https://shasec.my.id/en/categories/cybersecurity/Recent content in Cybersecurity on ShaSecHugoenTue, 11 Aug 2026 20:30:32 +0700https://shasec.my.id/en/articles/cyber-insurance-indonesia-individual-umkm-guide/Sun, 09 Aug 2026 00:00:00 +0000https://shasec.my.id/en/articles/cyber-insurance-indonesia-individual-umkm-guide/A ransomware note asks for 50 million rupiah. A customer data leak triggers a PDP notification. Does insurance pay. Learn what cyber insurance covers in Indonesia, what it excludes, how much it costs, and how you prepare a claim that passes.https://shasec.my.id/en/articles/api-token-session-cookie/Wed, 05 Aug 2026 00:00:00 +0000https://shasec.my.id/en/articles/api-token-session-cookie/How to reduce the risk of API tokens, refresh tokens, and session cookies being stolen from browsers, logs, source code, or malware.https://shasec.my.id/en/articles/clipboard-hijacking-malware-prevention/Wed, 05 Aug 2026 00:00:00 +0000https://shasec.my.id/en/articles/clipboard-hijacking-malware-prevention/Understand the mechanics of clipboard hijacking malware, and learn how to detect, prevent, and protect your digital transactions from copy-paste manipulation.https://shasec.my.id/en/articles/domain-hijacking/Wed, 05 Aug 2026 00:00:00 +0000https://shasec.my.id/en/articles/domain-hijacking/Practical steps to prevent domain takeover from changing your website, email, and digital services.https://shasec.my.id/en/articles/edr-endpoint-protection/Wed, 05 Aug 2026 00:00:00 +0000https://shasec.my.id/en/articles/edr-endpoint-protection/A guide to evaluating antivirus, EPP, and EDR for laptops and PCs used for work and sensitive data.https://shasec.my.id/en/articles/security-logging-monitoring-umkm/Wed, 05 Aug 2026 00:00:00 +0000https://shasec.my.id/en/articles/security-logging-monitoring-umkm/A practical checklist of log sources and alerts that helps small businesses detect suspicious activity without building a large SOC.https://shasec.my.id/en/articles/spf-dkim-dmarc-bimi/Wed, 05 Aug 2026 00:00:00 +0000https://shasec.my.id/en/articles/spf-dkim-dmarc-bimi/A technical guide for domain owners and email administrators who want to reduce spoofing and improve mail trust.https://shasec.my.id/en/articles/subdomain-takeover-dangling-dns-umkm-guide/Mon, 03 Aug 2026 00:00:00 +0000https://shasec.my.id/en/articles/subdomain-takeover-dangling-dns-umkm-guide/You delete the Shopify store but leave shop.yourdomain.id pointing to it. An attacker claims that name and hosts a fake login on your domain. Learn how dangling DNS creates subdomain takeover and the fix you run in one afternoon.https://shasec.my.id/en/articles/secure-wordpress-website-defacement-malware-protection/Sun, 26 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/secure-wordpress-website-defacement-malware-protection/Hardening guide for small business WordPress: updates, file permissions, 2FA, 3-2-1 backup, WAF deployment, and clear incident response when defaced or infected. Practical steps you can apply today.https://shasec.my.id/en/articles/quantum-computing-and-cybersecurity/Sun, 26 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/quantum-computing-and-cybersecurity/Quantum computers powerful enough to break RSA encryption don't exist today. But cybercriminals are already collecting your encrypted data now to decrypt later. Understand the harvest-now-decrypt-later threat and the concrete steps you can take.https://shasec.my.id/en/articles/encrypted-dns-doh-dot-setup/Sat, 25 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/encrypted-dns-doh-dot-setup/Your ISP sees every domain you visit. Public WiFi operators see it too. Encrypted DNS (DoH and DoT) hides your queries inside TLS, preventing surveillance, censorship, and tampering. This guide compares providers, explains setup on routers, devices, and browsers, and covers the tradeoffs you need to know.https://shasec.my.id/en/articles/ransomware-3-0-for-individuals/Sat, 25 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/ransomware-3-0-for-individuals/Ransomware no longer targets only large corporations. Triple extortion, AI-powered malware, and Ransomware-as-a-Service make individuals profitable targets. Understand this evolving threat and how to protect yourself.https://shasec.my.id/en/articles/api-security-guide-for-everyone/Fri, 24 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/api-security-guide-for-everyone/APIs power almost every app you use daily. Every insecure API can become an entry point for attackers to steal data, take over accounts, or bring down systems. Understand the risks and how to protect yourself.https://shasec.my.id/en/articles/how-to-collect-digital-evidence-online-fraud-police-report/Fri, 24 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/how-to-collect-digital-evidence-online-fraud-police-report/Practical guide to collect digital evidence for online fraud so your police report stands strong: forensic screenshots, transfer trails, chat headers, link preservation, and a timeline template investigators accept.https://shasec.my.id/en/articles/threat-modeling-personal-security/Fri, 24 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/threat-modeling-personal-security/Security advice without context is noise. Threat modeling gives you a map: what you protect, who you protect it from, how they might attack, and what you do about it. This guide adapts professional threat modeling (STRIDE, attack trees, kill chains) for individuals and families. No security background required.https://shasec.my.id/en/articles/hardware-security-keys-passkeys-deep-dive/Thu, 23 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/hardware-security-keys-passkeys-deep-dive/Passwords are the weak link. Hardware security