Portfolio · Blog
Practical insights from enterprise security engineering, including threat detection, network hardening, NGFW architecture, and lessons learned from real-world deployments.
14
Articles
6
Topics
New
Featured below
Spotlight
Start with the latest writeup — deep dives from real security projects.
5 min read
When I look back at my journey starting from July 2021 all the way to completing my final requirements, enrolling in the BSc (Hons) in Information Technology specializing in Computer Systems and Network Engineering (CSNE) at the Sri Lanka Institute of Information Technology (SLIIT) was one of the most defining choices of my professional life.
Archive
13 posts in the library
Ever logged onto a coffee shop's "free" Wi-Fi and did your office work while enjoying a good cup of coffee freely and happily, did you feel completely safe on free Wi-Fi? Think again. Behind that open connection lies a silent playground for hackers where passwords don't even need to be cracked, because your active sessions are stolen in plain sight. Discover why multi-factor authentication isn't enough and what you can do right now to protect your data before your next public login. Read the full post to uncover the hidden traps of unsecured networks!
Enterprise environments are facing significant security threats after the confirmation that ransomware operators are actively exploiting two high-severity zero-day vulnerabilities affecting SonicWall Secure Mobile Access (SMA) 1000 appliances.
Tags, ports, PVIDs, and trunks explained from the ground up, starting with the problem VLANs actually solve
with AI tools automating more technical work, do certifications still carry weight? The data says yes, and arguably more than before. Read the Part 2 of our previous conversation about certification courses.
If you thought Windows Defender was the one piece of your security stack that couldn't be turned against you, this week's news might change your mind. Microsoft has confirmed it's building an emergency fix for a freshly disclosed vulnerability in its own malware-scanning engine. The bug is being called RoguePlanet. Read the complete article here.
If you're trying to break into IT in 2026, you've probably noticed the same five acronyms showing up everywhere: CCNA, CCNP, AWS, Azure, and ISC2. They come from different vendors, cover different skills, and lead to different jobs, but they all share one thing in common: employers are actively paying more for people who hold them. The challenge for beginners isn't whether certifications matter (they clearly do), it's figuring out which one to chase first when you can't realistically pursue all five at once. This guide breaks down what each certification actually does for your career, what the current salary and demand data looks like, and most importantly, how to decide where to start. let's understand the certification path in depth for a better career path.
As remote and hybrid work became permanent rather than temporary, the old model of "connect to the VPN and you're on the network" started to look like a liability rather than a convenience. ZTNA flips that model.
In 2023, a major financial services firm suffered a data breach not through a network intrusion but through a single misconfigured API endpoint. Attackers didn't need to break through firewalls or crack credentials. They simply sent malformed requests that the application quietly accepted, and walked out with millions of customer records.
Choosing the wrong software, hardware platform, or vendor, can lead to unnecessary costs and missed business objectives. To mitigate these, enterprises worldwide rely on a trusted compass: the Gartner Magic Quadrant.
At its core, cybersecurity isn't just about deploying the most expensive box in the rack; it’s about discipline. Before an organization can successfully implement advanced threat detection, it has to master the fundamentals.
Check Point research has identified a critical vulnerability of authentication bypass in there VPN functionality on certain appliances under specific conditions.
In the early days of networking, static routing or basic dynamic protocols were enough to keep business data moving. But as enterprise environments have become more distributed.
This perimeter-based model relied on static defenses such as firewalls, VPNs, and intrusion detection systems (IDS) to keep attackers out while assuming that everything within the internal network was inherently safe.
