SHADOWFIREWALL
Adaptive Defense Architect
Professional Profile
ShadowFirewall creates behavioral firewalls based on hostile-pattern models. Background in AI and embedded systems, designs reactive defenses that learn from traffic.
Key Skills
Adaptive firewalls; Hostile-behavior modeling; Anomaly detection; Micro-segmentation; OT/SCADA security
Major Achievements
Designed the first behavioral firewall of a European smart factory.
Articles by SHADOWFIREWALL
When a Browser Becomes the Break-In Tool
A token-theft workflow tied to Umbrij shows how ordinary browser developer features can be turned into quiet access to corporate Gmail and other Google services.
When Secrets Outnumber People, Identity Becomes the Real Attack Surface
Non-human identities like service accounts, tokens, and secrets are often dozens of times more numerous than users, and that imbalance makes credential lifecycle management a core security problem.
Europe’s Cloud Badge War: When Sovereignty Has to Pass an Audit
Four providers entering a CISPE certification path shows how cloud sovereignty is shifting from branding to testable controls, with law and governance now part of the security stack.
When Agents Start Buying Software, the Real Battleground Becomes Identity, Not Interface
Gartner’s forecast of US$234 billion in exposed SaaS spend is less about a software collapse than a shift in control, where permissions, contracts, and machine memory matter more than dashboards.
When the Badge Belongs to Software, HR Rules Stop Working
Identity programs built for employees are colliding with AI agents that can act, delegate, and persist without a hire date or departure notice.
When Microsoft Sign-In Becomes the Trap: ARToken and the New Token-Theft Playbook
A phishing kit tied to Microsoft 365 targeting shows how attackers can lean on legitimate cloud login flows, trusted collaboration branding, and edge-hosted delivery to turn identity into the attack surface.
The ARToken Panel Shows How Phishing Became a Token Factory
A React-based phishing-as-a-service panel reportedly built for Microsoft 365 abuse points to a quieter threat: industrialized token handling, not just stolen passwords.
The SaaS Blind Spot: Why Security Teams Are Now Chasing Settings, Identities, and OAuth Grants
SSPM shifts cloud defense toward the place many teams least control: the configuration and delegated access of SaaS apps they use every day.
81 Million Logins, 78 Compromises: The Password-Spray Flood Hitting Microsoft 365
A massive credential campaign against Microsoft 365 shows how distributed password spraying can turn identity controls into the real front line of cloud defense.
How a Port Can Go Dark Without Touching the Control Room
The Porto di Ancona case points to a harsh lesson for critical infrastructure: cloud identity failures can disrupt operations even when industrial systems are reportedly untouched.
81 Million Login Shots Fired at Azure CLI - and Identity Teams Take the Hit
A huge password-spray wave against Microsoft’s command-line cloud tooling shows why authentication, not code, is often the real battleground in modern cloud attacks.
Teams Puts AI Meeting Bots Behind a New Trust Gate
Microsoft is tightening meeting access controls as organizations struggle to tell a helpful assistant from an unwanted listener.
AppViewX Bets on the Hidden Identity Layer Powering Cloud and AI Workloads
A new partner push around machine and agent identity security shows how enterprise trust is moving beyond human logins and into the cryptographic systems that keep software, devices, and AI agents in check.
Where the Cloud Fractures: The Security Logic Behind Multicloud Segmentation
In multicloud environments, the real defense is not a bigger perimeter but tighter boundaries that can survive change, expansion, and misconfiguration.
When Cloud First Becomes Risk First: The New Fight Over Data, Jurisdiction, and Control
Enterprise cloud strategy is shifting away from cost-only thinking toward workload sensitivity, portability, and identity-based access in a world shaped by regulation and geopolitical pressure.
When a Deleted Bucket Becomes Someone Else’s Inbox: The Cloud Name-Reuse Trap
A reported cloud storage hijack pattern can redirect logs, telemetry, and other routed data when a deleted bucket name is later reclaimed, turning namespace hygiene into a security control.
One Ticket, Many Doors: The AD360 Flaw That Put SSO Under the Microscope
A critical ManageEngine vulnerability shows how a predictable login artifact can turn a convenience feature into a cross-product security risk.
One Ticket, Many Doors: The ManageEngine Identity Flaw That Could Turn Trust Into Impersonation
CVE-2026-11374 shows how a predictable SSO artifact inside an integrated identity suite can become a serious account-takeover risk.
Password Vaults Are Replacing Password Chaos - and the Attack Surface Behind Them
Credential management is no longer a housekeeping task: when passwords are reused, shared informally, or stored in scattered places, a single compromise can ripple across an entire environment.
When the Password Is the Body: Why Biometric Identity Is Hard to Take Back
Biometrics can make logins smoother, but they also turn identity into something that cannot be rotated the way a password or token can.