keys and passkeys replace them with cryptographic credentials that cannot be phished, reused, or guessed. This deep dive covers FIDO2, WebAuthn, passkey sync, form factors, backup strategies, and migration from authenticator apps.https://shasec.my.id/en/articles/identity-based-attacks-deep-dive/Thu, 23 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/identity-based-attacks-deep-dive/Attackers no longer break into systems from outside. They log in with valid credentials. Credential stuffing, token theft, and MFA fatigue turn your identity into the primary security weak point.https://shasec.my.id/en/articles/ai-autonomous-cyber-attacks/Wed, 22 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/ai-autonomous-cyber-attacks/Autonomous AI already leads cyber attack campaigns without human intervention. Reconnaissance, exploitation, lateral movement, and personalized extortion all performed by AI agents that adapt on their own. Understand this new threat and how to protect yourself.https://shasec.my.id/en/articles/dark-web-monitoring-check-data-breach-dark-web/Wed, 22 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/dark-web-monitoring-check-data-breach-dark-web/Beginner guide to dark web monitoring: difference between deep web and dark web, how to check if your email and phone leaked, free and paid monitoring services, plus the right response when your data shows up.https://shasec.my.id/en/articles/digital-estate-planning-digital-legacy/Wed, 22 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/digital-estate-planning-digital-legacy/What happens to your digital life when you die? Email, crypto, passwords, photos, domains, and accounts do not vanish. Without a plan, your family faces locked doors, legal battles, and permanent loss. This guide covers the tools, legal frameworks, and practical steps to secure your digital legacy.https://shasec.my.id/en/articles/supply-chain-attacks-third-party-risk/Tue, 21 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/supply-chain-attacks-third-party-risk/Supply chain attacks target the weakest link in your digital ecosystem: the vendors, tools, and services you trust. Learn how these attacks work, why small businesses are prime targets, and practical steps to reduce your exposure without enterprise budgets.https://shasec.my.id/en/articles/ai-cybersecurity-threats/Mon, 20 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/ai-cybersecurity-threats/AI is no longer future technology: it has already changed how we secure systems and how cybercriminals launch attacks. Understand both sides of this equation to stay ahead of the curve.https://shasec.my.id/en/articles/biometric-security-risks-fingerprint-face-id-ktp/Sun, 19 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/biometric-security-risks-fingerprint-face-id-ktp/Deep dive into biometric security risks: why fingerprints and face cannot be reset, spoofing and deepfake attacks, e-ID storage risks, and how to use biometrics safely without full dependence.https://shasec.my.id/en/articles/how-to-report-cybercrime-indonesia-police-kominfo/Wed, 15 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/how-to-report-cybercrime-indonesia-police-kominfo/Complete guide to reporting cybercrime in Indonesia: different channels for fraud, hacking, and illegal content, documents to prepare, report template, and tips to get your report processed fast.https://shasec.my.id/en/articles/how-to-use-email-alias-hide-my-email-prevent-spam-breach/Sun, 12 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/how-to-use-email-alias-hide-my-email-prevent-spam-breach/Complete guide to using email aliases and Hide My Email for shopping, signups, and newsletters without exposing your main email. Reduce spam, stop credential stuffing, and easily disable leaked aliases.https://shasec.my.id/en/articles/typosquatting-and-homograph-attacks/Sat, 11 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/typosquatting-and-homograph-attacks/Understand how attackers utilize typosquatting domains and Unicode homograph characters to spoof legitimate websites, and learn how to identify Punycode deceptions.https://shasec.my.id/en/articles/passkey-migration-guide-move-from-passwords-to-passkeys/Fri, 10 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/passkey-migration-guide-move-from-passwords-to-passkeys/Complete tutorial to migrate to passkeys: what passkey and FIDO2 are, how to create passkeys in Google, Microsoft, Apple, WhatsApp, how to backup and sync, and how to recover if phone lost.https://shasec.my.id/en/articles/quishing-evolution-qr-phishing-how-to-spot-malicious-qr/Wed, 08 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/quishing-evolution-qr-phishing-how-to-spot-malicious-qr/Deep dive into quishing in 2025: fake QR in parking, fake tickets, invoices, HR docs. How attack works, why email filters fail, and 10-second checklist to scan QR safely.https://shasec.my.id/en/articles/pdp-breach-notification-72-hour-sop-for-small-business/Sun, 05 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/pdp-breach-notification-72-hour-sop-for-small-business/Practical SOP for 72-hour personal data breach notification under Indonesia PDP Law for small business: when you must report, to whom, what to include, customer email template, and audit documentation checklist.https://shasec.my.id/en/articles/smart-lock-cctv-security-prevent-spying-break-in/Fri, 03 Jul 2026 00:00:00 +0000https://shasec.my.id/en/articles/smart-lock-cctv-security-prevent-spying-break-in/Security guide for smart lock and home CCTV: risks of default passwords, encryption, firmware updates, IoT network isolation, and checklist before buying and installing so smart home does not become entry for hackers.