[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:network-segmentation":3},{"control":4,"products":24,"stories":49,"lessons":90,"related":115,"compare":132},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":23},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.","Dividing the network so that systems can only talk to what they need, from coarse zones (office, servers, production) down to rules per workload.","Ransomware becomes a company-wide outage when it can spread freely from the first infected laptop. Segmentation limits the blast radius: an incident in one zone stays there, which can be the difference between a bad day and weeks of downtime.",[11,12,13,14],"Can it map current traffic flows before we enforce any rules?","Does it work across data centre, cloud and endpoints?","How do we avoid breaking business applications during rollout?","Can it isolate a segment quickly during an incident?","Risk: malware spreads from one system to the whole environment. Control: segmentation of critical systems with default-deny rules. Owner: network lead. Measure: share of critical assets in enforced segments.",[17,18,19,20],"NIS2 Art. 21(2)(e): security of network and information systems","DORA Art. 9: network management, including isolation of affected assets","CIS Control 12: network infrastructure management","ISO\u002FIEC 27001:2022 A.8.22: segregation of networks",{"name":22,"slug":5},"Network Segmentation","2026-10-16T12:48:16.135036+00:00",[25,33,41],{"vendor_slug":26,"vendor_name":27,"vendor_logo":28,"product_slug":29,"product_name":30,"url":31,"description":32},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":34,"vendor_name":35,"vendor_logo":36,"product_slug":37,"product_name":38,"url":39,"description":40},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":42,"vendor_name":43,"vendor_logo":44,"product_slug":45,"product_name":46,"url":47,"description":48},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"total":50,"last_days":51,"recent":52},541,240,[53,58,63,68,72,76,80,85],{"slug":54,"title":55,"published_at":56,"brief":57},"critical-pwnescape-linux-kernel-vulnerability-lets-guest-vms-read-host-memory-e2089d","Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory","2026-10-15T20:24:36+00:00","Linux kernel vulnerability PwnEscape allows guest VMs to read host memory.",{"slug":59,"title":60,"published_at":61,"brief":62},"anthropic-warns-small-ai-models-could-power-self-spreading-ai-worms-5f43b5","Anthropic Warns Small AI Models Could Power Self-Spreading AI Worms","2026-10-15T12:19:18+00:00","Anthropic warns small AI models could enable self-spreading AI worms targeting connected devices.",{"slug":64,"title":65,"published_at":66,"brief":67},"eclipse-foundation-eclipse-milo-fbd4f0","Eclipse Foundation Eclipse Milo","2026-10-15T12:00:00+00:00","Eclipse Milo versions >=0.6.0 and \u003C=1.1.4 have vulnerabilities allowing data deletion, credential recovery, and denial",{"slug":69,"title":70,"published_at":66,"brief":71},"thermo-fisher-torrent-suite-software-86b829","Thermo Fisher Torrent Suite Software","Thermo Fisher Torrent Suite Software vulnerable to path traversal.",{"slug":73,"title":74,"published_at":66,"brief":75},"cisa-malcolm-307fc4","CISA Malcolm","CISA Malcolm suffers from six vulnerabilities, including authentication bypass and SSRF.",{"slug":77,"title":78,"published_at":66,"brief":79},"j4care-dcm4che-ea0e14","J4Care dcm4che","Multiple critical vulnerabilities found in J4Care dcm4chee-arc-light medical imaging software.",{"slug":81,"title":82,"published_at":83,"brief":84},"ai-agents-navigate-unfamiliar-ot-systems-and-move-equipment-in-minutes-booz-alle-b33a7b","AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds","2026-10-14T16:00:00+00:00","AI agents navigated unfamiliar OT systems and moved physical equipment in minutes, Booz Allen finds.",{"slug":86,"title":87,"published_at":88,"brief":89},"zero-trust-in-practice-moving-beyond-the-buzzword-acb149","Zero Trust in Practice: Moving Beyond the Buzzword","2026-10-14T10:31:09+00:00","Article clarifies Zero Trust principles and practical implementation, emphasizing identity as the foundational element.",[91,95,99,103,107,111],{"slug":92,"title":93,"published_at":94},"pwnescape-linux-kernel-flaw-allows-guest-vms-to-read-host-memory","PwnEscape: Linux Kernel Flaw Allows Guest VMs to Read Host Memory","2026-10-15T22:20:53.307+00:00",{"slug":96,"title":97,"published_at":98},"multiple-critical-vulnerabilities-found-in-cisa-malcolm-network-traffic-analyzer","Multiple Critical Vulnerabilities Found in CISA Malcolm Network Traffic Analyzer","2026-10-15T18:22:08.348+00:00",{"slug":100,"title":101,"published_at":102},"eclipse-milo-vulnerabilities-enable-data-loss-impersonation-and-dos","Eclipse Milo Vulnerabilities Enable Data Loss, Impersonation, and DoS","2026-10-15T18:21:51.861+00:00",{"slug":104,"title":105,"published_at":106},"path-traversal-flaw-in-thermo-fisher-torrent-suite-exposes-sensitive-files","Path Traversal Flaw in Thermo Fisher Torrent Suite Exposes Sensitive Files","2026-10-15T18:21:22.798+00:00",{"slug":108,"title":109,"published_at":110},"critical-vulnerabilities-in-medical-imaging-software-threaten-patient-data","Critical Vulnerabilities in Medical Imaging Software Threaten Patient Data","2026-10-15T18:21:06.642+00:00",{"slug":112,"title":113,"published_at":114},"small-ai-models-could-enable-self-propagating-ai-worms-by-2026","Small AI Models Could Enable Self-Propagating AI Worms by 2026","2026-10-15T14:20:39.044+00:00",[116,120,124,128],{"slug":117,"name":118,"problem":119},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",{"slug":121,"name":122,"problem":123},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",{"slug":125,"name":126,"problem":127},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",{"slug":129,"name":130,"problem":131},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"akamai\u002Fguardicore-segmentation":133,"illumio\u002Fillumio-segmentation":145,"threatlocker\u002Fzero-trust-endpoint-firewall":154},{"hq_country":134,"also_provides":135,"reviews":136,"affected":143,"reported":144},"US",[],[137,140],{"label":138,"url":139},"PeerSpot: Akamai App and API Protector user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fakamai-app-and-api-protector-reviews",{"label":141,"url":142},"Gartner Peer Insights: Akamai Guardicore Segmentation user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fakamai-guardicore-segmentation",0,1,{"hq_country":134,"also_provides":146,"reviews":147,"affected":143,"reported":143},[],[148,151],{"label":149,"url":150},"PeerSpot: Illumio Segmentation user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fillumio-segmentation-reviews",{"label":152,"url":153},"Gartner Peer Insights: Zero Trust Segmentation Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fzero-trust-segmentation-platform",{"hq_country":134,"also_provides":155,"reviews":156,"affected":143,"reported":143},[],[157,160,163],{"label":158,"url":159},"TechRadar: ThreatLocker review (2023)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fthreatlocker-review",{"label":161,"url":162},"Gartner Peer Insights: ThreatLocker Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fthreatlocker-platform",{"label":164,"url":165},"PeerSpot: ThreatLocker Zero Trust Platform user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fthreatlocker-zero-trust-platform-reviews"]