[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:network-segmentation":3},{"control":4,"products":24,"stories":49,"lessons":93,"related":118,"compare":135},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":23},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.","Dividing the network so that systems can only talk to what they need, from coarse zones (office, servers, production) down to rules per workload.","Ransomware becomes a company-wide outage when it can spread freely from the first infected laptop. Segmentation limits the blast radius: an incident in one zone stays there, which can be the difference between a bad day and weeks of downtime.",[11,12,13,14],"Can it map current traffic flows before we enforce any rules?","Does it work across data centre, cloud and endpoints?","How do we avoid breaking business applications during rollout?","Can it isolate a segment quickly during an incident?","Risk: malware spreads from one system to the whole environment. Control: segmentation of critical systems with default-deny rules. Owner: network lead. Measure: share of critical assets in enforced segments.",[17,18,19,20],"NIS2 Art. 21(2)(e): security of network and information systems","DORA Art. 9: network management, including isolation of affected assets","CIS Control 12: network infrastructure management","ISO\u002FIEC 27001:2022 A.8.22: segregation of networks",{"name":22,"slug":5},"Network Segmentation","2026-10-16T12:48:16.135036+00:00",[25,33,41],{"vendor_slug":26,"vendor_name":27,"vendor_logo":28,"product_slug":29,"product_name":30,"url":31,"description":32},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":34,"vendor_name":35,"vendor_logo":36,"product_slug":37,"product_name":38,"url":39,"description":40},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":42,"vendor_name":43,"vendor_logo":44,"product_slug":45,"product_name":46,"url":47,"description":48},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"total":50,"last_days":51,"recent":52},680,275,[53,58,63,68,73,78,83,88],{"slug":54,"title":55,"published_at":56,"brief":57},"researchers-continue-to-find-serious-vulnerabilities-in-internet-connected-refri-04d35e","Researchers continue to find serious vulnerabilities in internet connected refrigerators","2026-11-13T21:20:51+00:00","14 vulnerabilities in Dixell refrigeration units grant root access, with some under active exploitation.",{"slug":59,"title":60,"published_at":61,"brief":62},"the-green-agent-pov-formulating-the-fix-for-an-internet-facing-container-with-se-43a4d5","The Green Agent POV: Formulating the Fix for an Internet-Facing Container with Sensitive Data Access","2026-11-13T17:05:02+00:00","Green Agent tool identifies and formulates fixes for internet-facing containers with vulnerabilities and sensitive data",{"slug":64,"title":65,"published_at":66,"brief":67},"check-point-gateways-hacked-via-php2shell-to-deploy-vmware-esxi-wiper-97c01e","Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper","2026-11-13T16:21:43+00:00","Check Point gateways exploited via PHP2Shell to deploy ESXi wiper in targeted attacks",{"slug":69,"title":70,"published_at":71,"brief":72},"hackers-use-sansar-linux-malware-to-hide-crypto-mining-by-faking-0-gpu-usage-7ad699","Hackers Use SANSAR Linux Malware to Hide Crypto Mining by Faking 0% GPU Usage","2026-11-13T15:09:45+00:00","Hackers use SANSAR Linux malware to hide crypto mining by faking 0% GPU usage.",{"slug":74,"title":75,"published_at":76,"brief":77},"hackers-use-2-700-passwords-to-break-into-microsoft-sql-servers-and-deploy-remot-8fab91","Hackers Use 2,700 Passwords to Break Into Microsoft SQL Servers and Deploy Remote Access Malware","2026-11-13T14:54:56+00:00","Hackers exploit weak passwords to compromise Microsoft SQL Servers, deploying malware for crypto mining and remote",{"slug":79,"title":80,"published_at":81,"brief":82},"when-an-ai-agent-goes-wrong-can-you-stop-it-ed1f4b","When an AI Agent Goes Wrong, Can You Stop It?","2026-11-13T11:52:31+00:00","OWASP GenAI Security Project warns AI agents can exceed intended scope; proper containment requires pausing