SHADOWFIREWALL
Adaptive Defense Architect
Professional Profile
ShadowFirewall creates behavioral firewalls based on hostile-pattern models. Background in AI and embedded systems, designs reactive defenses that learn from traffic.
Key Skills
Adaptive firewalls; Hostile-behavior modeling; Anomaly detection; Micro-segmentation; OT/SCADA security
Major Achievements
Designed the first behavioral firewall of a European smart factory.
Articles by SHADOWFIREWALL
The Passkey Myth Crack: How Attackers Can Work Around Phishing-Resistant MFA
Fresh research shows that passkeys can remain cryptographically sound while the surrounding endpoint and sync layers still offer room for abuse.
Two Quiet Trust Layers, One Loud Warning: Identity Keys and NAT State Are Now in the Crosshairs
A pair of disclosures points at the same uncomfortable truth: attackers do not always need to break passwords or firewalls when they can target the long-lived state underneath them.
Phone Calls Are Becoming the Front Door to Cloud Account Theft
A tracked cybercrime crew tied to vishing is being associated with corporate account abuse, with Microsoft 365 and Okta in the spotlight and extortion risk following close behind.
Cloudflare’s AI Workspace Play: When Identity, Spend, and Agents Become the New Perimeter
The company is betting that enterprise AI needs a browser-native control plane, where access, state, and cost are governed before an agent can act.
Elisity Pushes Zero Trust Into the CLI Layer
The new Elisity CLI puts customer-controlled AI agents in front of identity-based microsegmentation, shifting attention from dashboards to the control plane.
Personal Logins, Corporate Risk: The AI Blind Spot Hiding in Plain Sight
A new vendor report puts a hard number on a familiar security problem: enterprise AI use is increasingly happening through personal identities, outside normal controls.
When a Real Microsoft Login Becomes the Trap Door
A phishing kit tied to Kali365 is abusing Microsoft’s device-code sign-in path, showing how legitimate authentication can be twisted into a cloud access problem.
When 91% of Production Access Is Not Human, the Real Security Problem Becomes Visibility
ClearVector’s latest report puts a sharp number on a familiar cloud problem: organizations may know how many identities they have, but still struggle to tell which ones are software, who owns them, and whether their access still belongs.
When a Legitimate Microsoft Login Becomes the Attack
A reported campaign tied to Kali365 shows how Microsoft device login can be twisted into an OAuth token grab, turning an ordinary sign-in step into a cloud security problem for targeted U.S. firms.
Inside the Cloud Back Door: Why Access to Biotech Data Matters Even Before Theft Is Proven
A cloud-side incident involving patient information and proprietary data shows how third-party access paths can become the most sensitive part of a company’s security stack.
When Security Noise Became a Risk Map Inside a Federal Credit Union
A U.S. financial cooperative turned to AI-assisted exposure management to stitch together fragmented security data and decide which vulnerabilities actually mattered.
When AWS Data Blinks Public for Minutes, the Exposure Can Outlast the Mistake
Brief misconfigurations in snapshots, machine images, and SSM documents can turn a routine cloud task into a fast-moving exposure window with real data-hygiene consequences.
The Quiet Front Line: Why Identity Posture Is Now a Breach Boundary
As vulnerabilities, stolen credentials, and identity abuse converge, ISPM is emerging as a practical way to shrink the attack paths that patching alone cannot close.
When Identity Becomes a Signal Stack: The New Battle Over Digital Trust
A risk-based onboarding model is pushing identity checks beyond documents, using email, phone, IP, and device context to decide when trust should rise or fall.
The Hidden Identity Layer AI Is Quietly Filling With Risk
As AI adoption accelerates, the weakest link is often not the model itself but the machine identities that let it act inside cloud and SaaS systems.
Helpdesk Impersonation in Teams Becomes a Quiet Entry Point for Malware
A Microsoft Teams impersonation campaign has been linked to a custom Go-based backdoor, with a possible ransomware connection still unconfirmed.
VPNs Are Still Encrypting Traffic - But They May Be Handing Out Too Much Trust
The real security fight is shifting from the tunnel itself to what happens after login: who is trusted, which device is trusted, and how much of the network is reachable.
Hotel Wi-Fi Turns into a Cloud Identity Snare
ReliaQuest-linked findings point to compromised hospitality gateways being used against Microsoft 365 sign-ins, showing how network control can become an identity attack surface.
The Missing Clauses That Can Reprice a Deal
When a scale-up depends on external analytics, unclear rights to data and model artifacts can turn diligence into a security and valuation problem.
Why a $20M Identity Bet Says More About Access Chaos Than AI Hype
A new funding round for Way Security points to a simple but stubborn problem in enterprise security: IAM is still hard to run, and investors are betting that AI can help without weakening control.