of 2022), has been active since October 2024. Companies can already be penalised for breaking it. What is changing now in 2026 is who enforces it: the government is setting up a dedicated agency to check whether businesses follow the r

Zentara Team

Data Protection Impact Assessment (DPIA)

Blog19 Jun 2026

OT Security: How Attackers Reach Critical Systems

In June 2024, a single ransomware attack froze 282 public services across Indonesia. Immigration counters stopped. Airport queues stretched for hundreds of metres. The attackers didn’t break into some heavily guarded control room. They got into ordinary government IT systems, and from there they rea

Zentara Team

Data Breach Response: A Guide for Businesses

Blog18 Jun 2026

The 72-Hour Rule in UU PDP: A Guide for Fintech & E-Commerce

A customer opens your app, taps a button, and asks you to delete everything you hold about them. From that moment, the clock starts. Under Indonesia’s data protection law, you have 72 hours to act. For a fintech platform or an online store handling thousands of these requests, doing it by hand

Francesco Catozzo