microsegment.io

segment all the things

OT Integrator Access Needs An Expiry Date

Separate retained engineering knowledge from live access, then prove you can disconnect one supplier

The September 2026 FBI/CISA ICS integrator guidance raises two different containment problems: engineering data outside the plant and remote access into it. A practical microsegmentation pattern for supplier-specific access, project closure, and independent revocation.

Posted by Alexander Goller on Tuesday, September 29, 2026

The Email Security Gateway Is Now An Attack Origin

CVE-2026-76461 turns one crafted message into a root-level containment problem

Cisco Secure Email Gateway CVE-2026-76461 is actively exploited and can provide root command execution through email parsing. This article explains how to contain the appliance across mail, management, egress, identity, and evidence paths.

Posted by Alexander Goller on Tuesday, September 15, 2026

Your Microsegmentation Policy Is Not Proven Until You Test The Deny

A clean rule set is not evidence that lateral movement paths are closed

Microsegmentation only reduces blast radius when denied paths are tested from real workloads. This article presents a practical method for validating policy enforcement, identity context, failure behavior, and containment over time.

Posted by Alexander Goller on Tuesday, September 8, 2026

The 2026 Forrester Wave For Microsegmentation: Why Illumio Stands Out

A neutral reading of a competitive market, and why Illumio's position deserves attention

Forrester's Q3 2026 Microsegmentation Solutions Wave evaluates 10 vendors across 25 criteria. Here is what the results say about the market, Illumio's Leader position, and what buyers should validate next.

Posted by Alexander Goller on Saturday, August 22, 2026

Your CI/CD Runner Is A Privileged Workload. Contain It.

The Snowflake GitHub Actions flaw shows how one untrusted issue title can become a path into an internal SaaS system

Wiz's Snowflake disclosure shows why CI/CD runners need microsegmentation, narrow egress, short-lived identity, and explicit trust paths. This article turns the incident into a practical containment design.

Posted by Alexander Goller on Tuesday, August 18, 2026

avatar

Principal Solutions Architect, Zero Trust Evangelist, BSD enthusiast

FEATURED TAGS
2026 ai-security attacks breach-containment cisco cloud-security containers containment containment-signal cyber-resilience hard-truths hybrid-cloud identity identity-security kubernetes lateral-movement links management-plane metrics microsegmentation microservices mitre mitre-attack network-segmentation non-human-identity oauth ot-security ransomware remote-access saas-security segmentation service-mesh supply-chain supply-chain-security third-party-risk vulnerability-management weekly-roundup workload-identity zero-trust