Cloud & Infrastructure
Software supply chain security: architectural isolation for NIS2 compliance
Protecting critical infrastructure from third-party code threats and ensuring NIS2 compliance by shifting from reactive ...
// archive
NIS2
Glossary
What this tag means
NIS2 is the EU directive on cyber resilience for essential and important sectors, strengthening requirements for risk, incident and supply-chain management.
Cloud & Infrastructure
Software supply chain security under NIS2: from verification to isolation
NIS2 compliance for software supply chain security requires moving from reactive vulnerability scanning to built-in arch...
Information Security
NIS2 requirements and network segmentation: isolating critical systems without business downtime
We examine why classic network segmentation fails to meet NIS2 requirements and how an application-level architectural a...
Telecom
Supply chain software security in telecom: implementing NIS2 for critical BSS/OSS systems
How to protect legacy BSS/OSS systems in compliance with the NIS2 directive using the TM Forum ODA architectural model a...
Cloud & Infrastructure
NIS2 infrastructure security: microsegmentation and supply chain strategies
NIS2 compliance requires moving from paper-based compliance to architectural resilience. Microsegmentation and security ...
Information Security
Incident response: the first 24 hours and regulatory requirements
How to balance technical cyberattack containment with strict compliance reporting requirements during the critical first...
Cloud & Infrastructure
Geopatriation and Sovereign Cloud: When to Move Workloads Closer to Jurisdiction
Geopatriation and sovereign cloud are emerging as responses to regulatory requirements and cyber risks. This article exp...
Information Security
Zero Trust for Hybrid Infrastructure: Where the Network Perimeter No Longer Works
The transition to hybrid infrastructures has rendered the traditional network perimeter obsolete. Oleh Kravchenko explai...
Information Security
From compliance to proactive cybersecurity for the public sector
CERT-UA warns of the activation of UAC-0057 with new tools OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES, requiring public o...
Information Security
Oracle PeopleSoft vulnerability exploited in university data breach
A critical zero-day vulnerability, CVE-2026-35273, in Oracle PeopleSoft has been exploited by the ShinyHunters group to ...
Information Security
CERT-UA: New UAC-0057 Toolkit and Countermeasures
CERT-UA has reported on new tooling used by the UAC-0057 group. We examine the technical aspects of OYSTERFRESH, OYSTERS...
Information Security
Microsoft 365 Token Theft on Android: Lessons for Zero Trust and NIS2 Compliance
A vulnerability in Microsoft 365 Android apps allows account token theft via a residual debug flag, necessitating immedi...