microsegment.io

segment all the things

Microsegmentation Fails Quietly When Policy Drifts

The first policy is only a snapshot. Containment depends on keeping it aligned with the environment.

Microsegmentation policy can decay as applications, workloads, identities, and exceptions change. This article explains how to detect policy drift, govern exceptions, and continuously prove that lateral movement paths remain closed.

Posted by Alexander Goller on Tuesday, August 4, 2026

Backup Infrastructure Needs Its Own Containment Boundary

A recovery copy is not resilient when production identities and network paths can still reach it

Ransomware operators target backup systems because destroying recovery increases leverage. This article explains how to isolate backup infrastructure, separate its identity plane, constrain management paths, and test recovery as a Zero Trust boundary.

Posted by Alexander Goller on Tuesday, July 28, 2026

avatar

Principal Solutions Architect, Zero Trust Evangelist, BSD enthusiast

FEATURED TAGS
2026 ai-security attacks cisco cloud-security containers containment cyber-resilience hard-truths identity kubernetes lateral-movement links management-plane metrics microsegmentation microservices mitre mitre-attack network-segmentation oauth ransomware segmentation supply-chain vulnerability-management weekly-roundup zero-trust