Resources · Blog · Page 8

Field notes & analysis

Written by the people doing the work — threat research, regulatory guidance, and what we learn on live engagements.

Blog08 Apr 2026

Beyond CVSS: How to Prioritise Vulnerability Patching with Contextual Threat Intelligence

Most organisations are overwhelmed by vulnerability data. Weekly scans generate thousands of findings, each with a CVSS score that appears to indicate urgency. Yet security teams still struggle to decide what to patch first, what can wait, and what truly poses business risk. The problem is not a lac

Zentara Team

Critical infrastructure cyber resilience

Blog08 Apr 2026

Securing Critical Infrastructure: A 2026 Guide to OT and SCADA Defense in ASEAN

Across Southeast Asia, digital transformation is reshaping how essential services operate. Energy providers, manufacturers, transport networks, and utilities are becoming more connected, more automated, and more data driven. This progress brings efficiency and innovation, but it also introduces a gr

Surya Maulana

Blog08 Apr 2026

Managing Insider Threats: Behavioral Analytics in a Zero Trust Architecture

Insider threats are among the most challenging risks for organisations. Unlike external attacks, insiders—such as employees, contractors, or partners—already have access to systems and data, making malicious or accidental actions harder to detect. A global breach analysis by Insider Threat Statistic

Surya Maulana

Blog08 Apr 2026

Cloud Misconfigurations: The Breach Vector Most Enterprises Still Miss

Cloud adoption has transformed how organisations build and scale technology. Infrastructure can now be deployed in minutes, environments can expand globally overnight, and teams can innovate without the constraints of physical hardware. But this speed introduces a dangerous trade-off. As environment

Surya Maulana

Blog07 Apr 2026

Cyber Insurance in 2026: Why Policies are Denied and How to Guarantee Coverage

Cyber insurance has become a core part of enterprise risk management. Yet many organisations assume that having a policy automatically guarantees financial protection after a breach. In reality, insurers are becoming far more selective about who they cover and when claims are paid. Across global mar

Zentara Team

Executive deepfake impersonation defence

AI in Cybersecurity07 Apr 2026

The Executive Deepfake Threat: Defending Against AI-Driven Voice and Video Impersonation

Artificial intelligence has transformed how organisations operate, communicate, and innovate. However, the same technology is now being weaponised by cybercriminals to impersonate senior leaders with alarming realism. Deepfake voice and video attacks are moving from experimental to operational, and

Trimikha Valentius

Technical Guides07 Apr 2026

A Recipe for Langchain LLM Observability using Langfuse

When a standard app fails, you check the stack trace. But when an agent fails, you don’t know what to do. Is the model stuck in a recursive loop? Did it misunderstand the tool output? Is the “Critique Agent” currently hallucinating a list of reasons why the “Research Agent&#8

Adam

Blog07 Apr 2026

Cyber Resilience vs Cybersecurity: Why Boards Are Changing the Conversation

For years, cybersecurity has been framed as a question of prevention. Can attacks be stopped? Can systems be protected? Can vulnerabilities be eliminated? That mindset is changing. Boards are no longer asking whether an organisation can prevent every attack. They are asking what happens when prevent

Regal Star Rauniyar

Blog06 Apr 2026

Zero Trust in Practice: What Enterprises Get Wrong When Implementing It

Zero Trust has become one of the most widely adopted security frameworks in recent years. The principle is simple: never trust, always verify. In an environment where users, devices, and applications operate beyond traditional perimeters, this approach makes sense. On paper, many organizations claim

Darian Kuswanto

Blog03 Apr 2026

Shadow IT in the Age of SaaS: The Security Risks Leaders Ignore

The modern workplace runs on SaaS. From collaboration tools to CRM platforms and analytics dashboards, employees can adopt new software in minutes without relying on IT. This flexibility drives productivity. It also creates a problem that many organisations underestimate. Shadow IT is no longer limi

Zentara Team

Blog02 Apr 2026

API Security Failures: The Quiet Breaches Enterprises Miss

APIs have become the backbone of modern applications. They connect services, enable integrations, and power everything from mobile apps to enterprise platforms. As organisations scale, maintaining a resilient API security posture is no longer optional; it is a fundamental requirement for business co

Toni Widiarto

Blog01 Apr 2026

Penetration Testing vs Red Teaming: What Each One Actually Proves

In many organisations, security validation is treated as a checklist exercise. A penetration test is completed, a report is delivered, and the assumption is that the environment is secure. On paper, everything looks covered. In reality, that assumption often creates a false sense of confidence. As t

Toni Widiarto