[{"data":1,"prerenderedAt":73},["ShallowReactive",2],{"blog-post-\u002Fblog\u002Foutsmarting-the-long-game-oct-2026":3,"blog-surroundings-\u002Fblog\u002Foutsmarting-the-long-game-oct-2026":71},{"id":4,"title":5,"authors":6,"body":10,"category":54,"date":55,"description":56,"extension":57,"featured":58,"image":59,"meta":60,"navigation":58,"path":61,"readTime":62,"seo":63,"stem":64,"tags":65,"__hash__":70},"blog\u002Fblog\u002Foutsmarting-the-long-game-oct-2026.md","Outsmarting Persistent Threats & Hardening Access",[7],{"name":8,"role":9},"Isaac Machakata","Systems Developer",{"type":11,"value":12,"toc":48},"minimark",[13,17,22,25,28,32,35,45],[14,15,16],"p",{},"We’ve just pushed a fresh security update to step up our defenses against malicious actors and further isolate our application environments.",[18,19,21],"h2",{"id":20},"outsmarting-the-long-game","Outsmarting the Long Game",[14,23,24],{},"While our security measures had already reduced overall server attacks, one persistent actor refused to give up. They shifted to a low-and-slow strategy—reducing attack frequency and rotating through multiple IP addresses to slip past standard blocks.",[14,26,27],{},"In today’s update, we’ve deployed targeted countermeasures to completely block this actor. Interestingly, constantly rotating clean IP infrastructure isn't cheap—which makes the economics of their high-cost reconnaissance pretty questionable... but we've shut the door on them regardless (even if we know they’ll eventually try a new angle).",[18,29,31],{"id":30},"zero-access-for-unknown-tenants-direct-hits","Zero Access for Unknown Tenants & Direct Hits",[14,33,34],{},"As part of today’s push, we’ve also implemented a strict new access control layer:",[36,37,38,42],"ul",{},[39,40,41],"li",{},"Blocked Direct Server Access: The system now rejects unverified direct access attempts to underlying server endpoints.",[39,43,44],{},"Tenant Isolation: Requests from unauthorized or unknown tenants are instantly dropped at the perimeter, ensuring your environment remains fully isolated and protected from scanner noise.",[14,46,47],{},"System performance remains unaffected, and all client applications continue to run safely within our hardened infrastructure.",{"title":49,"searchDepth":50,"depth":50,"links":51},"",2,[52,53],{"id":20,"depth":50,"text":21},{"id":30,"depth":50,"text":31},"Cyber Security","2026-11-05","How we are dealing with the recent spike in malicious actors on CAIMS.","md",true,"https:\u002F\u002Fimages.unsplash.com\u002Fphoto-1555066931-4365d14bab8c?q=80&w=1470&auto=format&fit=crop",{},"\u002Fblog\u002Foutsmarting-the-long-game-oct-2026","6 min read",{"title":5,"description":56},"blog\u002Foutsmarting-the-long-game-oct-2026",[54,66,67,68,69],"School ERP","System Design","PaaS","CAIMS","Gi5zhA_BiQ737O8QCVYYKVcfIOdTBC02kt5jedWRPJI",{"prev":72,"next":72},null,1793962326342]