Zero-Trust-En — TechCom

UAC-0057 toolkit analysis and mitigation strategies from CERT-UA

Thu, 30 Jul 2026 06:09:53 +0300

Ukraine's cyberspace remains a constant battleground. Today, June 6th, CERT-UA issued a warning highlighting new tooling employed by the UAC-0057 group. This arsenal, comprising OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, signifies an evolution in threats and necessitates enhanced cybersecurity measures for Ukrainian organizations. This is particularly crucial for those operating critical infrastructure or engaging with European partners, as it demands the implementation of comprehensive incident response and risk management processes aligned with NIS2 directive requirements.

AI security: preventing data leaks and prompt injection in services

Thu, 23 Jul 2026 23:44:35 +0300

By 2026, artificial intelligence (AI) has transitioned from an experimental technology to an integral part of business processes, particularly in the banking sector. From chatbots for support to fraud detection and risk analysis systems, AI services process vast amounts of confidential data and participate in decision-making. Consequently, their security has become a paramount concern. The rapid integration of AI into critical infrastructure and the rise of associated cyber threats make strengthening defenses an urgent task for 2026-2027.

Applying Zero Trust to legacy ERP via PAM, IAP, and microsegmentation

Mon, 20 Jul 2026 17:33:44 +0300

Legacy ERP often remains the "heart" of an enterprise: it handles finances, procurement, production, logistics, and management reporting. At the same time, such systems often lack support for modern multi-factor authentication, SAML/OIDC, contextual access policies, or sufficiently granular privilege control. Completely rewriting the code or replacing the ERP can be too risky for business continuity, so a CISO needs an intermediate, yet manageable, path to risk reduction.

The threat landscape makes this task practical rather than theoretical. The ENISA Threat Landscape 2025 identifies phishing as the leading initial access vector. In the same reporting period, 53.7% of organizations affected by cyberattacks belonged to essential entities within the scope of NIS2. For industry, critical infrastructure, and large enterprise organizations, this means that if a user account is compromised, the ERP must not remain an open target for direct access and lateral movement.

DLP methodologies for protecting corporate content in remote work

Mon, 13 Jul 2026 06:12:08 +0300

Distributed work and challenges for DLP

Projections indicate that by 2026, over 70% of global companies will adopt hybrid work models, posing substantial challenges to traditional data protection strategies. Distributed infrastructure, the use of personal devices (BYOD), and the proliferation of cloud services increase the risks of confidential information leakage. Classic perimeter security measures are becoming insufficient, necessitating a shift towards more flexible and intelligent DLP solutions based on context and behavioral analysis.

Evaluating TEE in cloud environments: when complexity warrants confidential computing

Tue, 07 Jul 2026 21:40:06 +0200

Unpredictable Cloud Costs and Growing Cyber Threats: Data Confidentiality Challenges for Banks

The transition of financial institutions to the cloud often presents a dual challenge: unpredictable operational costs and escalating data security requirements. On one hand, cloud infrastructure promises flexibility and scalability, but without proper visibility and governance, it can lead to uncontrolled cost growth. On the other hand, processing sensitive financial data outside an organization's own security perimeter creates new attack vectors that cannot be ignored.

Zero Trust implementation for hybrid environments where traditional perimeters fail

Mon, 06 Jul 2026 00:23:52 +0200

The shift to hybrid infrastructures, combining on-premises resources with cloud services, has blurred the traditional boundaries of corporate networks. Oleh Kravchenko, a cybersecurity engineer, notes that under these conditions, the network perimeter—which has been the foundation of security for decades—is no longer a sufficient line of defense. The rise of remote work, the adoption of SaaS solutions, and BYOD policies demand a fundamentally new approach to security, where trust in any user or device is absent by default. This concept, known as Zero Trust, is becoming not just a recommendation but a mandatory requirement for protecting corporate data and systems.

Transitioning the public sector from baseline compliance to active cybersecurity

Wed, 01 Jul 2026 06:08:12 +0300

The Ukrainian government's Computer Emergency Response Team, CERT-UA, issued a warning on May 21st of this year regarding an updated toolkit used by the cyber group UAC-0057. This group is actively employing new malware, OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, in phishing campaigns targeting Ukrainian public organizations, as detailed in a CERT-UA report. This event once again underscores the continuous evolution of cyber threats and the necessity for the public sector to reassess its cybersecurity strategies.

