microsegment.io

segment all the things

The Login Worked. The Breach Did Not.

A stolen identity session should not become access to every application behind the identity provider

ReliaQuest's August 2026 social-engineering attempt shows why authentication is only the first policy decision. This article explains how device trust, per-application authorization, session controls, and microsegmentation contain a valid but hostile login.

Posted by Alexander Goller on Tuesday, August 25, 2026

avatar

Principal Solutions Architect, Zero Trust Evangelist, BSD enthusiast

FEATURED TAGS
2026 ai-security attacks breach-containment cisco cloud-security containers containment cyber-resilience hard-truths identity identity-security kubernetes lateral-movement links management-plane metrics microsegmentation microservices mitre mitre-attack network-segmentation oauth ransomware segmentation supply-chain vulnerability-management weekly-roundup zero-trust