microsegment.io

segment all the things

Weekly Security Landscape: March 28 - April 3, 2026

Supply chain attacks at scale, management plane carnage, and why containment matters more than ever

The week's biggest cybersecurity events through a microsegmentation lens. TeamPCP's supply chain campaign expands, management consoles keep falling, and AI accelerates everything.

Posted by Alexander Goller on Friday, April 3, 2026

Hard Truths #2: Patching Is Whack-a-Mole, Not Strategy

The structural gap between exploit and patch is growing. Architecture is the only answer.

Attackers weaponize vulnerabilities in hours. Your patch cycle takes weeks. The math doesn't work. Here's what does.

Posted by Alexander Goller on Tuesday, March 31, 2026

Hard Truths #1: Your Security Tools Are the Attack Surface

Four vendors. Same pattern. Management consoles are the new perimeter.

Cisco FMC, SolarWinds, BeyondTrust, VMware - the tools protecting your network became the entry point. Why the management plane is the most dangerous attack surface in enterprise security.

Posted by Alexander Goller on Thursday, March 26, 2026

NIST publishes a zerotrust architecture recommendation

The US NIST published a great guide on a zero trust architecture that definitely is worth reading and details the elements, deployment and deployment scenarios and reference to other material to help people get started with zero trust.

Posted by Alexander Goller on Friday, October 11, 2019

ACT IAC on Zero Trust trends

The American Council for Technology-Industry Advisory Council (ACT-IAC), a non commercial organisation for creating a more innovative government published a paper on Zero Trust I would recommend this paper for anybody remotely thinking about Zero Trust, be it because you start thinking about introducing it or because it is just one of those trends that you want to catch up on. There is a huge amount of truth and knowledge in this document and it is not having any marketing in it. I read it and thought this is sound advice for anyone that looks to improve their security posture with the ultimate, long term Zero Trust goal in mind.

Posted by Alexander Goller on Sunday, August 25, 2019