Evaluating cyberattack resilience beyond standard compliance requirements

Thu, 25 Jun 2026 12:03:31 +0300

The modern threat landscape leaves no room for illusions regarding cyber defense. According to the ENISA Threat Landscape 2025 report, 4,875 incidents were recorded and analyzed between July 1, 2024, and June 30, 2025. Most notably, 53.7% of all affected organizations were essential entities subject to the European NIS2 directive. This highlights a systemic issue: strict regulatory pressure and mandatory compliance are not synonymous with actual protection against targeted attacks.

Applying supply chain security principles to AI integrations

Fri, 19 Jun 2026 13:52:35 +0300

Software supply chains are becoming increasingly complex, while dependence on third-party components continues to grow. In 2026, the industry faced a new wave of attacks targeting the npm open-source ecosystem, including the Mini Shai-Hulud campaign and the Miasma incident, during which packages within the @redhat-cloud-services namespace were compromised. Researchers discovered malicious code designed to steal credentials, access tokens, and CI/CD infrastructure secrets. This incident once again demonstrates how vulnerable even large development ecosystems remain and highlights the growing importance of securing AI integrations and software supply chains.

University data breach linked to Oracle PeopleSoft vulnerability

Fri, 12 Jun 2026 06:08:40 +0300

Between May 27 and June 9 of this year, a large-scale attack once again demonstrated the vulnerability of educational institutions. The ShinyHunters group, also known as UNC6240, successfully exploited the critical zero-day vulnerability CVE-2026-35273 in Oracle PeopleSoft software. This occurred even before Oracle published an official advisory on June 10, 2026 (Mandiant, 2026).

This incident exemplifies how cybercriminals leverage the time gap between vulnerability discovery and patch release, jeopardizing confidential data and operational resilience for organizations, particularly within the education sector.

Android Microsoft 365 token theft: Zero Trust and NIS2 implications

Thu, 04 Jun 2026 06:08:38 +0300

Mobile devices have long ceased to be merely auxiliary work tools. Today, they provide full access to corporate email, documents, collaboration platforms, and business applications. As a result, mobile platforms are increasingly becoming attractive targets for cybercriminals. Recent security research has highlighted a vulnerability in certain Microsoft 365 applications for Android that could enable the theft of authentication tokens and unauthorized access to corporate resources.

Although Microsoft has already released security updates to address the issue, the incident reveals a broader challenge: even mature and widely trusted ecosystems can contain vulnerabilities capable of impacting corporate security. For organizations, this serves as another reminder of the importance of a comprehensive approach to mobile security and compliance with modern cybersecurity regulations, including the NIS2 Directive.

Defending critical infrastructure against evolving cyber threat tactics

Tue, 02 Jun 2026 19:41:58 +0300

This year, cybersecurity for Ukrainian hospitals, local government bodies, and FPV operators has become an even higher priority. According to CERT-UA, throughout March-April 2026, an intensification of cyberattacks on local government bodies and communal healthcare institutions, including clinical and emergency medical hospitals, was recorded (cert.gov.ua, moz.gov.ua, zor.gov.ua). These incidents highlight not only an increase in the number of threats but also a shift in attacker tactics, necessitating a review of existing defense strategies.

Implementing Zero Trust in legacy environments: migration versus adaptation

Tue, 26 May 2026 06:05:19 +0300

Cybersecurity challenges for legacy systems

According to Gartner research, by 2026, over 50% of organizations investing in Zero Trust solutions will not achieve expected results due to focusing solely on new systems and neglecting legacy infrastructure. Legacy systems, often the backbone of critical business operations, pose a significant risk due to the absence of modern authentication, authorization, and network segmentation mechanisms. Amidst the growing number of cyberattacks and strengthening regulatory requirements like NIS2, protecting these systems becomes a priority.

