SHADOWFIREWALL
معماري دفاع تكيفي
الملف المهني
ينشئ ShadowFirewall جدران حماية سلوكية قائمة على نماذج الأنماط العدائية. بخلفية في الذكاء الاصطناعي والأنظمة المضمنة، يصمم دفاعات تفاعلية تتعلم من حركة المرور.
المهارات الأساسية
جدران حماية تكيفية؛ نمذجة السلوك العدائي؛ كشف الشذوذ؛ التقسيم الدقيق؛ أمن OT/SCADA
أبرز الإنجازات
صمم أول جدار حماية سلوكي لمصنع ذكي أوروبي.
مقالات بقلم SHADOWFIREWALL
When Cloud First Becomes Risk First: The New Fight Over Data, Jurisdiction, and Control
Enterprise cloud strategy is shifting away from cost-only thinking toward workload sensitivity, portability, and identity-based access in a world shaped by regulation and geopolitical pressure.
When a Deleted Bucket Becomes Someone Else’s Inbox: The Cloud Name-Reuse Trap
A reported cloud storage hijack pattern can redirect logs, telemetry, and other routed data when a deleted bucket name is later reclaimed, turning namespace hygiene into a security control.
One Ticket, Many Doors: The AD360 Flaw That Put SSO Under the Microscope
A critical ManageEngine vulnerability shows how a predictable login artifact can turn a convenience feature into a cross-product security risk.
One Ticket, Many Doors: The ManageEngine Identity Flaw That Could Turn Trust Into Impersonation
CVE-2026-11374 shows how a predictable SSO artifact inside an integrated identity suite can become a serious account-takeover risk.
Password Vaults Are Replacing Password Chaos - and the Attack Surface Behind Them
Credential management is no longer a housekeeping task: when passwords are reused, shared informally, or stored in scattered places, a single compromise can ripple across an entire environment.
When the Password Is the Body: Why Biometric Identity Is Hard to Take Back
Biometrics can make logins smoother, but they also turn identity into something that cannot be rotated the way a password or token can.
When a CRM Connector Becomes the Weakest Door in the Building
A reported Klue-related incident shows how a single SaaS integration can turn Salesforce data into the real target, even when the platform itself is not the product under attack.
AI Sovereignty Is a Control Problem, Not a Flag on a Server
The real question is who can govern data, identities, infrastructure, and model lifecycles when cloud and AI are intertwined.
When One Token Becomes the Breach: The SaaS Integration Risk Hiding in Plain Sight
A limited customer-data exposure tied to Klue and LastPass shows how delegated access can turn a third-party integration into a security choke point.
Stolen Trust: How a Third-Party OAuth Token Put CRM Data in Reach
A reported breach involving a Salesforce-connected environment shows how a single compromised integration credential can turn SaaS trust into a data-access problem.
The Exit Door Is the Weakest Wall in Cloud Security
Outbound traffic often stays too open in cloud environments, and that can turn a compromised workload or AI agent into a quiet data-leak path.
AWS Egress Gets the Spotlight as Quiet Outbound Traffic Becomes a Security Decision
The real cloud control problem is not only what gets in, but what is allowed to leave, be observed, and be explained later.
Microsoft Draws a New Boundary Between Copilot and Sensitive Office Files
A label-driven control is rolling out in Microsoft 365, tightening how protected documents can interact with connected experiences and AI-powered features.
The SaaS Shortcut That Turned Risky: What a Salesforce-Klue Token Incident Reveals
A disabled integration, a legacy credential, and reported OAuth token theft point to a familiar cloud problem: trusted connectors can become high-value access paths when secrets outlive their purpose.
When an iPhone App Hands Out the Keys to Its Own AI
A security study found that many LLM-integrated iOS apps expose API credentials over network traffic, creating a practical risk of unauthorized AI inference usage and billing abuse.
OpenAI’s New Budget Knobs Turn Enterprise AI Into Something Finance Can Finally See
ChatGPT Enterprise now gives administrators a clearer view of credit consumption, a tighter way to set budgets, and a better lens on where AI spend is actually going.
The Login Problem: Why Identity Has Become the New Perimeter
ITDR is emerging as a response to attackers who do not smash endpoints first, but abuse valid logins, stolen tokens, and identity paths that ordinary tools may not fully watch.
Token Trouble at the SaaS Border: Why Salesforce Cut Off a Third-Party Connector
A disabled app integration has turned into a lesson in delegated access, where one abused token can force a platform to shut the door on an entire data path.
How a Compromised Klue Integration Could Turn Salesforce Into an Exfiltration Channel
A reported abuse of OAuth-linked SaaS trust shows how one third-party integration can become a quiet path to CRM data.
Trusted App, Quiet Pipe: How a SaaS Integration Can Become a CRM Drain
A reported compromise of a Klue Battlecards integration shows how OAuth-backed connections can turn routine Salesforce access into a low-noise collection path.