Resources · Blog · Page 7

Field notes & analysis

Written by the people doing the work — threat research, regulatory guidance, and what we learn on live engagements.

Blog15 Apr 2026

Implementing SBOMs: Securing the Software Supply Chain Against Third-Party Dependencies

Modern software is rarely built from scratch; most applications rely heavily on open-source libraries, third-party APIs, and external components. While this accelerates innovation, it also introduces hidden vulnerabilities. When a flaw appears in a widely used component, thousands of organisations c

Zentara Team

Blog15 Apr 2026

Enterprise Attack Surface Management: Finding Risks Before Attackers Do

Modern enterprises are more connected than ever. Cloud adoption, remote work, SaaS growth, and rapid development cycles have expanded the number of internet-facing assets far beyond what most organisations can easily track. Attackers understand this reality very well. Their first step is rarely comp

Zentara Team

Blog14 Apr 2026

Secure by Design: Why Your MVP Defines Security Posture

Speed drives product teams. The push to launch quickly, gain users, and accelerate adoption often leads to the mantra “move fast, fix later.” While this approach can deliver early wins, it carries hidden risks that can slow growth, erode trust, and create long-term costs. Zentara’s current webinar,

Zentara Team

Blog14 Apr 2026

M&A Cyber Due Diligence: Discovering Hidden Breaches Before You Close the Deal

Mergers and acquisitions offer significant business opportunities, but they also carry hidden cyber risks. A company may appear financially and operationally sound, yet undiscovered breaches or unresolved vulnerabilities can saddle the acquirer with regulatory penalties, operational disruptions, or

Toni Widiarto

Blog14 Apr 2026

Red Team Lessons from 500+ Engagements: The Patterns That Keep Appearing

Many organisations assume successful cyber attacks rely on advanced exploits and sophisticated malware. Red team engagements repeatedly prove the opposite. Across hundreds of real-world simulations, attackers succeed by chaining together small, overlooked weaknesses. The tools may evolve, but the pa

Toni Widiarto

Technical Guides14 Apr 2026

How to Implement Advanced HAProxy Sticky Sessions for Scalable Websocket Infrastructure

Why WebSocket Load Balancing Breaks Without Sticky Sessions At Zentara, real-time collaboration tools are the heartbeat of our platform. Therefore, a steady WebSocket connection is the foundation of the user experience. However, scaling stateful protocols like WebSockets behind a high-performance lo

Adam

Blog13 Apr 2026

Smart City Vulnerabilities: Securing Large-Scale IoT Deployments in Southeast Asia

Southeast Asia is rapidly embracing smart city initiatives. From connected traffic systems in Singapore to IoT-enabled public utilities in Jakarta and Bangkok, these projects promise efficiency, sustainability, and improved quality of life. But rapid deployment comes with risks. Every connected sens

Surya Maulana

Blog13 Apr 2026

SOC Automation Done Right: Where Automation Helps and Where It Breaks

Security Operations Centres (SOCs) are under constant pressure. Alert volumes continue to grow, environments become more complex, and threats move faster than ever. SOC automation is often positioned as the solution. But automation alone is not the answer. When implemented poorly, it can create new

Marsha Widagdo

Blog10 Apr 2026

The Shift to CNAPP: Consolidating Cloud Security for Multi-Cloud Environments

Enterprises are adopting multi-cloud environments to gain flexibility, scalability, and access to the best services from each provider. But this growth brings complexity. A 2023 Cloud Security Alliance survey found that 84 % of organisations use two or more cloud platforms, making it difficult to en

Darian Kuswanto

AI in Cybersecurity10 Apr 2026

The Rise of Autonomous Cyber Attacks: When AI Becomes the Adversary

Artificial intelligence is reshaping cybersecurity at an unprecedented pace. While organisations adopt AI to strengthen defence, attackers are using the same technology to automate, accelerate, and scale their operations. Cyber attacks are no longer limited by human speed or manual effort. We are en

Trimikha Valentius

AI in Cybersecurity09 Apr 2026

Securing Enterprise Copilots: Preventing Prompt Injection and Data Exfiltration in LLMs

Organisations are rapidly adopting AI copilots powered by large language models (LLMs) to enhance productivity, decision-making, and workflow automation. However, with this convenience comes a new category of risk. Recent research published in 2026 highlights that LLM prompt injection vulnerabilitie

Trimikha Valentius

Blog09 Apr 2026

From Detection to Containment: How Modern Incident Response Actually Works

When a security alert appears, many organisations assume the hardest part is over. A threat has been detected, the security team has been notified, and the process can begin. On paper, this sounds straightforward. In reality, detection is only the starting point; the time between identifying a threa

Surya Maulana