Platform engineering for hybrid Kubernetes: cost and security optimization
Platform engineering optimizes Kubernetes in hybrid infrastructures, ensuring cost predictability, enhanced security, and operational efficiency.
Mykhailo Vyhovsky7 min readCONTROLLED FINANCE
Compliance and risk
Practical guidance on management accounting, budgeting, treasury, period close, financial controls and evidence-based AI.
Choose a topic
78 publications
Mykhailo Vyhovsky7 min readOracle PeopleSoft vulnerability exploited in university data breach
A critical zero-day vulnerability, CVE-2026-35273, in Oracle PeopleSoft has been exploited by the ShinyHunters group to compromise educational institutions, highlighting the ongoing risks associated with legacy ERP systems.
Yuriy Syvytsky5 min readCERT-UA: New UAC-0057 Toolkit and Countermeasures
CERT-UA has reported on new tooling used by the UAC-0057 group. We examine the technical aspects of OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, along with practical recommendations for defense.
Anton Marrero9 min readMicrosoft 365 Token Theft on Android: Lessons for Zero Trust and NIS2 Compliance
A vulnerability in Microsoft 365 Android apps allows account token theft via a residual debug flag, necessitating immediate security measures and NIS2 compliance.
Yuriy Syvytsky5 min readCyber threats to critical infrastructure: defending against new attacker tactics
CERT-UA warns of intensified cyberattacks targeting critical infrastructure. We examine new attacker tactics and effective defense strategies based on Zero Trust architecture.
Yuriy Syvytsky7 min read
NIS2 and AI: Securing electronic document flow with Scriptum.DMS
Integrating Scriptum.DMS with the NIS2 directive and AI enhances data protection and document workflow efficiency, particularly within the public sector.
Anton Marrero6 min readPlatform engineering and IDP: optimizing cloud and security for banks
Platform Engineering and IDP are transforming development, optimizing cloud costs, and enhancing security amidst increasing infrastructure complexity.
Mykhailo Vyhovsky5 min readTelecom fraud in 2027: integrating antifraud with billing and softswitch
Integrating antifraud systems with billing and softswitch is crucial for telecom operators in 2027 to effectively combat fraud.
Anton Marrero6 min readOptimizing multi-cloud costs with AI and NIS2 compliance
AI-driven FinOps optimizes multi-cloud spending while ensuring NIS2 compliance. Effective cloud resource management under new regulations.
Yuriy Syvytsky5 min readAI drives compliance audit automation
AI-driven compliance is transforming ISO/IEC 27001 and SOC 2 audits by automating evidence collection and non-compliance detection.
Mykhailo Vyhovsky3 min readZero Trust for legacy systems: migration or adaptation?
Implementing the Zero Trust model for legacy systems presents a critical challenge, requiring in-depth analysis of architecture and business processes. The key question remains the choice between full migration and adapting existing solutions.
Mykhailo Vyhovsky4 min read