Reports on microsegment.io

Weekly Security Landscape: April 26 - May 2, 2026

Sat, 02 May 2026 00:00:00 +0000

The Week at a Glance

This week, the most important security stories all hit the same layer: the systems that orchestrate trust for everything else.

Hosting control planes, Windows trust paths, SAP developer pipelines, and AI agent runtimes all showed the same problem in different clothes. Attackers do not need a dramatic initial foothold if they can hijack the layer that decides who gets access, what code runs, or where secrets flow next.

Weekly Security Landscape: April 18 - 25, 2026

Sat, 25 Apr 2026 00:00:00 +0000

The Week at a Glance

This week was not defined by one giant breach.

It was defined by repeated proof that attackers do not need exotic tradecraft when trust is already overextended. Management planes, collaboration paths, developer tooling, and edge infrastructure kept turning into the fastest route from access to impact.

Cisco SD-WAN Manager, Apache ActiveMQ, SharePoint, Teams helpdesk impersonation, Vercel’s OAuth-linked exposure, Forest Blizzard’s router-to-token collection, and the Checkmarx KICS and Bitwarden CLI supply-chain chain all pointed to the same operational truth. The attack surface that matters most right now is the layer that connects systems to each other - admin consoles, brokers, package channels, OAuth grants, remote support paths, and poorly governed edge devices.

Weekly Security Landscape: April 11 - 17, 2026

Fri, 17 Apr 2026 00:00:00 +0000

The Week at a Glance

This week was not mainly about new malware families.

It was about trusted channels getting turned against defenders.

Routers became token-theft infrastructure. Browser extensions became session theft kits. Admin and endpoint management platforms kept showing up in KEV. Code-signing workflows reminded everyone that supply-chain risk is really trust-path risk. Even the noisier vulnerability stories all pointed to the same thing: attackers do not need to smash the front door if they can inherit trust from the systems that already shape traffic, identity, and policy.

Weekly Security Landscape: April 4 - 10, 2026

Fri, 10 Apr 2026 00:00:00 +0000

The Week at a Glance

This week was not really about malware. It was about trust boundaries failing in quiet, high-leverage places.

Older routers became token theft infrastructure. Helpdesks and BPOs became initial access. Mobile and endpoint management platforms kept showing up in CISA KEV. AI kept compressing the window between disclosure and weaponization. And all of it pointed to the same uncomfortable truth: the highest-risk systems are often the ones defenders still treat as support plumbing.

Weekly Security Landscape: March 28 - April 3, 2026

Fri, 03 Apr 2026 00:00:00 +0000

The Week at a Glance

This was the week supply chain attacks went industrial, management plane vulnerabilities kept stacking up, and AI proved it can write kernel exploits faster than most organizations can triage a CVE. Here’s what happened - and what it means for your architecture.

🔴 Critical: TeamPCP Supply Chain Campaign Expands

The biggest story of the month continued to grow. TeamPCP’s supply chain attack, which started with compromising Aqua Security’s Trivy vulnerability scanner via GitHub Actions, expanded to hit LiteLLM (95 million PyPI downloads/month), Checkmarx KICS, and the Axios npm package (100 million weekly downloads).

M-Trends 2025: Unpacking the Threats and Why Microsegmentation is Your Strongest Defense

Tue, 20 May 2025 00:00:00 +0000

M-Trends 2025: Unpacking the Threats and Why Microsegmentation is Your Strongest Defense

The recently released Mandiant M-Trends 2025 report offers a insightful look into the evolving cybersecurity landscape. As we digest its key findings, one thing becomes abundantly clear: attackers are becoming more opportunistic and sophisticated, exploiting any weakness they can find. For those of us focused on building resilient security architectures, the report underscores the importance of granular control and containment – principles at the heart of microsegmentation.