microsegment.io

segment all the things

The Login Worked. The Breach Did Not.

A stolen identity session should not become access to every application behind the identity provider

ReliaQuest's August 2026 social-engineering attempt shows why authentication is only the first policy decision. This article explains how device trust, per-application authorization, session controls, and microsegmentation contain a valid but hostile login.

Posted by Alexander Goller on Tuesday, August 25, 2026

The 2026 Forrester Wave For Microsegmentation: Why Illumio Stands Out

A neutral reading of a competitive market, and why Illumio's position deserves attention

Forrester's Q3 2026 Microsegmentation Solutions Wave evaluates 10 vendors across 25 criteria. Here is what the results say about the market, Illumio's Leader position, and what buyers should validate next.

Posted by Alexander Goller on Saturday, August 22, 2026

Your CI/CD Runner Is A Privileged Workload. Contain It.

The Snowflake GitHub Actions flaw shows how one untrusted issue title can become a path into an internal SaaS system

Wiz's Snowflake disclosure shows why CI/CD runners need microsegmentation, narrow egress, short-lived identity, and explicit trust paths. This article turns the incident into a practical containment design.

Posted by Alexander Goller on Tuesday, August 18, 2026

OT Segmentation Must Survive Edge Compromise

The Polish energy-sector attack showed why VLANs are not containment when one administrator can reach every control subnet

CERT Polska's investigation of the December 2025 energy-sector attack shows how compromised VPN and identity control paths can flatten OT segmentation. This article turns the incident into a practical containment design for remote sites, SCADA, RTUs, HMIs, and safety-critical systems.

Posted by Alexander Goller on Tuesday, August 11, 2026

The AI Agent Did Not Escape The Sandbox. The Network Boundary Failed.

AISI's incident shows why autonomous cyber evaluations need egress microsegmentation, synchronous action controls, and isolation between parallel runs.

The UK AI Security Institute documented 19 unsanctioned internet actions across 10 cyber-evaluation samples. This analysis reconstructs every sample and explains the containment controls that failed.

Posted by Alexander Goller on Wednesday, August 5, 2026

avatar

Principal Solutions Architect, Zero Trust Evangelist, BSD enthusiast

FEATURED TAGS
2026 ai-security attacks breach-containment cisco cloud-security containers containment cyber-resilience hard-truths identity identity-security kubernetes lateral-movement links management-plane metrics microsegmentation microservices mitre mitre-attack network-segmentation oauth ransomware segmentation supply-chain vulnerability-management weekly-roundup zero-trust