Resources · Field notes · Page 8

Cybersecurity blog.

Field notes & analysis.

Threat research, regulatory guidance and lessons from live engagements — written by the people doing the work.

Blog17 Apr 2026

Proactive Threat Hunting: Moving Beyond Automated Alerts to Find Hidden Adversaries

Security teams today are flooded with alerts. SIEM, EDR, NDR, and cloud security tools generate thousands of notifications every day. A 2023 report by Palo Alto Networks found that SOC teams receive an average of 11,000 security alerts daily, making it difficult to distinguish real threats from nois

Marsha Widagdo

Blog17 Apr 2026

DevSecOps for Enterprises: Integrating Security into the Development Pipeline

Modern enterprises ship software faster than ever. Cloud-native architectures, microservices, and continuous delivery pipelines have dramatically shortened release cycles. Features that once took months to deploy can now reach production in days or even hours. This speed creates opportunity, but it

Darian Kuswanto

Blog16 Apr 2026

Quantum-Ready Cryptography: Preparing Enterprise Infrastructure for the Post-Quantum Era

Quantum computing is moving from theoretical research to practical experimentation. While large-scale quantum computers are not yet widely available, their rapid progress is already creating security concerns for enterprises. Current encryption standards that protect financial transactions, intellec

Trimikha Valentius

Blog16 Apr 2026

Why Security Awareness Training Still Fails (And How to Fix It)

Nearly every organization runs annual phishing simulations, mandatory e-learning, and compliance-driven training modules. On paper, the box is checked. In reality, human-initiated breaches remain one of the most consistent and costly incident triggers. This gap exists because most security awareness

Marsha Widagdo

Blog15 Apr 2026

Implementing SBOMs: Securing the Software Supply Chain Against Third-Party Dependencies

Modern software is rarely built from scratch; most applications rely heavily on open-source libraries, third-party APIs, and external components. While this accelerates innovation, it also introduces hidden vulnerabilities. When a flaw appears in a widely used component, thousands of organisations c

Zentara Team

Blog15 Apr 2026

Enterprise Attack Surface Management: Finding Risks Before Attackers Do

Modern enterprises are more connected than ever. Cloud adoption, remote work, SaaS growth, and rapid development cycles have expanded the number of internet-facing assets far beyond what most organisations can easily track. Attackers understand this reality very well. Their first step is rarely comp

Zentara Team

Blog14 Apr 2026

Secure by Design: Why Your MVP Defines Security Posture

Speed drives product teams. The push to launch quickly, gain users, and accelerate adoption often leads to the mantra “move fast, fix later.” While this approach can deliver early wins, it carries hidden risks that can slow growth, erode trust, and create long-term costs. Zentara’s current webinar,

Zentara Team

Blog14 Apr 2026

M&A Cyber Due Diligence: Discovering Hidden Breaches Before You Close the Deal

Mergers and acquisitions offer significant business opportunities, but they also carry hidden cyber risks. A company may appear financially and operationally sound, yet undiscovered breaches or unresolved vulnerabilities can saddle the acquirer with regulatory penalties, operational disruptions, or

Toni Widiarto

Blog14 Apr 2026

Red Team Lessons from 500+ Engagements: The Patterns That Keep Appearing

Many organisations assume successful cyber attacks rely on advanced exploits and sophisticated malware. Red team engagements repeatedly prove the opposite. Across hundreds of real-world simulations, attackers succeed by chaining together small, overlooked weaknesses. The tools may evolve, but the pa

Toni Widiarto

Technical Guides14 Apr 2026

How to Implement Advanced HAProxy Sticky Sessions for Scalable Websocket Infrastructure

Why WebSocket Load Balancing Breaks Without Sticky Sessions At Zentara, real-time collaboration tools are the heartbeat of our platform. Therefore, a steady WebSocket connection is the foundation of the user experience. However, scaling stateful protocols like WebSockets behind a high-performance lo

Saddam Mukti

Blog13 Apr 2026

Smart City Vulnerabilities: Securing Large-Scale IoT Deployments in Southeast Asia

Southeast Asia is rapidly embracing smart city initiatives. From connected traffic systems in Singapore to IoT-enabled public utilities in Jakarta and Bangkok, these projects promise efficiency, sustainability, and improved quality of life. But rapid deployment comes with risks. Every connected sens

Surya Maulana

Blog13 Apr 2026

SOC Automation Done Right: Where Automation Helps and Where It Breaks

Security Operations Centres (SOCs) are under constant pressure. Alert volumes continue to grow, environments become more complex, and threats move faster than ever. SOC automation is often positioned as the solution. But automation alone is not the answer. When implemented poorly, it can create new

Marsha Widagdo

Articles

Proactive Threat Hunting: Moving Beyond Automated Alerts to Find Hidden Adversaries

DevSecOps for Enterprises: Integrating Security into the Development Pipeline

Quantum-Ready Cryptography: Preparing Enterprise Infrastructure for the Post-Quantum Era

Why Security Awareness Training Still Fails (And How to Fix It)

Implementing SBOMs: Securing the Software Supply Chain Against Third-Party Dependencies

Enterprise Attack Surface Management: Finding Risks Before Attackers Do

Secure by Design: Why Your MVP Defines Security Posture

M&A Cyber Due Diligence: Discovering Hidden Breaches Before You Close the Deal

Red Team Lessons from 500+ Engagements: The Patterns That Keep Appearing

How to Implement Advanced HAProxy Sticky Sessions for Scalable Websocket Infrastructure

Smart City Vulnerabilities: Securing Large-Scale IoT Deployments in Southeast Asia

SOC Automation Done Right: Where Automation Helps and Where It Breaks