microsegment.io

segment all the things

The ATT&CK Segmentation Layer Is Now Updated to v19.1

The mapping stayed stable. The lesson did not get smaller.

The microsegment.io MITRE ATT&CK Network Segmentation Navigator layer has been refreshed to ATT&CK v19.1. The mappings stayed stable, and that stability says something useful about reachability, lateral movement, and containment.

Posted by Alexander Goller on Friday, July 10, 2026

What Good L3/L4 Policy Can Actually Do

A 2026 reassessment of MITRE ATT&CK, network segmentation, and practical microsegmentation

MITRE ATT&CK maps network segmentation to dozens of adversary techniques. This article reassesses what disciplined L3/L4 policy and microsegmentation can realistically do, where they help most, and where they stop.

Posted by Alexander Goller on Thursday, July 9, 2026

Voice Infrastructure Needs Containment, Too

Cisco Unified CM exploitation is a reminder that communication platforms are high-trust infrastructure

Cisco Unified CM CVE-2026-20230 shows why voice and collaboration systems need microsegmentation, management-plane isolation, and clear blast-radius boundaries before compromise turns into lateral movement.

Posted by Alexander Goller on Tuesday, July 7, 2026

Non-Human Identities Need Containment, Not Just Rotation

Service accounts, API keys, OAuth apps, and agents are now lateral movement infrastructure

Non-human identities are becoming one of the most important trust paths in modern environments. This article explains why service accounts, API keys, OAuth apps, and AI agents need microsegmentation and blast-radius control, not just secrets hygiene.

Posted by Alexander Goller on Tuesday, June 30, 2026

Microsegmentation in 2026: The Control That Turns Breach Assumption Into Architecture

Why lateral movement, cloud sprawl, identity drift, and AI agents are making containment a board-level priority

A 2026 trend view on microsegmentation: vulnerability exploitation, ransomware, identity drift, cloud complexity, and AI agents all point to the same need - smaller blast radius by design.

Posted by Alexander Goller on Tuesday, June 23, 2026

avatar

Principal Solutions Architect, Zero Trust Evangelist, BSD enthusiast

FEATURED TAGS
2026 ai-security attacks cisco cloud-security containers containment cyber-resilience hard-truths identity kubernetes lateral-movement links management-plane metrics microsegmentation microservices mitre mitre-attack network-segmentation oauth ransomware segmentation supply-chain vulnerability-management weekly-roundup zero-trust