microsegment.io

segment all the things

The Login Worked. The Breach Did Not.

A stolen identity session should not become access to every application behind the identity provider

ReliaQuest's August 2026 social-engineering attempt shows why authentication is only the first policy decision. This article explains how device trust, per-application authorization, session controls, and microsegmentation contain a valid but hostile login.

Posted by Alexander Goller on Tuesday, August 25, 2026

Your Identity Provider Needs a Containment Boundary

When the signing key is the credential, MFA is no longer the control

Mandiant's new AD FS research shows why federation servers belong inside a Tier 0 containment boundary, with tightly governed management paths, explicit dependencies, and an incident plan built around signing-key compromise.

Posted by Alexander Goller on Tuesday, July 14, 2026

avatar

Principal Solutions Architect, Zero Trust Evangelist, BSD enthusiast

FEATURED TAGS
2026 ai-security attacks breach-containment cisco cloud-security containers containment cyber-resilience hard-truths hybrid-cloud identity identity-security kubernetes lateral-movement links management-plane metrics microsegmentation microservices mitre mitre-attack network-segmentation oauth ransomware segmentation supply-chain vulnerability-management weekly-roundup zero-trust