ZetTaBlogs
Technical analysis, emerging threats and defense strategies. Written by the ZetTateK team.
What is CEO fraud and how does it differ from phishing?
CEO fraud impersonates an executive to request an urgent transfer. How it works, how it differs from phishing and the rule that stops it.
Read →
A hidden instruction can give orders to your AI assistant
A hidden instruction in an email or a PDF can give orders to your AI assistant. How prompt injection works and how to design for resistance to it.
Read →
What is a pentest and how does it differ from a vulnerability assessment?
One tells you which doors look open and the other shows you what is inside. What to ask for in the report to know which of the two you were sold.
Read →
Mexico is short 77,000 specialists: does building your own SOC make sense?
Mexico has about 6,000 trained specialists for 85,000 positions. The five phases of building your own SOC and the one money cannot solve.
Read →
What is threat hunting and how does it differ from waiting for the alert?
Threat hunting looks for the attacker who is already inside and has not set off any alarm. Four hypotheses to start with and what a month that finds nothing still delivers.
Read →
72 hours to report: can your company meet the CNBV deadline?
Seventy-two hours sounds like a lot of time. Three full days. When a CEO reads it on a compliance slide, they almost always nod and…
Read →
What is identity and access management (IAM)?
IAM answers two questions: who each person is and what each person can do. The second one fails far more often…
Read →
Cybersecurity Awareness Month: five habits you can actually ask of your team
October is Cybersecurity Awareness Month. Five concrete habits you can ask of your team this week, with the…
Read →
Your two-factor didn't save you: what happens when the attacker no longer needs your password?
There is a phrase I hear often when I review how identity is set up in a company: “we have two-factor.”…
Read →
What is multi-factor authentication and why is it no longer enough?
MFA turned password theft into a bad business. Today the attacker no longer steals credentials, they steal sessions…
Read →
Ransomware in Mexico: why the hardest-hit sector is not the one you think
Mexico accounts for 18% of ransomware in Latin America. The hardest-hit sector is not banking or government, it is services, with…
Read →
What is an incident response playbook?
An incident response playbook is the written procedure that says, step by step, what to do when…
Read →
Cybersecurity metrics: how do you measure what never happened?
There is a conversation that repeats every year in budget committees and that almost nobody talks about. The person in charge…
Read →
What is a NOC and how does it differ from a SOC?
A NOC makes sure the network works and a SOC makes sure nobody gets into it. What each one…
Read →
How many days does your company take to patch? Attackers no longer wait 43
Inside your company, two clocks are running at the same time and only one is visible. The first…
Read →
What is vulnerability management and why is patching no longer enough?
What vulnerability management is, the five stages of the cycle, how to prioritize when you can't…
Read →Is your company protected?
Put what you read into practice. Request a free assessment of your security posture.
Free Assessment → WhatsApp