Resources · Field notes · Page 9

Cybersecurity blog.

Field notes & analysis.

Threat research, regulatory guidance and lessons from live engagements — written by the people doing the work.

Blog10 Apr 2026

The Shift to CNAPP: Consolidating Cloud Security for Multi-Cloud Environments

Enterprises are adopting multi-cloud environments to gain flexibility, scalability, and access to the best services from each provider. But this growth brings complexity. A 2023 Cloud Security Alliance survey found that 84 % of organisations use two or more cloud platforms, making it difficult to en

Darian Kuswanto

AI in Cybersecurity10 Apr 2026

The Rise of Autonomous Cyber Attacks: When AI Becomes the Adversary

Artificial intelligence is reshaping cybersecurity at an unprecedented pace. While organisations adopt AI to strengthen defence, attackers are using the same technology to automate, accelerate, and scale their operations. Cyber attacks are no longer limited by human speed or manual effort. We are en

Trimikha Valentius

AI in Cybersecurity09 Apr 2026

Securing Enterprise Copilots: Preventing Prompt Injection and Data Exfiltration in LLMs

Organisations are rapidly adopting AI copilots powered by large language models (LLMs) to enhance productivity, decision-making, and workflow automation. However, with this convenience comes a new category of risk. Recent research published in 2026 highlights that LLM prompt injection vulnerabilitie

Trimikha Valentius

Blog09 Apr 2026

From Detection to Containment: How Modern Incident Response Actually Works

When a security alert appears, many organisations assume the hardest part is over. A threat has been detected, the security team has been notified, and the process can begin. On paper, this sounds straightforward. In reality, detection is only the starting point; the time between identifying a threa

Surya Maulana

Blog08 Apr 2026

Beyond CVSS: How to Prioritise Vulnerability Patching with Contextual Threat Intelligence

Most organisations are overwhelmed by vulnerability data. Weekly scans generate thousands of findings, each with a CVSS score that appears to indicate urgency. Yet security teams still struggle to decide what to patch first, what can wait, and what truly poses business risk. The problem is not a lac

Zentara Team

Critical infrastructure cyber resilience

Blog08 Apr 2026

Securing Critical Infrastructure: A 2026 Guide to OT and SCADA Defense in ASEAN

Across Southeast Asia, digital transformation is reshaping how essential services operate. Energy providers, manufacturers, transport networks, and utilities are becoming more connected, more automated, and more data driven. This progress brings efficiency and innovation, but it also introduces a gr

Surya Maulana

Blog08 Apr 2026

Managing Insider Threats: Behavioral Analytics in a Zero Trust Architecture

Insider threats are among the most challenging risks for organisations. Unlike external attacks, insiders—such as employees, contractors, or partners—already have access to systems and data, making malicious or accidental actions harder to detect. A global breach analysis by Insider Threat Statistic

Surya Maulana

Blog08 Apr 2026

Cloud Misconfigurations: The Breach Vector Most Enterprises Still Miss

Cloud adoption has transformed how organisations build and scale technology. Infrastructure can now be deployed in minutes, environments can expand globally overnight, and teams can innovate without the constraints of physical hardware. But this speed introduces a dangerous trade-off. As environment

Surya Maulana

Blog07 Apr 2026

Cyber Insurance in 2026: Why Policies are Denied and How to Guarantee Coverage

Cyber insurance has become a core part of enterprise risk management. Yet many organisations assume that having a policy automatically guarantees financial protection after a breach. In reality, insurers are becoming far more selective about who they cover and when claims are paid. Across global mar

Zentara Team

Executive deepfake impersonation defence

AI in Cybersecurity07 Apr 2026

The Executive Deepfake Threat: Defending Against AI-Driven Voice and Video Impersonation

Artificial intelligence has transformed how organisations operate, communicate, and innovate. However, the same technology is now being weaponised by cybercriminals to impersonate senior leaders with alarming realism. Deepfake voice and video attacks are moving from experimental to operational, and

Trimikha Valentius

Technical Guides07 Apr 2026

A Recipe for Langchain LLM Observability using Langfuse

When a standard app fails, you check the stack trace. But when an agent fails, you don’t know what to do. Is the model stuck in a recursive loop? Did it misunderstand the tool output? Is the “Critique Agent” currently hallucinating a list of reasons why the “Research Agent&#8

Saddam Mukti

Blog07 Apr 2026

Cyber Resilience vs Cybersecurity: Why Boards Are Changing the Conversation

For years, cybersecurity has been framed as a question of prevention. Can attacks be stopped? Can systems be protected? Can vulnerabilities be eliminated? That mindset is changing. Boards are no longer asking whether an organisation can prevent every attack. They are asking what happens when prevent

Regal Rauniyar Star