Does isolating a network segment really guarantee its invulnerability?