Zero Trust for legacy ERP without rewriting: IAP, PAM and microsegmentation
How to secure legacy ERP systems without rewriting code. Implement Zero Trust using IAP, PAM, and microsegmentation to mitigate access risks effectively.
Information Security
Ideas and experience in communications, technology and customer service.
Managing mass URL injection and SEO threats
A sudden surge in indexed URLs may signal a security breach or a technical configuration issue. Learn how to localize threats and protect SEO without hasty actions.
Unknown sitemap in Google Search Console: legacy CMS or compromise indicator
The appearance of an unauthorized sitemap in GSC is a critical signal of potential compromise via content injection. Why simple file deletion masks the problem and how to conduct a proper forensic analysis.
SEO after site hack: removing spam URLs from index
Server cleanup does not remove indexed hacked content. Learn how to perform a URL audit, implement correct HTTP status codes, and restore your site's search visibility.
Casibom in Search Console: detecting corporate website compromise
Unusual gambling queries in Google Search Console indicate website compromise via cloaking. Learn how to detect hidden SEO spam and protect your domain.
Assessing infrastructure readiness for cyberattacks: beyond compliance
Building real enterprise cyber resilience in the NIS2 era, avoiding paper audit traps, and protecting infrastructure through Security by Design.
Zero Trust for Hybrid Infrastructure: Where the Network Perimeter No Longer Works
The transition to hybrid infrastructures has rendered the traditional network perimeter obsolete. Oleh Kravchenko explains why the Zero Trust model is critically important for protecting resources in modern environments where trust in any user or device is absent by default.
From compliance to proactive cybersecurity for the public sector
CERT-UA warns of the activation of UAC-0057 with new tools OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, requiring public organizations to strengthen their cyber defenses.
Oracle PeopleSoft vulnerability exploited in university data breach
A critical zero-day vulnerability, CVE-2026-35273, in Oracle PeopleSoft has been exploited by the ShinyHunters group to compromise educational institutions, highlighting the ongoing risks associated with legacy ERP systems.
CERT-UA: New UAC-0057 Toolkit and Countermeasures
CERT-UA has reported on new tooling used by the UAC-0057 group. We examine the technical aspects of OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, along with practical recommendations for defense.
Microsoft 365 Token Theft on Android: Lessons for Zero Trust and NIS2 Compliance
A vulnerability in Microsoft 365 Android apps allows account token theft via a residual debug flag, necessitating immediate security measures and NIS2 compliance.
Cyber threats to critical infrastructure: defending against new attacker tactics
CERT-UA warns of intensified cyberattacks targeting critical infrastructure. We examine new attacker tactics and effective defense strategies based on Zero Trust architecture.