Resources · Field notes · Page 7

Cybersecurity blog.

Field notes & analysis.

Threat research, regulatory guidance and lessons from live engagements — written by the people doing the work.

Blog04 May 2026

PDP Law 2026: Indonesia Compliance Audit Checklist

Indonesia’s Personal Data Protection Law, UU No. 27 of 2022, known as the UU PDP, became fully enforceable on 16 October 2024. That deadline passed, yet organisations still running on legacy data practices are now exposed. Conducting a thorough Indonesia PDP law compliance audit is now a tacti

Zentara Team

Blog30 Apr 2026

Tabletop Exercises That Work: Stress-Testing Your C-Suite’s Incident Response Readiness

Cyber incidents are no longer purely technical events. Major breaches quickly become business crises involving legal, financial, operational, and reputational decisions. While many organisations invest in technical incident response, executive teams often have limited experience making high-pressure

Regal Rauniyar Star

Blog29 Apr 2026

Securing the Modern API Gateway: Preventing Broken Object Level Authorization (BOLA)

APIs are now the backbone of modern digital services, powering mobile apps, cloud platforms, and internal microservices. As organisations expose more data through these interfaces, attackers increasingly target weaknesses in logic. Establishing robust API authorisation security is essential to mitig

Darian Kuswanto

Blog27 Apr 2026

Automating Compliance: Continuous Control Monitoring for ISO 27001 and Regional PDPAs

Organisations face growing pressure to demonstrate continuous compliance with standards such as ISO 27001 and regional data protection regulations across ASEAN. Traditional audit-centric approaches are no longer sufficient in dynamic cloud and hybrid environments. A 2023 research study on automated

Zentara Team

Blog24 Apr 2026

Bridging the Gap Between IT and OT Security Teams in the Manufacturing Sector

Digital transformation is reshaping manufacturing. Smart factories, connected machinery, and Industrial IoT are improving efficiency and productivity. However, this convergence of Information Technology (IT) and Operational Technology (OT) has also created new cybersecurity challenges. Historically,

Surya Maulana

Zero Trust Network Access (ZTNA) transition

Blog23 Apr 2026

The Death of the VPN: Transitioning to ZTNA for Secure Remote Access

Remote work has become the norm across enterprises, but traditional VPNs are increasingly proving insufficient for securing access to corporate resources. VPNs often grant broad network access, creating potential security gaps and increasing the risk of attackers entering the environment. For many,

Surya Maulana

Uncategorized22 Apr 2026

State-Sponsored APTs in Asia: Tactics, Techniques, and Defence Strategies

As the landscape of cyber threat intelligence in Asia evolves, state-sponsored advanced persistent threats (APTs) pose a growing risk to regional enterprises. These attacks are typically highly targeted, well-resourced, and designed to remain undetected for extended periods. Unlike opportunistic cyb

Surya Maulana

Blog21 Apr 2026

Data Sovereignty in the Cloud: Navigating ASEAN Data Localisation Laws

As organisations increasingly adopt Kubernetes and containerised applications, DevSecOps teams face new security challenges. Containers accelerate development and deployment, but they also introduce potential blind spots. At the same time, data sovereignty and localisation laws across Southeast Asia

Zentara Team

Blog21 Apr 2026

How to Build a Security Roadmap That Survives Budget Cuts

Cybersecurity leaders are being asked to strengthen protection while spending more carefully. Economic pressure is reshaping IT investment, and security is no longer shielded from cost scrutiny. It is now evaluated alongside other business functions for efficiency and measurable value. This shift is

Zentara Team

topic modeling cyber threat intelligence

Technical Guides21 Apr 2026

How to Use Topic Modelling to Decode Thousands of Cyber Threat Signals

Underground forums, dark web marketplaces, and encrypted chat channels generate millions of posts daily, previous research shows only about 20% of that content is actually relevant to Cyber Threat Intelligence (CTI). Zentara Labs research a multi-engine topic modeling pipeline that applies LDA, BERT

Alisha Deana

Blog20 Apr 2026

Kubernetes and Container Security: Closing DevSecOps Blind Spots

As organisations increasingly adopt Kubernetes and containerised applications, DevSecOps teams face new security challenges. Containers accelerate development and deployment, but they also introduce potential blind spots. According to a 2026 report by Security Today, 90% of organisations running Kub

Darian Kuswanto

Blog20 Apr 2026

The True Cost of a Data Breach in Southeast Asia

Cybersecurity discussions often focus on prevention. Tools, controls and compliance frameworks usually dominate the conversation as organisations navigate an increasingly complex threat landscape. Yet when a breach occurs, the real challenge becomes far broader. Leadership must manage disruption, pr

Anthony Reza