SHADOWFIREWALL
Arquitecto de defensa adaptativa
Perfil profesional
ShadowFirewall crea firewalls de comportamiento basados en modelos de patrones hostiles. Con formación en IA y sistemas embebidos, diseña defensas reactivas que aprenden del tráfico.
Competencias clave
Firewalls adaptativos; modelado de comportamiento hostil; detección de anomalías; microsegmentación; seguridad OT/SCADA
Logros principales
Diseñó el primer firewall de comportamiento de una fábrica inteligente europea.
Artículos de SHADOWFIREWALL
When a Critical Bug Meets a Thin Permission Set, the Damage Changes Shape
PHP2Shell is being used as a warning about speed: patching matters, but limiting what service accounts, API keys, and AI agents can reach may matter just as much when defenders are racing the clock.
Microsoft’s Passkey Deadline Signals the End of an Old Identity Shortcut
Entra ID administrators are being pushed toward phishing-resistant sign-in methods as Microsoft prepares to retire its own SMS and voice authentication path on a staggered timetable.
The Quiet Leak Is Often the Permission You Forgot You Gave
A buyer’s guide on data access governance lands at the center of a bigger problem: AI assistants can turn ordinary over-permissioning into instantly searchable exposure.
When Cloud Settings Become the Weakest Link, CISA’s Free Scanners Step In
ScubaGear and ScubaGoggles do not block attacks on their own, but they can expose the misconfigurations that make Microsoft 365 and Google Workspace easier to abuse.
Approval Is Not Access: The Cloud Log Allegation That Exposed a Bigger Trust Problem
Screenshots linked to a disputed access workflow may hint at a review step, but they do not by themselves prove that government cloud logs were actually reached or misused.
A Silent Android Path Into Microsoft Work Tokens, Now Patched
Microsoft has fixed a reported Authenticator for Android flaw that could let a permissionless app pose as a trusted Microsoft client and request work-account tokens.
The Wallet Deadline That Will Rewrite Digital Identity Checks
A 2027 compliance milestone could force a rethink of how covered private services verify users, validate attributes, and protect the trust chain behind login.
When a Chat Window Becomes a Business Dependency
A WhatsApp Business account limitation can become an operational problem when sales, support, and contact handling depend on a single third-party channel.
When a Session Outlives the Password, Cloud Email Becomes the Prize
Reported Microsoft 365 access through replayed sign-in sessions shows how identity controls can fail after login, when a stolen session may matter more than a stolen password.
When a GitHub Token Turns Into a Secret-Harvesting Tool
A reported campaign used stolen GitHub credentials and tampered workflows to push repository secrets into Actions logs, showing how CI/CD systems can become a quiet exfiltration path.
When "Sovereign" Is a Label, Not a Guarantee
A hybrid sovereign architecture may help with AI, critical data, and compliance goals, but the security value depends on controls that can be tested, logged, and proven.
The New Vendor Trap Is Not the Model, It Is the Memory
Cloud switching can be easier under the Data Act, but AI memories, prompts, configurations, and learned behavior may still resist clean migration and create a quieter form of lock-in.
Backup Silence at ConnectWise: A Supply-Chain Alarm With No Clear End Yet
ConnectWise’s cloud backup suspension shows how a security containment move can become an operational outage, even while the full technical root cause remains unconfirmed.
Google Cloud Disruption in London Interrupted UK Banking Services
A regional cloud incident in europe-west2 coincided with service interruptions at some British banks, but the public facts still stop short of confirming a root cause or wider compromise.
When the Backup Vendor Goes Dark, the Real Outage Starts
ConnectWise has reportedly taken cloud services offline after a cyberattack, a reminder that the hardest part of incident response is often not the break-in but the temporary loss of the tools customers depend on.
When a Backup Provider’s Credential Starts Acting Like a Bridge Into Microsoft 365
A reported credential incident tied to a cloud backup service shows how one provider-side secret can trigger tenant-level scrutiny, even when revocation has already begun.
One Backup Credential, 173 Tenant Logins: Why Cloud Trust Chains Break Loudly
A reported compromise tied to ConnectWise Cloud Backup has turned Microsoft 365 identity plumbing into the focus of a live investigation, with authentication events said to span 173 tenants.
The Quiet Click That Can Rewrite Cloud Access
Reported consent-phishing activity around Microsoft Entra ID shows how a single authorization prompt can become an identity risk, even when passwords are never touched.
AI Agents Are Turning Identity Into the New Attack Surface
The material frames a simple warning: as agents multiply machine identities, credentials, and access paths, defenders have to think beyond the perimeter and test how identity can be restored under pressure.
Microsoft 365’s Quiet Weak Point: The Settings Everyone Forgets
The real security story in many Microsoft 365 tenants is not a headline-grabbing exploit, but the slow buildup of weak defaults, stale exceptions, and privilege that was never trimmed back.