microsegment.io

segment all the things

The Email Security Gateway Is Now An Attack Origin

CVE-2026-76461 turns one crafted message into a root-level containment problem

Cisco Secure Email Gateway CVE-2026-76461 is actively exploited and can provide root command execution through email parsing. This article explains how to contain the appliance across mail, management, egress, identity, and evidence paths.

Posted by Alexander Goller on Tuesday, September 15, 2026

When The Network Infrastructure Lies

Fire Ant shows why routers, TACACS, and telemetry systems need separate containment and evidence paths

Sygnia's Fire Ant investigation shows how compromised routers and authentication infrastructure can provide reach, steal credentials, and suppress the evidence defenders rely on. This article turns the incident into a practical microsegmentation and forensic-readiness design.

Posted by Alexander Goller on Tuesday, September 1, 2026

Voice Infrastructure Needs Containment, Too

Cisco Unified CM exploitation is a reminder that communication platforms are high-trust infrastructure

Cisco Unified CM CVE-2026-20230 shows why voice and collaboration systems need microsegmentation, management-plane isolation, and clear blast-radius boundaries before compromise turns into lateral movement.

Posted by Alexander Goller on Tuesday, July 7, 2026

Weekly Security Landscape: April 18 - 25, 2026

Why overextended trust kept turning normal infrastructure into the fastest path to impact

This week's biggest security stories through a microsegmentation lens: exposed management planes, SaaS and OAuth trust failures, developer-tool compromise, and router-driven token theft.

Posted by Alexander Goller on Saturday, April 25, 2026

Weekly Security Landscape: April 11 - 17, 2026

Why trusted channels became the easiest way to lose containment

This week's biggest security stories through a microsegmentation lens: router-level token theft, code-signing workflow exposure, malicious extensions, KEV pressure, and control-plane trust failures everywhere.

Posted by Alexander Goller on Friday, April 17, 2026

avatar

Principal Solutions Architect, Zero Trust Evangelist, BSD enthusiast

FEATURED TAGS
2026 ai-security attacks breach-containment cisco cloud-security containers containment cyber-resilience hard-truths hybrid-cloud identity identity-security kubernetes lateral-movement links management-plane metrics microsegmentation microservices mitre mitre-attack network-segmentation oauth ransomware segmentation supply-chain vulnerability-management weekly-roundup zero-trust