Hisham Mir is a cybersecurity professional with 10+ years of hands-on experience and Co-Founder & CTO of SecurityWall. He leads real-world penetration testing and vulnerability research, and is an experienced bug bounty hunter.
GDPR
GDPR compliance in the Netherlands requires more than simply following EU-wide rules. While the General Data Protection Regulation applies across Europe, Dutch organizations must also comply with national implementation requirements that affect how the law works in practice. With enforcement increasing and regulatory scrutiny growing, understanding how to comply with
GDPR
increasingly important as enforcement across Europe continues to intensify. Recent GDPR enforcement trends show that regulators are paying closer attention to how national implementation laws are applied in practice, especially in countries like the Netherlands where additional rules supplement EU-wide obligations. For organizations operating in or targeting the Dutch market,
SAMA
Cybersecurity in Saudi Arabia’s financial sector has entered a resilience-first regulatory era. Under the supervision of Saudi Central Bank (SAMA), financial institutions are no longer assessed solely on the existence of cybersecurity controls, but on their proven effectiveness under real-world attack conditions. Ethical Red Teaming has emerged as one
SAMA
Interaction Length Consistent Refusal Rate Partial Compliance Observed 1 turn High Rare 3–5 turns Medium Occasional 6+ turns Low Common
LLM Security
Large Language Models (LLMs) have become central to next-generation applications, powering everything from customer service chatbots to complex decision support tools. But with increased use comes increased risk. Adversaries are not just exploiting single prompt bugs; they are actively probing, manipulating, and breaking models using systematic adversarial techniques. This article
SAMA
SAMA penetration testing is often misunderstood as a technical checkbox rather than a regulatory assurance mechanism. Many banks and financing companies in Saudi Arabia perform penetration testing or VAPT regularly, yet still face challenges during SAMA audits. The issue is rarely the absence of testing. It is the misalignment between
LLM Security
× Only tested with one prompt? Multi-turn jailbreak testing · Ready? Schedule a Meeting → QUICK ANSWER · LLM JAILBREAKING MULTI-TURN RISK Jailbreaking a production LLM is no longer about finding one clever prompt. Black-box models are stochastic systems accessed through unlimited, repeatable interaction — which turns the exchange into a repeated game where retries
NESA
Organizations operating in the UAE increasingly find themselves navigating multiple cybersecurity and compliance frameworks at the same time. What often starts as a governance initiative such as ISO 27001 certification quickly becomes more complex once national regulatory requirements like NESA and oversight by SIA enter the picture. This complexity leads
NESA
Most organizations do not fail NESA assessments because of missing security tools. They fail because governance, evidence, and accountability are not structured in a way regulators expect. A NESA audit is not a certification exercise or a third-party review. It is a regulatory assessment focused on how effectively an organization
UAE Compliance
What Are the NESA Compliance Requirements? NESA compliance is built on a single technical document: the UAE Information Assurance Standards (IAS) a national cybersecurity framework developed by the National Electronic Security Authority (now the UAE Signals Intelligence Agency, SIA). The IAS defines exactly what organisations must implement to protect the
UAE Compliance
NESA, NESA UAE, and NESA compliance have increased steadily as cybersecurity regulation in the UAE matures. Yet many organizations still struggle to understand what NESA actually is and whether it applies to them whereas same goes for NESA Audit and assessment process. To understand the specific security domains, controls, and
JWT Security
Our previous guides cover how to securely design, configure, and analyze JSON Web Tokens including JWT Security Best Practices, the hands-on JWT Analyzer Security Checker Guide, and JWT Analyzer vs Other Token Debuggers this post shifts the focus entirely to JWT pentesting. Instead of defensive configuration or tool usage, it