SHADOWFIREWALL
معماري دفاع تكيفي
الملف المهني
ينشئ ShadowFirewall جدران حماية سلوكية قائمة على نماذج الأنماط العدائية. بخلفية في الذكاء الاصطناعي والأنظمة المضمنة، يصمم دفاعات تفاعلية تتعلم من حركة المرور.
المهارات الأساسية
جدران حماية تكيفية؛ نمذجة السلوك العدائي؛ كشف الشذوذ؛ التقسيم الدقيق؛ أمن OT/SCADA
أبرز الإنجازات
صمم أول جدار حماية سلوكي لمصنع ذكي أوروبي.
مقالات بقلم SHADOWFIREWALL
Cloud Identity’s Weakest Link Just Got a Federal Warning Label
NIST and CISA have put token security in the spotlight, urging providers and agencies to harden the credentials that quietly power cloud logins, APIs, and federated access.
When AI Starts Acting for You, Identity Alone Is Not Enough
Agentic AI turns delegation into a security problem: organizations must verify not only who the system is, but what it is allowed to do and how every action can be traced.
Passkeys Move Into the State Gate: The UK’s Identity Reset Against Phishing
GOV.UK One Login is shifting millions of users toward passkeys, a change that reduces dependence on passwords but also makes device security and recovery flows far more important.
Exposed Vite Servers Become Quiet Traps for Cloud Secrets
When a local development server is published to the network, it can turn into a searchable surface for automated scanners hunting .env files, cloud tokens, and IaC state.
The Click That Becomes Access: Why OAuth Consent Is a Quiet Workspace Risk
A webinar spotlight on malicious OAuth apps points to a familiar cloud weakness: user consent can turn into delegated access even when no password is stolen.
WhatsApp’s Next Privacy Gate Could Shrink the Blast Radius of a Stolen Session
A beta-only Android feature called Restricted Chat points to a sharper model of messaging security: keep the most sensitive threads on the primary phone and away from linked devices.
A Management Tunnel, a Metadata Target, and a Quiet Cloud Credential Risk
A flaw in AWS Systems Manager Agent shows how an authorized remote session can become a bridge toward link-local services and temporary IAM credentials if session controls are too broad.
Passkeys Did Not Fail. The Human Workflow Did.
A pair of Microsoft-linked campaigns shows how modern fraud now targets email infrastructure and the recovery steps around cloud identity, not just passwords.
When the Browser Becomes the Gatekeeper: Why Enterprise Browsers Are Drawing Security Teams In
In SaaS-heavy workplaces, browser-level policy is becoming a practical control point for DLP, access rules, visibility, and contractor or BYOD risk.
Cloud’s Quiet Weak Spot: Why CSPM Became the Map for Misconfiguration Risk
A new wave of CSPM tool roundups reflects a basic cloud truth: the hardest problems are often not exotic intrusions, but everyday configuration mistakes spread across AWS, Azure, and Google Cloud.
The New Identity Front Line: Why IAM Is Moving Beyond Human Logins
Identity management is no longer a back-office utility: it is where security, operations, and business strategy now collide, especially when suppliers and AI agents enter the trust chain.
How a Helpdesk Pretend Can Slip Past Passkey Security in Microsoft 365
The dangerous part is not the passkey itself, but the human workflow around identity recovery, where urgency and trust can be turned into account takeover.
When a Trivial Request Becomes a Trusted Action
Workflow identity hijacking turns weak authorization into a data-risk problem, showing how an unauthenticated entry point can become a privileged path inside AI-driven systems.
When AI Sessions Leak, the Real Target Is the Trust Boundary
A remediated ChatGPT isolation flaw may have let one authenticated session reach another account’s connected data, showing how fragile AI-assisted SaaS boundaries can become.
Seconds Matter: The Push to Make API Keys Self-Invalidate
A proposal for revocable API keys tries to turn credential leaks from long-running risks into fast-moving containment events.
The Cloud Lesson Most Teams Learn Too Late: Responsibility Does Not End at the Provider
A multi-cloud fundamentals piece lands in a category where the real risk is not infrastructure alone, but the boundary between provider control and customer control.
Forgotten Google Workspace Grants: The Quiet Risk Hiding in Plain Sight
A webinar focused on third-party access inside Google Workspace points to a broader SaaS problem: permissions outlive business need unless teams actively find and remove them.
The Quiet Security Story Behind a 4% Savings Offer: Identity Became the Front Door
A six-month deposit, a fixed gross return, and online onboarding through SPID turn a routine savings offer into a useful case study in digital trust, credential protection, and remote identity assurance.
When a Leaked AWS Key Turns Into Paid AI Abuse
A compromised cloud credential can do more than open a door - it can turn a victim’s account into a meter for unauthorized model use.
When Identity Becomes the Gatekeeper: Zero Trust 2.0 Moves Security to the Login Layer
The shift toward Identity-First Security treats access, privilege, governance, and threat detection as one control plane, not separate IAM chores.