[{"data":1,"prerenderedAt":72},["ShallowReactive",2],{"all-blog-posts":3},[4],{"id":5,"title":6,"authors":7,"body":11,"category":55,"date":56,"description":57,"extension":58,"featured":59,"image":60,"meta":61,"navigation":59,"path":62,"readTime":63,"seo":64,"stem":65,"tags":66,"__hash__":71},"blog\u002Fblog\u002Foutsmarting-the-long-game-oct-2026.md","Outsmarting Persistent Threats & Hardening Access",[8],{"name":9,"role":10},"Isaac Machakata","Systems Developer",{"type":12,"value":13,"toc":49},"minimark",[14,18,23,26,29,33,36,46],[15,16,17],"p",{},"We’ve just pushed a fresh security update to step up our defenses against malicious actors and further isolate our application environments.",[19,20,22],"h2",{"id":21},"outsmarting-the-long-game","Outsmarting the Long Game",[15,24,25],{},"While our security measures had already reduced overall server attacks, one persistent actor refused to give up. They shifted to a low-and-slow strategy—reducing attack frequency and rotating through multiple IP addresses to slip past standard blocks.",[15,27,28],{},"In today’s update, we’ve deployed targeted countermeasures to completely block this actor. Interestingly, constantly rotating clean IP infrastructure isn't cheap—which makes the economics of their high-cost reconnaissance pretty questionable... but we've shut the door on them regardless (even if we know they’ll eventually try a new angle).",[19,30,32],{"id":31},"zero-access-for-unknown-tenants-direct-hits","Zero Access for Unknown Tenants & Direct Hits",[15,34,35],{},"As part of today’s push, we’ve also implemented a strict new access control layer:",[37,38,39,43],"ul",{},[40,41,42],"li",{},"Blocked Direct Server Access: The system now rejects unverified direct access attempts to underlying server endpoints.",[40,44,45],{},"Tenant Isolation: Requests from unauthorized or unknown tenants are instantly dropped at the perimeter, ensuring your environment remains fully isolated and protected from scanner noise.",[15,47,48],{},"System performance remains unaffected, and all client applications continue to run safely within our hardened infrastructure.",{"title":50,"searchDepth":51,"depth":51,"links":52},"",2,[53,54],{"id":21,"depth":51,"text":22},{"id":31,"depth":51,"text":32},"Cyber Security","2026-11-05","How we are dealing with the recent spike in malicious actors on CAIMS.","md",true,"https:\u002F\u002Fimages.unsplash.com\u002Fphoto-1555066931-4365d14bab8c?q=80&w=1470&auto=format&fit=crop",{},"\u002Fblog\u002Foutsmarting-the-long-game-oct-2026","6 min read",{"title":6,"description":57},"blog\u002Foutsmarting-the-long-game-oct-2026",[55,67,68,69,70],"School ERP","System Design","PaaS","CAIMS","Gi5zhA_BiQ737O8QCVYYKVcfIOdTBC02kt5jedWRPJI",1793962326123]