Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Every business today strives to enhance productivity while ensuring that sensitive data remains secure. In an increasingly digital workplace, monitoring employee workstations has become a strategic tool for achieving this balance. Over the past decade, companies have adapted to rapid technological changes and the demands of a constantly connected environment.

India’s Digital Personal Data Protection Act, 2023 (DPDP Act) is finally moving toward activation. In January 2025 the government published the Draft Digital Personal Data Protection Rules, 2025 for public consultation to operationalize the Act. As of late 2025, the Act is enacted but core provisions still await final notification, so a phased rollout remains likely.

IdP-initiated SSO vs. SP-initiated SSO: Both differ from each other in terms of the login process, authentication flow, and use cases. Learn the key differences between the two.

In 2024, I published Feline Hackers Among Us? (A Deep Dive and Simulation of the Meow Attack), which explored the notorious Meow attack campaign that had plagued unsecured databases since 2020. That article focused on demonstrating the attack against a single MongoDB instance using a simple Python script. A proof-of-concept that illustrates how devastating misconfigurations can be.

If you've ever been involved in a major database migration, you know just how complex and honestly, nerve-wracking they can be. At Tines, we recently faced the challenge of migrating a customer's dedicated tenant by moving all the customer’s critical workloads running on Tines between two different AWS Regions. All while maintaining 100% system availability.

AI security agents are reshaping how organizations manage exposure. This blog explores where they deliver the most impact — from smarter prioritization to faster ownership mapping and assisted remediation — and how this shift moves security teams from automation to autonomy.

A Trusted Platform Module (TPM) is a microcontroller designed to increase the levels of protection for computers, smartphones, and other devices through built-in security support that offers the necessary cryptographic operations. TPMs are unlike other software-based security; they provide a hardware-bound security, thus, it becomes nearly impossible for the attacker to tamper with the protected keys and information stored within the TPM.

When Amazon Web Services’ US-East-1 region went down recently, a long list of global apps and services went with it. For most companies, that meant a few hours of frustration. For APRA-regulated financial institutions in Australia, an outage like that is something much more serious — a compliance and operational-resilience test under CPS 230, which is now in force as of July 2025.

Researchers at Appknox warn that malicious apps are impersonating popular AI tools like ChatGPT and DALL-E to trick users into installing malware on their mobile devices. Some of these apps simply collect user data to be sold to advertising services, while others act as full-fledged malware.