microsegment.io

segment all the things

Remote Support Must Not Become Server Access

A desktop support session should not inherit a route into server administration

A practical microsegmentation design for separating remote desktop support from server administration, informed by Microsoft's reporting on helpdesk impersonation and RMM abuse.

Posted by Alexander Goller on Tuesday, October 27, 2026

Backup Infrastructure Needs Its Own Containment Boundary

A recovery copy is not resilient when production identities and network paths can still reach it

Ransomware operators target backup systems because destroying recovery increases leverage. This article explains how to isolate backup infrastructure, separate its identity plane, constrain management paths, and test recovery as a Zero Trust boundary.

Posted by Alexander Goller on Tuesday, July 28, 2026

Microsegmentation in 2026: The Control That Turns Breach Assumption Into Architecture

Why lateral movement, cloud sprawl, identity drift, and AI agents are making containment a board-level priority

A 2026 trend view on microsegmentation: vulnerability exploitation, ransomware, identity drift, cloud complexity, and AI agents all point to the same need - smaller blast radius by design.

Posted by Alexander Goller on Tuesday, June 23, 2026

avatar

Principal Solutions Architect, Zero Trust Evangelist, BSD enthusiast

FEATURED TAGS
2026 ai-security attacks breach-containment cisco cloud-security containers containment containment-signal cyber-resilience hard-truths hybrid-cloud identity identity-security incident-response kubernetes lateral-movement links management-plane metrics microsegmentation microservices mitre mitre-attack network-segmentation non-human-identity oauth ot-security ransomware remote-access saas-security segmentation service-mesh supply-chain supply-chain-security third-party-risk vulnerability-management weekly-roundup workload-identity zero-trust