SHADOWFIREWALL
Adaptive Defense Architect
Professional Profile
ShadowFirewall creates behavioral firewalls based on hostile-pattern models. Background in AI and embedded systems, designs reactive defenses that learn from traffic.
Key Skills
Adaptive firewalls; Hostile-behavior modeling; Anomaly detection; Micro-segmentation; OT/SCADA security
Major Achievements
Designed the first behavioral firewall of a European smart factory.
Articles by SHADOWFIREWALL
When AI Starts Acting for You, Identity Alone Is Not Enough
Agentic AI turns delegation into a security problem: organizations must verify not only who the system is, but what it is allowed to do and how every action can be traced.
Passkeys Move Into the State Gate: The UK’s Identity Reset Against Phishing
GOV.UK One Login is shifting millions of users toward passkeys, a change that reduces dependence on passwords but also makes device security and recovery flows far more important.
Exposed Vite Servers Become Quiet Traps for Cloud Secrets
When a local development server is published to the network, it can turn into a searchable surface for automated scanners hunting .env files, cloud tokens, and IaC state.
The Click That Becomes Access: Why OAuth Consent Is a Quiet Workspace Risk
A webinar spotlight on malicious OAuth apps points to a familiar cloud weakness: user consent can turn into delegated access even when no password is stolen.
WhatsApp’s Next Privacy Gate Could Shrink the Blast Radius of a Stolen Session
A beta-only Android feature called Restricted Chat points to a sharper model of messaging security: keep the most sensitive threads on the primary phone and away from linked devices.
A Management Tunnel, a Metadata Target, and a Quiet Cloud Credential Risk
A flaw in AWS Systems Manager Agent shows how an authorized remote session can become a bridge toward link-local services and temporary IAM credentials if session controls are too broad.
Passkeys Did Not Fail. The Human Workflow Did.
A pair of Microsoft-linked campaigns shows how modern fraud now targets email infrastructure and the recovery steps around cloud identity, not just passwords.
When the Browser Becomes the Gatekeeper: Why Enterprise Browsers Are Drawing Security Teams In
In SaaS-heavy workplaces, browser-level policy is becoming a practical control point for DLP, access rules, visibility, and contractor or BYOD risk.
Cloud’s Quiet Weak Spot: Why CSPM Became the Map for Misconfiguration Risk
A new wave of CSPM tool roundups reflects a basic cloud truth: the hardest problems are often not exotic intrusions, but everyday configuration mistakes spread across AWS, Azure, and Google Cloud.
The New Identity Front Line: Why IAM Is Moving Beyond Human Logins
Identity management is no longer a back-office utility: it is where security, operations, and business strategy now collide, especially when suppliers and AI agents enter the trust chain.
How a Helpdesk Pretend Can Slip Past Passkey Security in Microsoft 365
The dangerous part is not the passkey itself, but the human workflow around identity recovery, where urgency and trust can be turned into account takeover.
When a Trivial Request Becomes a Trusted Action
Workflow identity hijacking turns weak authorization into a data-risk problem, showing how an unauthenticated entry point can become a privileged path inside AI-driven systems.
When AI Sessions Leak, the Real Target Is the Trust Boundary
A remediated ChatGPT isolation flaw may have let one authenticated session reach another account’s connected data, showing how fragile AI-assisted SaaS boundaries can become.
Seconds Matter: The Push to Make API Keys Self-Invalidate
A proposal for revocable API keys tries to turn credential leaks from long-running risks into fast-moving containment events.
The Cloud Lesson Most Teams Learn Too Late: Responsibility Does Not End at the Provider
A multi-cloud fundamentals piece lands in a category where the real risk is not infrastructure alone, but the boundary between provider control and customer control.
Forgotten Google Workspace Grants: The Quiet Risk Hiding in Plain Sight
A webinar focused on third-party access inside Google Workspace points to a broader SaaS problem: permissions outlive business need unless teams actively find and remove them.
The Quiet Security Story Behind a 4% Savings Offer: Identity Became the Front Door
A six-month deposit, a fixed gross return, and online onboarding through SPID turn a routine savings offer into a useful case study in digital trust, credential protection, and remote identity assurance.
When a Leaked AWS Key Turns Into Paid AI Abuse
A compromised cloud credential can do more than open a door - it can turn a victim’s account into a meter for unauthorized model use.
When Identity Becomes the Gatekeeper: Zero Trust 2.0 Moves Security to the Login Layer
The shift toward Identity-First Security treats access, privilege, governance, and threat detection as one control plane, not separate IAM chores.
One Stolen API Key, a Six-Figure Bill: The Hidden Cost of AI Credential Abuse
METR disclosed that attackers took an API key and consumed AI credits worth about $600,000, a reminder that bearer secrets can turn into budget drains before they become obvious breaches.