Building noise-free security monitoring with SIEM, SOC, and SOAR
A practical approach to overcoming SOC alert fatigue through MITRE ATT&CK mapping, SOAR automation, and NIST CSF 2.0 business prioritization.
Serhiy Balashuk 7 min read
CONTROLLED FINANCE
SIEM
Practical guidance on management accounting, budgeting, treasury, period close, financial controls and evidence-based AI.
Choose a topic
23 publications
Serhiy Balashuk 7 min read
Zero Trust for Hybrid Infrastructure: Where the Network Perimeter No Longer Works
The transition to hybrid infrastructures has rendered the traditional network perimeter obsolete. Oleh Kravchenko explains why the Zero Trust model is critically important for protecting resources in modern environments where trust in any user or device is absent by default.
Serhiy Balashuk 6 min read
From compliance to proactive cybersecurity for the public sector
CERT-UA warns of the activation of UAC-0057 with new tools OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, requiring public organizations to strengthen their cyber defenses.
Yuriy Syvytsky 5 min read
Oracle PeopleSoft vulnerability exploited in university data breach
A critical zero-day vulnerability, CVE-2026-35273, in Oracle PeopleSoft has been exploited by the ShinyHunters group to compromise educational institutions, highlighting the ongoing risks associated with legacy ERP systems.
Yuriy Syvytsky 5 min read
CERT-UA: New UAC-0057 Toolkit and Countermeasures
CERT-UA has reported on new tooling used by the UAC-0057 group. We examine the technical aspects of OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, along with practical recommendations for defense.
Anton Marrero 9 min read
Microsoft 365 Token Theft on Android: Lessons for Zero Trust and NIS2 Compliance
A vulnerability in Microsoft 365 Android apps allows account token theft via a residual debug flag, necessitating immediate security measures and NIS2 compliance.
Yuriy Syvytsky 5 min read
Cyber threats to critical infrastructure: defending against new attacker tactics
CERT-UA warns of intensified cyberattacks targeting critical infrastructure. We examine new attacker tactics and effective defense strategies based on Zero Trust architecture.
Yuriy Syvytsky 7 min read
Supply chain security lessons for AI integrations
The Miasma attack on Red Hat's npm packages highlights supply chain risks and credential theft, which are critical for AI integration security.
Anton Marrero 6 min read
AI security platform: protecting AI services from prompt injection and data leaks
Protecting AI services from prompt injection and data leaks in 2026 requires a comprehensive approach and integration with existing cybersecurity tools.
Mykhailo Vyhovsky 7 min read
AI drives compliance audit automation
AI-driven compliance is transforming ISO/IEC 27001 and SOC 2 audits by automating evidence collection and non-compliance detection.
Mykhailo Vyhovsky 3 min read
Zero Trust for legacy systems: migration or adaptation?
Implementing the Zero Trust model for legacy systems presents a critical challenge, requiring in-depth analysis of architecture and business processes. The key question remains the choice between full migration and adapting existing solutions.
Mykhailo Vyhovsky 4 min read
Protecting critical infrastructure from emerging IoT/SCADA threats
The increasing number of cyberattacks on critical infrastructure necessitates a reevaluation of approaches to securing IoT and SCADA systems. Emerging challenges for 2026 demand integrated solutions and continuous monitoring.
Serhiy Balashuk 3 min read