microsegment.io

segment all the things

Remote Support Must Not Become Server Access

A desktop support session should not inherit a route into server administration

A practical microsegmentation design for separating remote desktop support from server administration, informed by Microsoft's reporting on helpdesk impersonation and RMM abuse.

Posted by Alexander Goller on Tuesday, October 27, 2026

OT Integrator Access Needs An Expiry Date

Separate retained engineering knowledge from live access, then prove you can disconnect one supplier

The September 2026 FBI/CISA ICS integrator guidance raises two different containment problems: engineering data outside the plant and remote access into it. A practical microsegmentation pattern for supplier-specific access, project closure, and independent revocation.

Posted by Alexander Goller on Tuesday, September 29, 2026

OT Segmentation Must Survive Edge Compromise

The Polish energy-sector attack showed why VLANs are not containment when one administrator can reach every control subnet

CERT Polska's investigation of the December 2025 energy-sector attack shows how compromised VPN and identity control paths can flatten OT segmentation. This article turns the incident into a practical containment design for remote sites, SCADA, RTUs, HMIs, and safety-critical systems.

Posted by Alexander Goller on Tuesday, August 11, 2026

avatar

Principal Solutions Architect, Zero Trust Evangelist, BSD enthusiast

FEATURED TAGS
2026 ai-security attacks breach-containment cisco cloud-security containers containment containment-signal cyber-resilience hard-truths hybrid-cloud identity identity-security incident-response kubernetes lateral-movement links management-plane metrics microsegmentation microservices mitre mitre-attack network-segmentation non-human-identity oauth ot-security ransomware remote-access saas-security segmentation service-mesh supply-chain supply-chain-security third-party-risk vulnerability-management weekly-roundup workload-identity zero-trust