Resources · Blog · Page 6

Field notes & analysis

Written by the people doing the work — threat research, regulatory guidance, and what we learn on live engagements.

Blog24 Apr 2026

Bridging the Gap Between IT and OT Security Teams in the Manufacturing Sector

Digital transformation is reshaping manufacturing. Smart factories, connected machinery, and Industrial IoT are improving efficiency and productivity. However, this convergence of Information Technology (IT) and Operational Technology (OT) has also created new cybersecurity challenges. Historically,

Surya Maulana

Zero Trust Network Access (ZTNA) transition

Blog23 Apr 2026

The Death of the VPN: Transitioning to ZTNA for Secure Remote Access

Remote work has become the norm across enterprises, but traditional VPNs are increasingly proving insufficient for securing access to corporate resources. VPNs often grant broad network access, creating potential security gaps and increasing the risk of attackers entering the environment. For many,

Surya Maulana

Uncategorized22 Apr 2026

State-Sponsored APTs in Asia: Tactics, Techniques, and Defence Strategies

As the landscape of cyber threat intelligence in Asia evolves, state-sponsored advanced persistent threats (APTs) pose a growing risk to regional enterprises. These attacks are typically highly targeted, well-resourced, and designed to remain undetected for extended periods. Unlike opportunistic cyb

Surya Maulana

Blog21 Apr 2026

Data Sovereignty in the Cloud: Navigating ASEAN Data Localisation Laws

As organisations increasingly adopt Kubernetes and containerised applications, DevSecOps teams face new security challenges. Containers accelerate development and deployment, but they also introduce potential blind spots. At the same time, data sovereignty and localisation laws across Southeast Asia

Zentara Team

Blog21 Apr 2026

How to Build a Security Roadmap That Survives Budget Cuts

Cybersecurity leaders are being asked to strengthen protection while spending more carefully. Economic pressure is reshaping IT investment, and security is no longer shielded from cost scrutiny. It is now evaluated alongside other business functions for efficiency and measurable value. This shift is

Zentara Team

topic modeling cyber threat intelligence

Technical Guides21 Apr 2026

How to Use Topic Modelling to Decode Thousands of Cyber Threat Signals

Underground forums, dark web marketplaces, and encrypted chat channels generate millions of posts daily, previous research shows only about 20% of that content is actually relevant to Cyber Threat Intelligence (CTI). Zentara Labs research a multi-engine topic modeling pipeline that applies LDA, BERT

Alisha Deana

Blog20 Apr 2026

Kubernetes and Container Security: Closing DevSecOps Blind Spots

As organisations increasingly adopt Kubernetes and containerised applications, DevSecOps teams face new security challenges. Containers accelerate development and deployment, but they also introduce potential blind spots. According to a 2026 report by Security Today, 90% of organisations running Kub

Darian Kuswanto

Blog20 Apr 2026

The True Cost of a Data Breach in Southeast Asia

Cybersecurity discussions often focus on prevention. Tools, controls and compliance frameworks usually dominate the conversation as organisations navigate an increasingly complex threat landscape. Yet when a breach occurs, the real challenge becomes far broader. Leadership must manage disruption, pr

Anthony Reza

Blog17 Apr 2026

Proactive Threat Hunting: Moving Beyond Automated Alerts to Find Hidden Adversaries

Security teams today are flooded with alerts. SIEM, EDR, NDR, and cloud security tools generate thousands of notifications every day. A 2023 report by Palo Alto Networks found that SOC teams receive an average of 11,000 security alerts daily, making it difficult to distinguish real threats from nois

Marsha Widagdo

Blog17 Apr 2026

DevSecOps for Enterprises: Integrating Security into the Development Pipeline

Modern enterprises ship software faster than ever. Cloud-native architectures, microservices, and continuous delivery pipelines have dramatically shortened release cycles. Features that once took months to deploy can now reach production in days or even hours. This speed creates opportunity, but it

Darian Kuswanto

Blog16 Apr 2026

Quantum-Ready Cryptography: Preparing Enterprise Infrastructure for the Post-Quantum Era

Quantum computing is moving from theoretical research to practical experimentation. While large-scale quantum computers are not yet widely available, their rapid progress is already creating security concerns for enterprises. Current encryption standards that protect financial transactions, intellec

Trimikha Valentius

Blog16 Apr 2026

Why Security Awareness Training Still Fails (And How to Fix It)

Nearly every organization runs annual phishing simulations, mandatory e-learning, and compliance-driven training modules. On paper, the box is checked. In reality, human-initiated breaches remain one of the most consistent and costly incident triggers. This gap exists because most security awareness

Marsha Widagdo