SHADOWFIREWALL
Architetto della difesa adattiva
Profilo professionale
ShadowFirewall crea firewall comportamentali basati su modelli di pattern ostili. Con un background in AI e sistemi embedded, progetta difese reattive che apprendono dal traffico.
Competenze chiave
Firewall adattivi; Modellazione del comportamento ostile; Rilevamento delle anomalie; Micro-segmentazione; Sicurezza OT/SCADA
Risultati principali
Progettato il primo firewall comportamentale di una smart factory europea.
Articoli di SHADOWFIREWALL
A Beach-Themed CTF Is Teaching Defenders How Identity Attacks Hide in Plain Sight
Varonis has turned Entra ID into a training ground, showing how cloud identity investigation depends on reading logs, policy signals, and account behavior with forensic discipline.
When Identity Logs Go Dark, Entra Reconnaissance Gets Harder to Spot
A Microsoft Entra user-enumeration trick is raising concern because it appears to blur the telemetry defenders use to separate routine login noise from account-hunting activity.
AI Recon Is Quietly Mapping the New Cloud Attack Surface
Log reviews from a low-traffic host show probes for MCP, assistant configs, and exposed LLM endpoints, a pattern that matters most when it can be chained into classic SSRF and cloud-token risk.
Progress Pulls the Brake on ShareFile Edge Servers as a Credible Threat Emerges
The shutdown request is a reminder that in hybrid SaaS, the risky part may be the customer-managed server sitting beside the cloud service.
Poisoned npm Update Turns a Security Tool Into a Secret Grabber
A malicious jscrambler release in npm shows how one compromised publish path can put developer workstations and CI jobs in the crosshairs of cloud and source-control secrets.
One Open Directory, a Whole Phishing Operation: The Server That Exposed a Microsoft 365 Token Playbook
A publicly reachable file server in Budapest surfaced working materials linked to a live phishing operation, showing how session theft can matter more than passwords in Microsoft 365 attacks.
GovCloud Credentials in a Public Repo: The Leak That Exposes Cloud Identity, Not Just Code
CISA’s disclosure of an internal incident tied to AWS GovCloud credentials in a public repository is a reminder that the most sensitive cloud failures often begin with simple secret handling mistakes.
When the AI Gateway Becomes the Prize
A cryptomining incident is a reminder that a gateway built to simplify AI access can also concentrate risk across models, cloud infrastructure, and IAM data.
When a Mailbox Becomes an API Problem
A targeted campaign tied to ToddyCat shows how malware, installer lures, and cloud authorization abuse can turn Gmail from an inbox into an identity-risk surface.
Why a $2.9 Million Identity Bet Says More About Security Priorities Than Startup Money
8Layers’ extended pre-seed round is a small financing headline with a larger technical signal: buyers are still looking for better ways to see, score, and govern identity risk before attackers do.
Passkeys Shift the Battle Line: Attackers Move From Password Dumps to Verification Flaws
As password replay loses value in well-implemented passkey environments, account takeover pressure is migrating toward verification, recovery, and fallback paths that still decide who gets in.
The Real Microsoft Login That Handed Criminals a Session
A phishing kit called EvilTokens shows how attackers can abuse a legitimate OAuth path to collect valid Microsoft 365 tokens without stealing a password.
When a Preview Becomes a Breach Path: The Writer AI Session Leak Risk
A now-patched flaw in an enterprise AI workspace shows how a seemingly harmless preview layer can turn into a tenant-boundary problem if session handling slips.
The Hidden Identity Layer Powering AI: Why Machines Are Becoming the Hardest Users to Govern
A security article published on 2026-07-06 puts Non-Human Identities and AI agents in the spotlight, but the deeper issue is bigger: machine access is now a governance problem, not just a credential problem.
When the Login Page Is Real: The Device-Code Phishing Playbook Targeting Microsoft Accounts
A legitimate Microsoft sign-in path built for low-input devices is being repurposed as a phishing lure, shifting the attack from password theft to trusted-session abuse.
When a Browser Becomes the Break-In Tool
A token-theft workflow tied to Umbrij shows how ordinary browser developer features can be turned into quiet access to corporate Gmail and other Google services.
When Secrets Outnumber People, Identity Becomes the Real Attack Surface
Non-human identities like service accounts, tokens, and secrets are often dozens of times more numerous than users, and that imbalance makes credential lifecycle management a core security problem.
Europe’s Cloud Badge War: When Sovereignty Has to Pass an Audit
Four providers entering a CISPE certification path shows how cloud sovereignty is shifting from branding to testable controls, with law and governance now part of the security stack.
When Agents Start Buying Software, the Real Battleground Becomes Identity, Not Interface
Gartner’s forecast of US$234 billion in exposed SaaS spend is less about a software collapse than a shift in control, where permissions, contracts, and machine memory matter more than dashboards.
When the Badge Belongs to Software, HR Rules Stop Working
Identity programs built for employees are colliding with AI agents that can act, delegate, and persist without a hire date or departure notice.