CONTROLLED FINANCE
Practical guidance on management accounting, budgeting, treasury, period close, financial controls and evidence-based AI.
34 publications
How to protect legacy infrastructure from unauthorized access and lateral movement without major code refactoring using Identity-Aware Proxy and microsegmentation.
Yuriy Syvytsky 6 min read
How to secure legacy ERP systems without rewriting code. Implement Zero Trust using IAP, PAM, and microsegmentation to mitigate access risks effectively.
Anton Marrero 10 min read
Building real enterprise cyber resilience in the NIS2 era, avoiding paper audit traps, and protecting infrastructure through Security by Design.
Yuriy Syvytsky 7 min read
Confidential computing, leveraging TEEs, justifies its complexity for banks by protecting data in the cloud during processing from cyber threats and regulatory risks.
Anton Marrero 7 min read
The transition to hybrid infrastructures has rendered the traditional network perimeter obsolete. Oleh Kravchenko explains why the Zero Trust model is critically important for protecting resources in modern environments where trust in any user or device is absent by default.
Serhiy Balashuk 6 min read
CERT-UA warns of the activation of UAC-0057 with new tools OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, requiring public organizations to strengthen their cyber defenses.
Yuriy Syvytsky 5 min read
A critical zero-day vulnerability, CVE-2026-35273, in Oracle PeopleSoft has been exploited by the ShinyHunters group to compromise educational institutions, highlighting the ongoing risks associated with legacy ERP systems.
Yuriy Syvytsky 5 min read
CERT-UA has reported on new tooling used by the UAC-0057 group. We examine the technical aspects of OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, along with practical recommendations for defense.
Anton Marrero 9 min read
A vulnerability in Microsoft 365 Android apps allows account token theft via a residual debug flag, necessitating immediate security measures and NIS2 compliance.
Yuriy Syvytsky 5 min read
CERT-UA warns of intensified cyberattacks targeting critical infrastructure. We examine new attacker tactics and effective defense strategies based on Zero Trust architecture.
Yuriy Syvytsky 7 min read
The Miasma attack on Red Hat's npm packages highlights supply chain risks and credential theft, which are critical for AI integration security.
Anton Marrero 6 min read
Protecting AI services from prompt injection and data leaks in 2026 requires a comprehensive approach and integration with existing cybersecurity tools.
Mykhailo Vyhovsky 7 min read