microsegment.io

segment all the things

IPv6 Must Not Bypass Your Containment Policy

One application boundary needs the same outcome over both address families

A practical dual-stack microsegmentation review: map IPv6 reachability, verify Kubernetes enforcement, and test containment separately over IPv4 and IPv6.

Posted by Alexander Goller on Tuesday, November 3, 2026

Remote Support Must Not Become Server Access

A desktop support session should not inherit a route into server administration

A practical microsegmentation design for separating remote desktop support from server administration, informed by Microsoft's reporting on helpdesk impersonation and RMM abuse.

Posted by Alexander Goller on Tuesday, October 27, 2026

Quarantine Must Stop Existing Connections

Blocking the next connection is not the same as stopping the one already carrying traffic

A practical microsegmentation quarantine drill for established sessions, with AWS security group and Kubernetes NetworkPolicy behavior, timing evidence, and scoped response controls.

Posted by Alexander Goller on Tuesday, October 20, 2026

Containment Signal: 2026-10-17

12 feed items mapped to microsegmentation themes. OT & connected devices leads the coverage signal.

Posted by microsegment.io signal monitor on Saturday, October 17, 2026

Containment Signal: 2026-10-16

11 feed items mapped to microsegmentation themes. OT & connected devices leads the coverage signal.

Posted by microsegment.io signal monitor on Friday, October 16, 2026

avatar

Principal Solutions Architect, Zero Trust Evangelist, BSD enthusiast

FEATURED TAGS
2026 ai-security attacks breach-containment cisco cloud-security containers containment containment-signal cyber-resilience hard-truths hybrid-cloud identity identity-security incident-response kubernetes lateral-movement links management-plane metrics microsegmentation microservices mitre mitre-attack network-segmentation non-human-identity oauth ot-security ransomware remote-access saas-security segmentation service-mesh supply-chain supply-chain-security third-party-risk vulnerability-management weekly-roundup workload-identity zero-trust