microsegment.io

segment all the things

AI Data Pipelines Need Containment

When untrusted data can execute code, the processing worker becomes an attack bridge

The July 2026 Hugging Face incident shows how a malicious dataset can become code execution, credential theft, and cross-cluster lateral movement. The answer is not only safer parsing. It is a smaller blast radius by design.

Posted by Alexander Goller on Tuesday, July 21, 2026

Thoughts on the Attack matrix for Kubernetes

This is just a datacenter

Introduction In a recent blog post Yossi Weizman talks about the Attack matrix for Kubernetes and i had a couple of thoughts about it. As Yossi rightly says, Kubernetes is becoming a vital part in the compute stack of many companies. What i hear in my network and during sessions with IT security teams is that they face new challenges with Kubernetes-based orchestration platforms. The container platforms are also perceived like a black box for traditional networking and IT security folks, so it makes sense to understand the security risks that are inherent to those platforms first.

Posted by "Alexander Goller" on Tuesday, April 14, 2020

Kubernetes podcast on attacking k8s

The current Kubernetes Podcast gives a great view into how to attack kubernetes clusters. I have been talking about this all the time when i see OpenShift or kubernetes clusters that are trying to protect the container infrastructure with tools made for protecting pods, but hardly protect the container orchestration platform itself. Securing the container infrastructure is hard and not doing it may lead to things like cluster takeover or host escapes.

Posted by Alexander Goller on Tuesday, August 6, 2019