Code Decode Labs

A firewall is a checkpoint, not a strategy.
Know the difference before an attacker does.

Uber. MGM. Caesars. Three of the world's most recognisable brands. All breached in September.

🔹 September 2022 — Uber: One stolen password. One social engineering call. Full access to one of the world's most sophisticated tech companies.
🔹 September 2023 — MGM Resorts: A 10-minute conversation with an IT help desk. 30+ properties brought down. $100 million in damages.
🔹 September 2023 — Caesars Entertainment: A third-party vendor compromised. A $30 million ransom demand. $15 million reportedly paid quietly.

Three different organisations. Three different entry points. One consistent lesson.

✔ Human judgment remains the most exploited vulnerability.
✔ Third-party vendors are as much your attack surface as your core systems.
✔ The cost of recovery always exceeds the cost of prevention.

The pattern is clear. Is your defence?

Talk with our experts today.
Visit us at: codedecodelabs.com

On this auspicious occasion of Ganesh Chaturthi, we celebrate the arrival of Lord Ganesha, the remover of obstacles, the symbol of wisdom and the harbinger of new beginnings.

May Bappa's blessings guide us all towards a path of wisdom, resilience and protection in life, in business and in the digital world we navigate every single day.

Ganpati Bappa Morya!

Warm wishes from the entire Code Decode Labs family.

Most organisations invest in cybersecurity tools. Very few ever test whether they actually work.

Breach and Attack Simulation changes that.

BAS safely simulates real-world cyberattacks against your own systems — no damage, full visibility into where your defences hold and where they don't.

Because knowing you have security tools is not enough. Knowing they work is what matters.

Don't wait for a real attack to find out where you stand.

Most organisations treat cloud migration as a security upgrade.

It is not. The moment your data moves to the cloud, a new category of risk opens up—one that most security strategies still aren't fully equipped to handle.

62% of all cyber detections in India now occur in cloud environments. The average enterprise has over 3,000 misconfigured cloud assets sitting undetected. And when a misconfiguration-driven breach occurs, it takes an average of 180 days to detect it.

The most important thing to understand? 82% of these misconfigurations are caused by human error — not the cloud provider. The infrastructure is secure. What sits on top of it is the organisation's responsibility.

Cloud security is not a destination you arrive at when migration is complete. It is a continuous discipline that requires visibility, governance and monitoring every single day.

The cloud is only as secure as the way you configure it.

Talk with our experts today.
Visit us at: codedecodelabs.com

Today we celebrate the people who shaped us.

The mentors who pushed us to think differently. The leaders who showed us that knowledge is the foundation of everything. The teachers who reminded us that learning never stops — no matter how experienced you become.

In cybersecurity, that lesson rings especially true. The threat landscape evolves every single day. Staying ahead of it means never stopping learning, never assuming you know enough, and always approaching every challenge with curiosity and humility.

On this Teachers' Day, we are grateful to everyone who has been a teacher in our journey—in a classroom, in a boardroom, or anywhere in between.

Happy Teachers' Day from the entire Code Decode Labs family.

On this auspicious occasion of Janmashtami, we celebrate the birth of Lord Krishna — a symbol of wisdom, courage, and the eternal triumph of good over evil.

In a world full of challenges, may His blessings be your strongest shield. May His wisdom guide every decision you make and His protection surround everything you have built.

Wishing you and your loved ones a joyful, peaceful and blessed Janmashtami.
From the entire Code Decode Labs family.

On 31 July 2026, the RBI issued its new Cybersecurity Directions for all commercial banks and NBFCs in India.

And the single biggest shift is not technical. It is about accountability.

For years, cybersecurity in Indian banking followed a familiar pattern. The IT team managed it. The CISO owned it. The board noted it during quarterly updates and moved on.

That model is now over.

Under the new RBI Cybersecurity Directions 2026, cybersecurity has officially moved from the IT room to the boardroom. The CISO must now report directly to the board — not to the IT head. Quarterly cybersecurity reviews are mandatory at board level. And when a breach happens, scrutiny no longer stops at the IT team. It goes straight to the top.

This is not a recommendation. It is the law. Effective immediately.

For every bank and NBFC in India, the question is no longer whether to treat cybersecurity as a board-level responsibility. That decision has been made for you.

The question now is whether your organisation is actually ready for that responsibility.

We explored why this shift was inevitable long before it became regulation. Read our full perspective here: https://medium.com//why-cybersecurity-is-no-longer-an-it-decision-its-a-business-strategy-4bd0ffe1ee36

Talk with our experts today.
Visit us at: codedecodelabs.com

Look around your office right now.

The CCTV camera in the corner. The smart printer down the hall. The wireless access point in the conference room.

Every single one of them is connected to your network. And in most organisations, not a single one is being actively monitored for security threats.

820,000 IoT attacks happen every single day. 98% of IoT traffic travels completely unencrypted. The average cost of a single IoT security incident? $330,000.

Attackers are not always trying to break through your strongest defences. They are looking for the device nobody thought to secure.

If it is connected, it needs to be secured.

Talk with our experts today.
Visit us at: codedecodelabs.com

There are two types of organisations when it comes to compliance.

The ones that do it because they have to. And the ones that do it because they understand what it's worth.

In 2026, with regulations tightening across the EU, India, and globally, the gap between those two approaches is showing up in tangible ways.

Organisations with strong, continuous compliance postures are winning enterprise contracts, building deeper client trust and moving through procurement faster. In today's environment, demonstrable security governance is a differentiator—not just a legal obligation.

We broke down why the compliance conversation has fundamentally changed and what it means for enterprise security teams right now.

Read the blog to learn more: https://codedecodelabs.medium.com/compliance-is-no-longer-just-a-legal-obligation-it-is-a-competitive-advantage-52abacc697f5