SHADOWFIREWALL
Arquitecto de defensa adaptativa
Perfil profesional
ShadowFirewall crea firewalls de comportamiento basados en modelos de patrones hostiles. Con formación en IA y sistemas embebidos, diseña defensas reactivas que aprenden del tráfico.
Competencias clave
Firewalls adaptativos; modelado de comportamiento hostil; detección de anomalías; microsegmentación; seguridad OT/SCADA
Logros principales
Diseñó el primer firewall de comportamiento de una fábrica inteligente europea.
Artículos de SHADOWFIREWALL
Developer Laptops Are Becoming the Quietest Secret Vault in the Enterprise
A new endpoint-focused control for developer workstations reflects a growing security reality: the biggest credential risk may now live outside the repository, in the local tools and caches engineers use every day.
The Real Login Trap: How Device Code Prompts Can Turn Microsoft 365 Into a Token Prize
A legitimate Microsoft sign-in path can be twisted into an authorization relay, letting an attacker win access after the victim approves the wrong device.
When a Trusted Copilot Becomes a Data Trap
SearchLeak shows how a single crafted link in Microsoft 365 Copilot Enterprise could turn everyday productivity into a high-risk disclosure path across mail, files, and collaboration data.
Claude Draws a Harder Line Between Identity and Access
Anthropic is formalizing age and identity checks for consumer Claude accounts, a move that turns onboarding into a security control rather than a simple signup step.
CNAPP’s Real Test: What Gets Unified, and What Still Lives in the Gaps
CNAPP is often framed as a single answer to cloud security sprawl, but the useful question is narrower: does it genuinely connect posture, workload, identity, and runtime, or only place them under one label?
Kubernetes Risk Is Often Written in Its Own Configuration
The sharp edge in many clusters is not a zero-day, but a chain of permissive choices across RBAC, pod policy, admission control, and network rules.
When Audit Trails Turn into Cover Tracks in the Cloud
Cloud logging is built to expose suspicious behavior, but the same trust can make log stores and export paths attractive to stealthy exfiltration tactics.
Cloud Exit, Hidden Ties: Why Hybrid Freedom Is Harder Than It Looks
The push to reduce dependence on dominant cloud providers is technically possible, but the real battle is portability, identity control, and cost discipline across hybrid and multicloud stacks.
When a Hosted Control Plane Slips, Customer Data Can Move With It
ServiceNow’s June 5 security update highlights how a single SaaS authorization flaw can create risk far beyond one tenant, even when the exact technical path remains undisclosed.
France’s Secure Chat Wasn’t Broken - Its Identity Layer Was
A compromised user account inside Tchap shows how a trusted login can become the real breach point, even when encrypted messaging itself is not the weak link.
When a Mailbox Send Becomes an Identity Mystery Inside Entra
A logged email from an assistive agent shows how delegated cloud identities can blur the line between automation, authorization, and suspicious behavior.
Why Microsoft Entra Logs Matter When AI Agents Start Acting Like Users
Assistive AI can move fast inside enterprise accounts, but the security story is increasingly about identity traces, delegated consent, and whether an agent’s sign-ins look normal or suspicious.
When Cloud Spending Becomes a Sovereignty Test
Enterprise cloud is no longer judged only by cost savings: governance, FinOps, hybrid design, data quality, AI, and change management now decide whether it creates real strategic value.
The Hidden Test Behind Every PAM Buy: Can It Actually Cut Privilege?
A 2026 roundup of privileged access management tools is a reminder that the real question is not who ranks first, but whether the product shrinks standing admin power in cloud, SaaS, and hybrid estates.
Ghost-Sender Turns Exchange Online Into a Trust Trap
A configuration-dependent mail-flow weakness in Microsoft’s cloud email stack shows how sender authentication can be undermined when the tenant boundary is trusted too early.
Instagram’s Recovery Path Became the Weak Link in Account Security
A Meta-described bug in an Instagram recovery tool put 20,225 accounts into a password-reset risk zone and showed why recovery flows need the same hardening as login itself.
OpenAI Adds New Locks to ChatGPT as Account Security Becomes the Real Battleground
Active Sessions and Lockdown Mode are being expanded, turning ChatGPT into a tighter-controlled workspace where visibility and restriction matter as much as convenience.
Recovery Flows Became the Target in a 20,000-Account Instagram Breach Wave
A reported abuse of AI-assisted account recovery shows why support systems are now part of the authentication battlefield.
When an AI Action Can Read the Runner, Secrets Stop Being Secret
A GitHub Actions warning shows how a file-reading tool inside an agentic workflow can become a quiet path to CI/CD environment data.
When a Package Becomes a Proxy: The Claude Code MCP Token Trap
A malicious npm package was used in a demonstrated attack path that rerouted Claude Code integrations and put OAuth bearer tokens in the crosshairs.