microsegment.io

segment all the things

Hard Truths #2: Patching Is Whack-a-Mole, Not Strategy

The structural gap between exploit and patch is growing. Architecture is the only answer.

Attackers weaponize vulnerabilities in hours. Your patch cycle takes weeks. The math doesn't work. Here's what does.

Posted by Alexander Goller on Tuesday, March 31, 2026

Hard Truths #1: Your Security Tools Are the Attack Surface

Four vendors. Same pattern. Management consoles are the new perimeter.

Cisco FMC, SolarWinds, BeyondTrust, VMware - the tools protecting your network became the entry point. Why the management plane is the most dangerous attack surface in enterprise security.

Posted by Alexander Goller on Thursday, March 26, 2026

Attackers think in graphs

Defenders think in tables

The Graph Advantage: Why Attackers Think in Networks While Defenders Think in Rows When a security analyst opens their SIEM dashboard, they typically see what defenders have seen for decades: endless tables of logs, sorted by timestamp, filtered by IP address, grouped by event type. Meanwhile, somewhere in the digital shadows, an attacker is mapping out their target’s infrastructure like a cartographer charting new territory—not in rows and columns, but as an interconnected web of relationships, vulnerabilities, and opportunities.

Posted by "" on Wednesday, May 14, 2025

The microsegmentation landscape in 2025

Current state and future directions

The Microsegmentation Landscape in 2025: Current State and Future Directions Introduction Microsegmentation has evolved significantly since its early days as a network security approach, becoming a cornerstone of modern zero trust security architectures. As we move through 2025, the microsegmentation landscape continues to mature with new technologies, integration capabilities, and use cases expanding beyond traditional data center environments. This overview examines the current state of microsegmentation, key trends, leading vendors, and future directions.

Posted by "Alex Goller" on Thursday, April 17, 2025

8 Microsegmentation pitfalls to avoid

I read a nice article by Ericka Chickowski on Darkreading the other day. The article gives some great guidance on what to do and not to do when starting your segmentation journey. Here are some comments. The practice of microsegmentation takes the principles of least privilege to their logical conclusion by atomizing the isolating techniques of network segmentation. Security architects use microsegmentation to create security boundaries that can extend all the way into individual workloads by controlling East-West, or server-to-server, traffic flows between applications. The bulkheads put up through microsegmentation make it possible to better limit lateral movement of attackers, even in a cloudy world with no perimeter.

Posted by Alexander Goller on Monday, September 30, 2019