microsegment.io

segment all the things

Recommended reading: Cyber Resilience: A Perishable Skill That Needs Practice

Recommended Reading: Cyber Resilience: A Perishable Skill That Needs Practice

Great piece on LinkedIn by Prof. Dan Haagman:

Cyber resilience is like going to the gym: skip your workouts and you’ll get flabby fast. His big insight? Even seasoned execs throw out the playbook under pressure and just wing it.

The fix? Get those tabletop exercises scheduled and keep adversary sims running. Your DR plan from 2015 won’t cut it against modern ransomware. Building muscle memory through practice is what separates the pros from the panicked.


The microsegmentation landscape in 2025

Current state and future directions

The Microsegmentation Landscape in 2025: Current State and Future Directions

Introduction

Microsegmentation has evolved significantly since its early days as a network security approach, becoming a cornerstone of modern zero trust security architectures. As we move through 2025, the microsegmentation landscape continues to mature with new technologies, integration capabilities, and use cases expanding beyond traditional data center environments. This overview examines the current state of microsegmentation, key trends, leading vendors, and future directions.


Thoughts on the Attack matrix for Kubernetes

This is just a datacenter

Introduction

In a recent blog post Yossi Weizman talks about the Attack matrix for Kubernetes and i had a couple of thoughts about it. As Yossi rightly says, Kubernetes is becoming a vital part in the compute stack of many companies. What i hear in my network and during sessions with IT security teams is that they face new challenges with Kubernetes-based orchestration platforms. The container platforms are also perceived like a black box for traditional networking and IT security folks, so it makes sense to understand the security risks that are inherent to those platforms first.


The Service Mesh

What Every Software Engineer Needs to Know about the World's Most Over-Hyped Technology

Whenever you hear people speak about containers and container networking, there is a high chance of the Service Mesh coming up as a topic. It is a real hype and while being on the twitters i discovered this great article by William Morgan of @BuoyantIO, the creator of Linkerd.

William does a great job of explaining the technology, the use cases, what to use it for and what not and i have a couple of comments to add:


Mitre ATT&CK and Segmentation

When people think about their strategic IT security projects, they often think of the last incident they were affected of and try to mitigate that, often by using technology only.

This is a valid approach and probably is not so wrong, because we often see waves of incidents rolling in, the wannacry wave, other ransomware waves, certain exploit kits or malware waves. So it makes some sense to concentrate on those threats when they happen. Of course you should have done something long before it hit you or other people, but the nature of IT security is that this hardly ever happens.