Information Security
Architectural segmentation per CISA CPG: from checklists to infrastructure resilience
How to protect data at the business logic level: shifting from network perimeter to architectural segmentation and minim...
// author
Oleh Kravchenko
Cybersecurity Engineer
Specializes in protecting critical infrastructure and enterprise systems: Zero Trust models, access management, DLP, ISO/IEC 27001 compliance. Over 10 years designing and auditing information security systems.
51 articles
Cybersecurity & Compliance
Information Security
Securing recruitment processes against fake job attacks
The UAC-0145 campaign proves that recruitment is a leading social engineering vector. Learn to build a Zero Trust archit...
Information Security
NIS2 requirements and network segmentation: isolating critical systems without business downtime
We examine why classic network segmentation fails to meet NIS2 requirements and how an application-level architectural a...
Information Security
Protecting against fake job offer UAC-0145 attacks
Attackers are compromising IT specialists through HR scenarios. Discover how Zero Trust and architectural audits help mi...
Information Security
Software supply chain security: countering legitimate tool attacks
Analysis of supply chain attacks exploiting legitimate software and practical defense steps, from implementing endpoint ...
Information Security
Implementing Row-Level Security for data protection
Implementing Row-Level Security (RLS) at the database architecture level limits the blast radius during account compromi...
Information Security
Fake job offers as a compromise channel
Attackers use social engineering during the hiring process to bypass perimeter security. We analyze the technical detail...
Information Security
AI risk management in enterprise cybersecurity: from shadow models to Zero Trust architecture
Integrating AI into enterprise systems creates new security challenges. Discover how to prevent shadow AI and secure you...
Information Security
AI risk management in critical infrastructure via NIST AI RMF 1.0
How critical infrastructure operators can adapt the NIST AI RMF 1.0 framework to defend against specific AI threats and ...
Information Security
IAM and PAM: Stopping Privilege Creep and Ensuring Secure Off-boarding
How to build a controlled identity lifecycle, implement regular access reviews, and eliminate "orphaned" access vulnerab...
Information Security
AI in cybersecurity 2027: from perimeter defense to semantic DLP filters
How to protect corporate LLM integrations from data leaks and new attack vectors using NIST AI RMF, MITRE ATT&CK framewo...
Information Security
Incident response: the first 24 hours and regulatory requirements
How to balance technical cyberattack containment with strict compliance reporting requirements during the critical first...