PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Quantifying the Impact of Micro-Segmentation

bishopfox.com | blog | #network-security | #red-team | #lateral-movement | #testing-methodology | #micro-segmentation | #illumio
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox's methodology for Illumio shows micro-segmentation raises attacker difficulty by 300–950%, quantifying how policy granularity impedes lateral movement toward crown-jewel assets.
Published
Collected

Related coverage

blog · portswigger.net
New Burp Suite testing methodologies
The Burp Suite Support Center adds testing methodologies with step-by-step tutorials on authentication attacks, injection, XSS, CSRF, access controls, and the OWASP Top Ten.
blog · blog.quarkslab.com
Overview of Passive Optical Networks (PONs) Security
Passive Optical Networks (PONs) connect end-users to infrastructure using optical fibre in the last kilometre (Fibre-to-the-x). This article provides a technical overview of the security features in ITU-T specifications: Gigabit-capable PON (GPON), 10-Gigabit-capable PON (XG-PON), 10-Gigabit-capable Symmetric PON (XGS-PON), Next-generation PON 2 (NG-PON2), and 50-Gigabit-capable PON (50G-PON). The analysis covers authentication schemes, key derivation, encryption methods, and associated security implications.
blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
blog · specterops.io
Beyond Tier Zero
SpecterOps argues identity risk now extends beyond Tier Zero, as attackers increasingly use legitimate credentials and trusted relationships to reach backups, regulated data, and other critical workloads.
blog · semperis.com
AD Group Risks: Hidden Powers of Account Operators
Account Operators looks harmless without 'admin' in its name, yet it grants broad control over domain identities—here is how attackers abuse it to escalate.
blog · wiz.io
Unifying Cloud Risk and Network Defense: Wiz and Check Point
Wiz partners with Check Point to bring firewall context into the Security Graph: CloudGuard policies show which resources are protected, and exposures are validated from the internet.
Back