Resources · Blog · Tag

Identity & access.

Authentication, MFA, passkeys and account takeover: how identity-centric attacks work and how to stop them.

Tagged “Identity & access”

Blog28 Jul 2026

Cybersecurity Audit Checklist: Free Template and Best Practices

Most security gaps aren’t sophisticated. They’re a dormant admin account, an unpatched server, a backup nobody has tested since it was configured. Each one is boring on its own, and each one is how attackers get in. A cybersecurity audit checklist gives you a repeatable way to find those

Francesco Catozzo

Blog24 Jul 2026

What Is Ransomware? How It Works and How to Prevent It

Most guides describe ransomware as software that locks your files until you pay. That description is a decade out of date, and believing it is exactly what gets businesses caught. Modern ransomware doesn’t just lock your data. It steals it first, then encrypts what’s left, then threatens

Surya Maulana

Blog20 Jul 2026

What Is Social Engineering? Types and Real-World Attacks

Most cyberattacks don’t start with code. They start with a conversation. An attacker doesn’t need to break your firewall if they can convince someone to open the door. That’s social engineering: manipulating people into handing over access, information, or money. It skips the techn

Zentara Team

Blog26 Jun 2026

What Is Cloud Security? Everything You Need to Know

Cloud adoption is now the default, and the security risks have grown with it. IBM’s Cost of a Data Breach Report 2025 found that breaches spanning public cloud, private cloud, and on-premises environments cost an average of $5.05 million, the highest of any setup, and take 276 days to detect.

Zentara Team

Cloud Security Under Singapore's New Cross-Border Rules

Blog24 Jun 2026

Account Security in 2026: Why Attackers No Longer Need to Break In

The old picture of a hacker breaking through firewalls is completely out of date. Today’s attackers do not break in, they log in. They buy a real employee’s username and password from a dark web market, use an automated tool to defeat the one-time password (OTP), and walk into a company&

Zentara Team

Blog03 Jun 2026

20 Cybersecurity Tips Every Business Should Follow

Nearly one in five businesses that suffer a cyberattack never recovers. A Mastercard survey of over 5,000 business owners across four continents found that 46% had been attacked, and almost 20% of them later closed or went bankrupt. The lesson is simple: this is not just a big-company problem. Any b

Zentara Team

Blog25 May 2026

What Is Cybersecurity and Why Is It Important?

Every organisation runs on digital systems now, and each of those systems is something an attacker would like to reach. So the useful question is not whether an attack will come. It is whether your defences will hold when it does. That question has a price tag. IBM’s Cost of a Data Breach Repo

Zentara Team

Blog15 May 2026

Protecting the Philippines IT-BPM Sector from Identity-Centric Attacks

The Philippines has become one of the world’s leading hubs for IT and business process management (IT-BPM) services. Global enterprises rely on Philippine providers to handle customer support, finance operations, software development, and back-office processes. According to the IT & Business Pro

Surya Maulana

Blog29 Apr 2026

Securing the Modern API Gateway: Preventing Broken Object Level Authorization (BOLA)

APIs are now the backbone of modern digital services, powering mobile apps, cloud platforms, and internal microservices. As organisations expose more data through these interfaces, attackers increasingly target weaknesses in logic. Establishing robust API authorisation security is essential to mitig

Darian Kuswanto

AI in Cybersecurity17 Feb 2026

Mobile App Security Testing: The Vulnerabilities Attackers Exploit Most

Mobile applications now handle banking transactions, healthcare data, enterprise credentials, and personal identities. For attackers, that makes them high-value targets. Yet many organizations still treat mobile app security testing as a release checkbox rather than a continuous security function. F

Toni Widiarto

Blog27 Jan 2026

MFA Is Failing: How Attackers Bypass Authentication and What Comes Next

Multi-factor authentication has long been promoted as a cornerstone of modern cybersecurity. For years, organizations were told that adding an extra authentication factor would dramatically reduce the likelihood of account compromise. While MFA still raises the bar, attackers have adapted. Today, MF

Surya Maulana

Cloud & IT Security06 Jan 2026

Top 5 Cloud Security Risks Most Enterprises Still Underestimate

Cloud adoption has fundamentally changed how enterprises build and scale systems. Infrastructure is elastic, deployments are automated, and identities now define access far more than network boundaries. Yet many security strategies still assume risks that resemble traditional data centers rather tha

Surya Maulana