Enterprise cloud transformation: managing infrastructure and security

Mon, 25 May 2026 23:28:00 +0300

Cloud Transformation for Business: Infrastructure, Security and Manageability

Cloud technologies have already become a fundamental element of modern business IT infrastructure. Scalability, rapid deployment of services, cost optimization, and enhanced cybersecurity make cloud solutions one of the key drivers of digital transformation for companies.

Experts from a leading enterprise solution vendor emphasize that an effective cloud strategy today is not only a technical matter, but also a factor of business competitiveness and resilience.

Addressing cybersecurity challenges in hybrid infrastructure

Mon, 25 May 2026 06:07:08 +0300

By 2026, over 85% of large enterprises will adopt hybrid cloud strategies, increasing demands for comprehensive information security systems (ISS). Growing data volumes, distributed infrastructure, and the constant evolution of cyber threats require companies to rethink their security approaches. Ensuring compliance with regulations like ISO/IEC 27001 and NIS2 is becoming critically important for maintaining operational resilience and customer trust.

Architectural complexities and fragmentation

Hybrid infrastructure, combining on-premises servers, private, and public clouds, creates unique challenges for ISS. Each component has its own security mechanisms, leading to fragmented control and potential gaps. This complicates centralized security policy management, monitoring, and incident response. For example, different cloud providers may have incompatible APIs for identity and access management, necessitating the development of complex integration solutions.

Securing enterprise data within multicloud architectures

Tue, 19 May 2026 06:08:05 +0300

Challenges of hybrid and multicloud infrastructure

By 2026, over 80% of large enterprises will adopt hybrid and multicloud strategies, significantly complicating the cybersecurity landscape. The distribution of data and applications across on-premises, private, and public clouds (Azure, AWS, Google Cloud) introduces new challenges in maintaining a unified level of protection. Key issues include fragmented security policies, monitoring complexity, identity and access management, and ensuring compliance with regulations such as ISO/IEC 27001 and Ukrainian CIS standards.

Protocols for data security during employee offboarding by 2026

Mon, 18 May 2026 06:12:10 +0300

According to analytical reports, by 2026, up to 70% of corporate data breaches will be linked to insufficiently effective employee offboarding processes. This highlights the critical need to review and strengthen access management policies after termination. Despite significant investments in perimeter security and threat detection systems, internal risks, particularly those arising from the improper disconnection of former employees from corporate systems, remain one of the most serious vulnerabilities.

Current developments in multi-cloud and cloud infrastructure

Mon, 11 May 2026 06:06:53 +0300

According to the latest analytical reports, over 85% of enterprises are already using or planning to adopt multi-cloud strategies within the next two years. This reflects a fundamental shift from monolithic on-premises infrastructures to more flexible, scalable, and resilient architectures. The benefits of multi-cloud are evident: avoiding vendor lock-in, optimizing costs by selecting the best offerings for specific workloads, and improving fault tolerance and geographic availability.

Hybrid infrastructure, combining on-premises resources with public clouds, remains a key element of the strategy for many large organizations, especially in sectors with stringent regulatory requirements or significant investments in their own data centers. This allows for maintaining control over critical data and applications while leveraging the scalability and innovation of cloud services.

Adopting Zero Trust architecture for modern ERP security

Tue, 05 May 2026 06:08:34 +0300

According to Microsoft, implementing Zero Trust principles can reduce the risk of successful cyberattacks by 50% or more. For mission-critical systems like ERP, which store financial, operational, and sensitive data, the traditional "trust but verify" approach has proven insufficient. Perimeter security, which assumes trust within internal networks, is no longer effective in the face of hybrid cloud infrastructures, remote work, and ever-increasing threat complexity.

What is Zero Trust and why is it important for ERP?

Zero Trust is a cybersecurity model based on the principle of "never trust, always verify." It requires that every user, device, application, or workload, regardless of its location, be authenticated, authorized, and continuously verified before being granted access to network resources. For ERP systems, which are the central nervous system of any enterprise, this means:

Mitigating 2026 insider threats via AI-enhanced offboarding

Mon, 04 May 2026 06:05:48 +0300

Approximately 60% of corporate data breaches in 2025 were recorded after an employee's termination – while their access formally remained active. Insider threats originating from current or former employees, contractors, or partners remain one of the most complex cybersecurity challenges. With the evolution of hybrid work models and the widespread use of cloud services, traditional offboarding approaches are becoming insufficient for effectively protecting sensitive data. In 2026, companies will increasingly turn to AI-based solutions to automate and enhance employee offboarding processes, minimizing risks.

