Loading story…
Microsegmentation, widely promoted as a critical strategy for limiting lateral movement by attackers and reducing breach impact, remains only partially implemented in most large enterprises. Despite its promise to enhance architectural clarity and security, organizations face significant hurdles including operational complexity, policy maintenance difficulties, audit challenges, and growing technical debt. As applications and environments evolve, initial segmentation policies often become unwieldy, leading to policy drift and a proliferation of ad hoc exceptions that undermine the intended security benefits.
A study by Carnegie Mellon University highlighted that issues such as policy drift, latency trade-offs, and orchestration friction tend to escalate after the first year of microsegmentation operations. These challenges, combined with limited project scope and the ongoing evolution of enterprise IT environments, have made comprehensive microsegmentation a difficult goal for many security teams. The result is that, while microsegmentation is recognized as a best practice, its full realization remains elusive for most organizations due to persistent governance and operational barriers.
See the reporting duties and controls this puts on the clock.
2 events from the most recent confirmed update back to the earliest known activity.
A study published in early 2026 analyzed 400 U.S. network security practitioners who had experienced failed segmentation efforts and identified four recurring failure patterns: Perfect Storm, Diffuse Friction, Operational Drag, and Scope and Visibility Trap. The research found campus networks and Layer-2 macro-segmentation were more associated with severe failure types and concluded that remediation should be tailored to the specific failure pattern rather than relying only on general project management fixes.
Initial story creation
See what this changes for your reporting obligations and which controls it puts on the clock.
3 references tracked. Mallory keeps watching after this page renders.
helpnetsecurity.com
Open sourcebankinfosecurity.com
Open sourcegovinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Organizations are increasingly challenged by the rapid evolution of technology and the corresponding rise in cybercrime, with global costs escalating by nearly 20% annually. Many businesses, particularly small to mid-sized enterprises, struggle to scale their cybersecurity defenses in line with these growing threats. Security experts emphasize that embedding cybersecurity into business strategy, culture, and daily operations is essential for effective risk management and cost control. Rather than treating security as a last-minute addition or a cost center, organizations are encouraged to view it as a value driver that can accelerate time to market and reduce operational friction. Sean D. Mack, a seasoned technology leader and former CISO, advocates for aligning security initiatives with top business goals and integrating them into every facet of the organization. He highlights the importance of fostering a proactive security culture, where teams are trained to anticipate risks and contribute to long-term risk reduction. The use of fractional CISOs is presented as a cost-effective way for organizations to scale their security leadership without incurring the expense of a full-time executive. In parallel, businesses face mounting IT complexity as they rapidly adopt new technologies, leading to overlapping networks, data silos, and tool sprawl. This complexity often stems from hasty decisions made to meet business demands, resulting in systems that are difficult to manage and secure. Common triggers for this complexity include rapid growth, tool overload, disconnected teams, compliance pressures, and the coexistence of legacy and modern systems. Experts argue that clarity and structured decision-making are crucial to overcoming these challenges, advocating for focused, organized, and well-directed security strategies. By addressing the root causes of IT complexity and embedding security into the organizational fabric, businesses can transform security from a perceived barrier into a true enabler of growth and innovation. This approach not only reduces long-term costs but also positions organizations to respond more effectively to evolving cyber threats. Ultimately, the integration of security strategy with business objectives and IT architecture is seen as the key to sustainable risk management and operational excellence. Organizations that succeed in this integration are better equipped to navigate regulatory changes, technological advancements, and the ever-present threat landscape. The shift from reactive to proactive security, supported by expert guidance and clear communication across teams, is essential for maintaining resilience in a complex digital environment. As technology continues to advance, the ability to simplify and align security with business needs will be a defining factor in organizational success.
Jul 12, 2026
Organizations are increasingly challenged by the risks posed by legacy systems, unmanageable devices, and unknown assets within their networks. Security leaders and experts emphasize the importance of comprehensive asset discovery and visibility as foundational steps to effective vulnerability management. Automated solutions that map infrastructure, including unauthenticated and legacy devices, are critical for identifying blind spots and prioritizing risk. Experts caution against over-reliance on traditional CVE-based tools, highlighting that many real-world breaches exploit default credentials, poor configurations, and unmanaged assets that may not appear in standard vulnerability reports. Rapid response capabilities, such as real-time intelligence and query-based searches, are recommended to quickly identify and mitigate zero-day exposures. In sectors like healthcare, the long lifecycle of medical devices presents unique challenges, as many systems cannot be patched or easily replaced. Security leaders advocate for network segmentation and close collaboration with vendors to manage these risks, while also promoting proactive, risk-based approaches that go beyond compliance checklists. Commentary from industry professionals underscores that legacy and unmanageable systems are often targeted by advanced persistent threats and botnets, with attackers leveraging automation and AI to exploit exposures. Addressing these challenges requires breaking down silos between IT, OT, and security teams, and adopting strategies that prioritize visibility, risk reduction, and continuous improvement across all assets.
Jun 29, 2026
Operational technology (OT) environments, such as manufacturing lines, refineries, pipelines, and rail control systems, are increasingly adopting advanced cyber defense strategies to address the unique challenges posed by modern cyber threats. Traditional perimeter-focused security models are being replaced by breach-ready cyber defense approaches that assume compromise is inevitable and prioritize rapid containment and resilience. This shift is driven by the recognition that OT systems often involve long-lived equipment, complex dependencies, and components that cannot be easily patched, making them particularly vulnerable to sophisticated attacks. At the CS4CA Europe conference, industry experts highlighted the growing need for virtual segmentation in OT environments as a practical means to implement zero trust principles and contain threats before they can propagate. Virtual segmentation allows organizations to enforce security boundaries within heterogeneous OT networks, even when physical segmentation is impractical or impossible. The approach emphasizes mapping attack paths, reducing the attack surface, and controlling lateral movement to prevent breaches from escalating. Regulatory bodies like CISA have updated their guidance to encourage dynamic, risk-based segmentation strategies tailored to the operational realities of OT. In these environments, safety and operational continuity are paramount, often taking precedence over traditional IT priorities such as data integrity and comprehensive patching. As OT systems increasingly connect to the cloud and integrate artificial intelligence, the attack surface expands, necessitating more agile and resilient defense mechanisms. Breach-ready strategies also include rapid response measures such as quarantining affected zones, isolating unaffected systems, and ensuring robust recovery and failover capabilities. The ultimate goal is to prevent cyber incidents from resulting in catastrophic outcomes, such as loss of life, environmental disasters, or disruption of critical national infrastructure. Industry practitioners are urged to assess their breach readiness, identify hidden lateral attack risks, and develop visual roadmaps for remediation. The convergence of IT and OT security teams is seen as essential for operationalizing zero trust and maintaining production while managing cyber risk. These evolving practices underscore the critical importance of proactive, layered defenses in safeguarding the foundational systems that underpin modern society.
Jun 29, 2026