Resources · Blog · Page 9

Field notes & analysis

Written by the people doing the work — threat research, regulatory guidance, and what we learn on live engagements.

AI in Cybersecurity31 Mar 2026

The Hidden Security Risks in AI Adoption: Model Access and Data Leakage

AI adoption is accelerating across industries. From customer support automation to internal analytics and decision-making, organisations are embedding AI into critical workflows at speed. The promise is clear: faster insights, improved efficiency, and competitive advantage. What is less visible is t

Trimikha Valentius

AI in Cybersecurity30 Mar 2026

AI-Generated Phishing: Why Social Engineering Is Getting Harder to Detect

Phishing has always relied on deception, but historically, it was easy to spot. Poor grammar, unusual phrasing, and generic messaging often revealed malicious intent. Users were trained to recognise these signs, and for a time, it worked. That assumption no longer holds. With the rise of AI-generate

Toni Widiarto

Blog27 Mar 2026

Threat Intelligence That Actually Works: Turning Alerts into Decisions

Security teams are not short on alerts; they are short on clarity. A typical organisation generates thousands of alerts every day across endpoints, networks, identities, and cloud systems. On paper, this level of visibility should strengthen security, but in reality, it often creates confusion as an

Surya Maulana

Blog26 Mar 2026

The SOC Maturity Model: How Security Operations Evolve from Monitoring to Defense

In many organisations, the Security Operations Centre (SOC) begins as a visibility function. Logs are collected, alerts are generated, and dashboards provide a sense of control over an increasingly complex environment. On paper, this looks like progress. In reality, visibility alone does not stop at

Marsha Widagdo

Blog25 Mar 2026

Supply Chain Attacks in Southeast Asia: Why “Trusted Partners” Become Entry Points

In Southeast Asia’s digital economy, trust drives growth. Organisations depend on networks of vendors, cloud providers, and outsourcing partners to scale quickly and operate across borders. This interconnected model enables speed and flexibility, but it also expands the attack surface. The more conn

Surya Maulana

Implementing Advanced Sticky Sessions with HAProxy Zentara

Technical Guides06 Mar 2026

How to Implement Advanced HAProxy Sticky Sessions for Scalable Websocket Infrastructure

Why WebSocket Load Balancing Breaks Without Sticky Sessions At Zentara, real-time collaboration tools are the heartbeat of our platform. Therefore, a steady WebSocket connection is the foundation of the user experience. However, scaling stateful protocols like WebSockets behind a high-performance lo

Adam

LLM Observability Langchain Langfuse Zentara

AI in Cybersecurity27 Feb 2026

A Recipe for Langchain LLM Observability Using Langfuse

When a standard app fails, you check the stack trace. But when an agent fails, you don’t know what to do. Is the model stuck in a recursive loop? Did it misunderstand the tool output? Is the “Critique Agent” currently hallucinating a list of reasons why the “Research Agent&#8

Adam

26 Feb 2026

Indonesia PDPD, PDPA, GDPR: A Practical Compliance Map for Regional Enterprises

For regional enterprises operating across Southeast Asia and beyond, regional data protection compliance has become increasingly complex. Organisations are no longer dealing with a single regulation in a single jurisdiction. Instead, they must navigate Indonesia’s Personal Data Protection Law, vario

Zentara Team

Cybersecurity Consulting25 Feb 2026

Security Audits vs. Security Assessments: What You Need for Compliance and What You Need for Safety

The digital landscape is defined by a paradox: organisations are more “compliant” than ever, yet sophisticated breaches continue to make headlines. This disconnect often stems from a fundamental misunderstanding of two critical pillars of defence. When leadership asks, “Are we secu

Toni Widiarto

Incident Response & Digital Forensics24 Feb 2026

Digital Forensics Explained: What Evidence You Can Actually Recover After an Incident

In 2026, the aftermath of a cyberattack is no longer a “black box” of lost data. As organisations transition to hyper-automated and cloud-native environments, the trail of digital forensic evidence left behind has become more complex but also more detailed than ever before. Whether you a

Toni Widiarto

AI in Cybersecurity20 Feb 2026

A Technical Guide to Choosing SIEM: When Classic SIEM Is Enough, and When Agentic SOC Is Needed

SOC in Southeast Asia in Critical Condition SOC (Security Operations System) teams in Southeast Asia are currently in a critical state and experiencing extraordinary pressure. Based on a report recorded by Indonesia’s BSSN (National Cyber and Crypto Agency), there were 3.64 billion cyberattacks or a

Alisha Deana

AI in Cybersecurity20 Feb 2026

ISO 27001 Readiness Without the Pain: A Step-by-Step Implementation Plan

For many enterprises, ISO 27001 certification feels overwhelming before it even begins. There are controls to map, documents to draft, risks to assess, and audits to prepare for. Without structure, the process quickly becomes bloated, bureaucratic, and expensive. But ISO 27001 readiness does not hav

Zentara Team