SHADOWFIREWALL
Adaptive Defense Architect
Professional Profile
ShadowFirewall creates behavioral firewalls based on hostile-pattern models. Background in AI and embedded systems, designs reactive defenses that learn from traffic.
Key Skills
Adaptive firewalls; Hostile-behavior modeling; Anomaly detection; Micro-segmentation; OT/SCADA security
Major Achievements
Designed the first behavioral firewall of a European smart factory.
Articles by SHADOWFIREWALL
The Hidden Identity Layer AI Is Quietly Filling With Risk
As AI adoption accelerates, the weakest link is often not the model itself but the machine identities that let it act inside cloud and SaaS systems.
Helpdesk Impersonation in Teams Becomes a Quiet Entry Point for Malware
A Microsoft Teams impersonation campaign has been linked to a custom Go-based backdoor, with a possible ransomware connection still unconfirmed.
VPNs Are Still Encrypting Traffic - But They May Be Handing Out Too Much Trust
The real security fight is shifting from the tunnel itself to what happens after login: who is trusted, which device is trusted, and how much of the network is reachable.
Hotel Wi-Fi Turns into a Cloud Identity Snare
ReliaQuest-linked findings point to compromised hospitality gateways being used against Microsoft 365 sign-ins, showing how network control can become an identity attack surface.
The Missing Clauses That Can Reprice a Deal
When a scale-up depends on external analytics, unclear rights to data and model artifacts can turn diligence into a security and valuation problem.
Why a $20M Identity Bet Says More About Access Chaos Than AI Hype
A new funding round for Way Security points to a simple but stubborn problem in enterprise security: IAM is still hard to run, and investors are betting that AI can help without weakening control.
Azure Automation’s Quiet Default That Could Have Collapsed Tenant Boundaries
Microsoft corrected a public-by-default configuration and code flaws in a cloud automation service that may have created a cross-tenant identity risk, without any confirmed exploitation in the available material.
The Quiet Wi-Fi Trap Turning Travel Logins Into Identity Theft
A compromise at the hotel or conference network edge can steer Microsoft 365 sign-ins off course, showing how DNS tampering can become an identity attack without phishing or malware.
The VPN Question Is Really About Trust: Why 2026 Access Control Looks Different
A 2026 comparison of VPN and Zero Trust lands in a familiar but sharper debate: whether remote access should open a tunnel, or enforce policy at every step.
The New Fraud Frontier Is Not a Person - It Is the Machine Behind the Person
Synthetic identity fraud is moving from human impersonation into machine identities, where fake trust can be harder to spot and slower to unwind.
When the Inbox Becomes the Incident: Exchange Online’s Quarantine Glitch
Microsoft is working to resolve an Exchange Online issue that is mistakenly quarantining customer mailboxes, a reminder that cloud email controls can fail without any attacker in sight.
When a PDF Add-On Starts Seeing Chat Text, the Browser Becomes the Weakest Link
A flaw in Adobe’s Acrobat Chrome extension could let websites access WhatsApp Web content rendered in the browser, underscoring how sensitive data can surface after encryption has already done its job.
When a Phone Number Becomes the Weakest Link
A near account takeover tied to SIM swap fraud shows why identity checks must change as risk signals change, not freeze at login.
The Real SASE Question Is Not Where Data Lives, but Who Controls the Service
Digital sovereignty in cloud security can hinge on control planes, metadata, and governance choices that sit far beyond simple data residency.
The Real Security Battle Starts After the Password Works
Access control is not a login problem, but a decision problem: once identity is confirmed, the harder task is proving who may do what, and keeping that answer usable as roles change.
CAV3RN’s New Build Trades WebSockets for Outlook Calendar Access
A reported .NET Native AOT module shifts the communication layer toward Microsoft 365 calendar objects and adds a DNS recovery path, showing how cloud identity surfaces can become part of malware plumbing.
NIST Draws a Harder Line on Identity, and Phishing Is Losing Its Easy Wins
The latest NIST digital identity guidance pushes organizations toward phishing-resistant login, ongoing risk checks, and Zero Trust thinking, but the real challenge is how to make that work across cloud, SaaS, and recovery flows.
A Cloud Summit Becomes a Map of the Real Risk Behind Modern Infrastructure
SecurityWeek’s on-demand Cloud & Data Security Summit is a reminder that cloud risk is less about one headline threat and more about the daily choices around identity, data, and configuration.
Privacy Sells, but the Real Security Test Is in the Keys
Cloud storage offers built around discounts, lifetime access, and encryption branding look attractive, yet the defensive value depends on who controls decryption and how much the provider can actually see.
Fake App IDs, Real Password Tests: The Entra Trick Hiding in Plain Sight
A stealthy abuse of OAuth client IDs in Microsoft Entra ID can turn sign-in failures into an oracle for account discovery and credential checks.