Deployment of AI agents within enterprise environments

Wed, 22 Apr 2026 07:04:51 +0300

A typical scenario: the finance department of a large bank processes thousands of transactions every day, identifies potential anomalies, generates reports, and responds to customer inquiries. Each of these processes requires significant human effort, carries a risk of errors, and often delays important business decisions. This is where AI agents come into play — autonomous software entities capable of collecting information from digital environments, processing it, making decisions, and performing actions to achieve specific goals. They do not simply automate business processes; they make them more intelligent, allowing organizations to focus on strategic priorities.

Trends in AI and VoIP business communications for 2026

Mon, 20 Apr 2026 06:05:51 +0300

Traditional analog PBX systems increasingly fail to meet modern business requirements for scalability, flexibility, and integration with corporate applications. Their maintenance is costly, while their functionality is often limited. VoIP (Voice over Internet Protocol) fundamentally transforms business communications by converting voice calls into digital data transmitted over IP networks. This approach delivers a range of benefits that have become essential for modern organizations.

Cost reduction: lower international and long-distance calling expenses through the use of existing internet infrastructure.
Scalability: rapid addition or removal of users and expansion of functionality without significant capital investments.
Flexibility and mobility: access to corporate telephony from anywhere via IP phones, softphones, or mobile applications.
Integration: seamless connectivity with CRM, ERP, document management systems, and other business applications through APIs.

AI in Communications: A New Level of Interaction

Artificial Intelligence (AI) is transforming business communications far beyond traditional automation. Modern AI solutions can analyze large volumes of data, understand natural language, predict customer behavior, and personalize interactions. This not only improves operational efficiency but also enhances customer experience.

MDM and data integration strategies for large enterprises

Fri, 17 Apr 2026 06:08:19 +0300

In a large industrial enterprise with a long history, there are multiple ERP systems, separate CRM solutions for different departments, legacy databases with information on equipment and suppliers, and new cloud services for logistics management. Each department works with its own data, which is often duplicated, contradictory, or simply missing in other systems. The marketing department launches a campaign based on one set of customer data, the sales department uses another, and the finance department cannot even compile a unified profit report because information about the same products has different identifiers in different systems. This leads to operational delays, incorrect decisions, lost profits, and reduced competitiveness. This is where system integration and Master Data Management (MDM) become not just desirable, but critically important tools.

Balancing Security and Agility in Hybrid Infrastructure

Tue, 14 Apr 2026 06:05:43 +0300

When a major bank decided to migrate part of its critical financial operations to the cloud, it faced a dilemma: how to ensure regulatory compliance and a high level of security while retaining the benefits of cloud services' flexibility and scalability? This is a classic scenario illustrating the challenges organizations face when building a hybrid infrastructure. Modern organizations aim to leverage the best aspects of both on-premise solutions and public or private clouds to optimize costs, enhance resilience, and accelerate time-to-market for new products.

Protecting legacy systems with Zero Trust: IAP and microsegmentation

Mon, 23 Mar 2026 09:36:30 +0200

IT architects and information security leaders face a complex dilemma. On one hand, regulatory requirements and threat dynamics demand an immediate transition to a Zero Trust architecture. On the other, legacy components—outdated billing systems, monolithic databases, and applications developed long before modern security standards—often remain at the heart of corporate infrastructure. Rewriting them from scratch would halt critical business processes for years. Leaving them as-is exposes the organization to unacceptable risks.

Implications of the NIS2 Directive for IT Contractors

Tue, 17 Mar 2026 09:00:00 +0300

The EU NIS2 Directive came into force in October 2024, significantly expanding the scope of entities required to comply with cybersecurity mandates. For Ukrainian companies providing services to EU clients, NIS2 serves as a practical benchmark.