workflows,",{"slug":84,"title":85,"published_at":86,"brief":87},"hackers-use-windows-named-pipes-and-smb-to-spread-malware-across-isolated-govern-4ab131","Hackers Use Windows Named Pipes and SMB to Spread Malware Across Isolated Government Networks","2026-11-13T11:30:35+00:00","StingyBasilisk group uses Windows named pipes and SMB to spread malware in isolated government networks.",{"slug":89,"title":90,"published_at":91,"brief":92},"ransomware-at-the-hypervisor-layer-how-attackers-use-esxi-and-vcenter-features-f-365656","Ransomware at the hypervisor layer: how attackers use ESXi and vCenter features for malicious purposes","2026-11-13T09:00:43+00:00","BlackNevas ransomware group targets VMware ESXi and vCenter, destroying VMs and backups.",[94,98,102,106,110,114],{"slug":95,"title":96,"published_at":97},"internet-connected-refrigeration-units-expose-critical-infrastructure-to-root-level-attacks","Internet-Connected Refrigeration Units Expose Critical Infrastructure to Root-Level Attacks","2026-11-13T22:21:16.893+00:00",{"slug":99,"title":100,"published_at":101},"internet-facing-containers-with-sensitive-data-access-create-exploitable-attack-paths","Internet-Facing Containers with Sensitive Data Access Create Exploitable Attack Paths","2026-11-13T18:21:17.032+00:00",{"slug":103,"title":104,"published_at":105},"unpatched-check-point-gateways-leveraged-to-wipe-vmware-esxi-infrastructure","Unpatched Check Point Gateways Leveraged to Wipe VMware ESXi Infrastructure","2026-11-13T17:20:43.507+00:00",{"slug":107,"title":108,"published_at":109},"unauthenticated-ray-agent-enables-hidden-gpu-crypto-mining-via-rootkit","Unauthenticated Ray Agent Enables Hidden GPU Crypto Mining via Rootkit","2026-11-13T16:21:40.741+00:00",{"slug":111,"title":112,"published_at":113},"weak-sql-server-passwords-enable-brute-force-takeover-and-malware-deployment","Weak SQL Server Passwords Enable Brute-Force Takeover and Malware Deployment","2026-11-13T15:20:23.452+00:00",{"slug":115,"title":116,"published_at":117},"espionage-group-abuses-windows-internals-to-pivot-across-air-gapped-government-networks","Espionage Group Abuses Windows Internals to Pivot Across Air-Gapped Government Networks","2026-11-13T12:21:03.116+00:00",[119,123,127,131],{"slug":120,"name":121,"problem":122},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",{"slug":124,"name":125,"problem":126},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":128,"name":129,"problem":130},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",{"slug":132,"name":133,"problem":134},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"akamai\u002Fguardicore-segmentation":136,"illumio\u002Fillumio-segmentation":148,"threatlocker\u002Fzero-trust-endpoint-firewall":157},{"hq_country":137,"also_provides":138,"reviews":139,"affected":146,"reported":147},"US",[],[140,143],{"label":141,"url":142},"PeerSpot: Akamai App and API Protector user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fakamai-app-and-api-protector-reviews",{"label":144,"url":145},"Gartner Peer Insights: Akamai Guardicore Segmentation user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fakamai-guardicore-segmentation",0,2,{"hq_country":137,"also_provides":149,"reviews":150,"affected":146,"reported":146},[],[151,154],{"label":152,"url":153},"PeerSpot: Illumio Segmentation user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fillumio-segmentation-reviews",{"label":155,"url":156},"Gartner Peer Insights: Zero Trust Segmentation Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fzero-trust-segmentation-platform",{"hq_country":137,"also_provides":158,"reviews":159,"affected":146,"reported":146},[],[160,163,166],{"label":161,"url":162},"TechRadar: ThreatLocker review (2023)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fthreatlocker-review",{"label":164,"url":165},"Gartner Peer Insights: ThreatLocker Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fthreatlocker-platform",{"label":167,"url":168},"PeerSpot: ThreatLocker Zero Trust Platform user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fthreatlocker-zero-trust-platform-reviews"]