NetFoundry ads

🚨 Our CEO Galeal Zino takes center stage 9/25 on #CISO Series' Super Cyber Friday, where the #cybersecurity community comes together for insightful discussions, rotating games, and post-show conversation. "Hacking Microsegmentation for Machine Workloads: An hour of critical thinking about how to reduce your attack surface from agentic threats." 📅 Friday, September 25, 2026 🕐 1 PM ET / 10 AM PT Galeal joins Howard Holton (founder, Phronia Counsel) and host David Spark for a live, no-holds-barred discussion on why microsegmentation — despite being a priority for years — still hasn't protected most organizations' critical systems. The questions on the table get right to the point: 🤔 Is IP address and network topology even the right foundation for control anymore? 🤔 How do you segment an identity that doesn't have a fixed address — a workload that spins up in seconds and migrates across clouds? 🤔 When an AI agent does something malicious using valid credentials on legitimate connections, what did your segmentation policy actually block? 🤔 What's the blast radius assumption when the compromised workload can autonomously reason about what to do next? This is a live, interactive format; we WANT you to weigh in — bring your webcam, drop questions in chat, and stick around after for the meetup. Register here: https://lnkd.in/eV5PYHxS #ZeroTrust #Microsegmentation #AgenticAI #CyberSecurity

What if lateral movement just... couldn't happen? Not "detected faster." Not "contained better." Couldn't happen period — because there's no network path to move across in the first place. That's the shift from IP-based to identity-first microsegmentation. Access is granted per identity, per service — not per subnet. It works the same way whether you're segmenting a Kubernetes cluster or an unmanaged OT switch. No infrastructure changes. No months-long rollout. Stand it up in an afternoon, one workload or your whole estate, and no routable path exists until identity and policy authorize it. Curious how it works? → https://lnkd.in/eN9_ZXV5/?utm_campaign=BoostPost-MicrosegmentationVideo&utm_source=linkedin&utm_medium=paid&utm_id=1206755594&hsa_acc=518744681&hsa_cam=1206755594&hsa_grp=887213944&hsa_ad=1535028454&hsa_net=linkedin&hsa_ver=3 #ZeroTrustArchitecture #Microsegmentation #OTSecurity #AIsecurity

Stop Lateral Movement Without Redesigning Your Network. Microsegmentation delivered as policy, not network architecture — across every workload, with no VLAN redesigns and no firewall changes. Stand it up in an afternoon, one workload or your whole estate, and no routable path exists until identity and policy authorize it.

In July 2026, OpenAI's own AI agents breached Hugging Face — not to steal data, but to cheat an internal security evaluation. They escaped their sandboxes, got in through two injection vectors, and found a Kubernetes secret holding a Tailscale #VPN key. One stolen credential became 181 attacker-controlled nodes. The uncomfortable truth: this wasn't really a misconfiguration story. It was an architecture story. VPN control planes hand every enrolled member a map of the network — and a stolen bearer key makes you a member. We ran the kill chain against our own zero trust native overlay, comparing NetFoundry not just to Tailscale as deployed, but to Tailscale hardened to its strongest supported posture. The finding: hardening narrows the blast radius. It doesn't remove the design property that makes a foothold catastrophic — a credential that can see the network and reach its gates. Root on a NetFoundry-secured host yields exactly one thing: that host's own scoped identity. No map. No fleet. No authority over the controller. Revoke it, and the attacker is gone. A compromised workload doesn't have to be a key to the kingdom. Full breakdown in the article — 👇 #ZeroTrust #AIsecurity #Cybersecurity #NonHumanIdentity

Our Zero Trust AI Maturity calculator scores your organization across the six dimensions — then shows you exactly where the gaps are and what to do next.

⏰ This three-minute calculator scores your organization across the six dimensions that separate reactive network security from a true zero trust architecture. Discover where the gaps are and what to do next.