Scope of NIS2

NIS2 covers "essential" and "important" entities across 18 sectors, including energy, transport, healthcare, digital infrastructure, cloud providers, and manufacturing. IT contractors serving these sectors fall under the directive's purview due to supply chain requirements.

2026 Electronic Document Management: AI-driven archiving and support

Fri, 06 Mar 2026 11:21:34 +0200

Electronic Document Management 2026: AI Assistants and Archiving Automation

At the end of reporting periods, legal and administrative departments process large volumes of documents: contracts, addenda, invoices, and acts. Each document must be classified, validated, enriched with metadata, and archived. These operations are still often manual or semi-automated, making them time-consuming and prone to errors, delays, and data inconsistencies.

Modern document management approaches rely on AI/ML technologies to automate these processes. These are no longer experimental tools but applied solutions already used in enterprise ECM and DMS systems (Enterprise Content Management / Document Management Systems).

Achieving NIS2 compliance and multi-cloud cost optimization via AI

Fri, 13 Feb 2026 17:46:19 +0200

In October 2024, the NIS2 Directive came into effect, significantly expanding the scope of critical infrastructure entities and strengthening cybersecurity requirements. For many Ukrainian companies working with European clients or integrated into European supply chains, this necessitates adapting IT strategies, particularly concerning cloud cost management and security. By 2026, with the proliferation of multi-cloud architectures, controlling cloud financial flows and ensuring regulatory compliance will become increasingly critical.

2026 IT industry outlook: The move to integrated digital ecosystems

Fri, 06 Feb 2026 16:39:41 +0200

The global IT industry is entering a new phase where the key competitive advantage is no longer individual technologies, but the ability to integrate them into a unified, manageable ecosystem. In March–April 2026, this trend has fully solidified: businesses are moving from isolated digitalization efforts to comprehensive transformation of processes, infrastructure, and data management.

The main driver behind this shift is the convergence of artificial intelligence, hybrid infrastructure, and platform-based solutions. While these areas were previously implemented separately, today organizations expect a cohesive environment that ensures continuity, scalability, and full operational control.

Cybersecurity for AI: The emergence of DLP standards by 2026

Tue, 27 Jan 2026 09:52:55 +0200

Rising Risks of Data Leaks in AI Systems

By 2026, over 70% of new AI systems will experience data breaches due to inadequate Data Loss Prevention (DLP) solution integration. Artificial intelligence, integrated into corporate processes, handles vast amounts of sensitive information—from customer personal data to trade secrets and intellectual property. This data is both the fuel for AI and its most vulnerable point. Traditional DLP systems, designed to protect structured data in conventional enterprise systems, often prove ineffective against complex attack vectors targeting AI models and their training datasets.

Zero Trust for legacy systems: replacement or adaptation by 2026?

Fri, 23 Jan 2026 11:27:45 +0200

According to Microsoft, 80% of cyberattacks in 2023 were linked to compromised credentials, highlighting the ineffectiveness of traditional perimeter security models. The Zero Trust concept, which mandates continuous verification of access to resources regardless of their location, is no longer just a recommendation but a necessity. However, its implementation in environments dominated by legacy systems, developed decades ago without consideration for modern threats, presents a significant challenge.

Addressing offboarding as a critical cybersecurity vulnerability

Fri, 16 Jan 2026 15:46:29 +0200

Imagine this scenario: a valuable developer with access to critical repositories and production systems leaves the company. The offboarding procedure is limited to returning a laptop and signing a clearance form. Months later, during an internal audit, it's discovered that their Gitlab account is still active, and access keys to cloud services were never revoked. This isn't a hypothetical situation but a real vulnerability that threatens thousands of companies daily.

Implementing Zero Trust for Hybrid Infrastructure Security

Thu, 08 Jan 2026 09:39:00 +0200

Imagine this scenario: a remote employee connects to the corporate network via VPN. The traditional security model often grants them broad access to internal resources after a single authentication. But what if their device is compromised, or their credentials are stolen? This is precisely where the fundamental weakness of outdated approaches lies, opening the door for attackers to move laterally within the network. In hybrid infrastructures, where data and applications are distributed across on-premises servers, private, and public clouds, this risk is amplified.