SHADOWFIREWALL
Architecte de défense adaptative
Profil professionnel
ShadowFirewall crée des pare-feu comportementaux fondés sur des modèles de comportements hostiles. Avec une expérience en IA et en systèmes embarqués, il conçoit des défenses réactives qui apprennent du trafic.
Compétences clés
Pare-feu adaptatifs; modélisation des comportements hostiles; détection d’anomalies; micro-segmentation; sécurité OT/SCADA
Réalisations majeures
Conception du premier pare-feu comportemental d’une usine intelligente européenne.
Articles de SHADOWFIREWALL
Why a $2.9 Million Identity Bet Says More About Security Priorities Than Startup Money
8Layers’ extended pre-seed round is a small financing headline with a larger technical signal: buyers are still looking for better ways to see, score, and govern identity risk before attackers do.
Passkeys Shift the Battle Line: Attackers Move From Password Dumps to Verification Flaws
As password replay loses value in well-implemented passkey environments, account takeover pressure is migrating toward verification, recovery, and fallback paths that still decide who gets in.
The Real Microsoft Login That Handed Criminals a Session
A phishing kit called EvilTokens shows how attackers can abuse a legitimate OAuth path to collect valid Microsoft 365 tokens without stealing a password.
When a Preview Becomes a Breach Path: The Writer AI Session Leak Risk
A now-patched flaw in an enterprise AI workspace shows how a seemingly harmless preview layer can turn into a tenant-boundary problem if session handling slips.
The Hidden Identity Layer Powering AI: Why Machines Are Becoming the Hardest Users to Govern
A security article published on 2026-07-06 puts Non-Human Identities and AI agents in the spotlight, but the deeper issue is bigger: machine access is now a governance problem, not just a credential problem.
When the Login Page Is Real: The Device-Code Phishing Playbook Targeting Microsoft Accounts
A legitimate Microsoft sign-in path built for low-input devices is being repurposed as a phishing lure, shifting the attack from password theft to trusted-session abuse.
When a Browser Becomes the Break-In Tool
A token-theft workflow tied to Umbrij shows how ordinary browser developer features can be turned into quiet access to corporate Gmail and other Google services.
When Secrets Outnumber People, Identity Becomes the Real Attack Surface
Non-human identities like service accounts, tokens, and secrets are often dozens of times more numerous than users, and that imbalance makes credential lifecycle management a core security problem.
Europe’s Cloud Badge War: When Sovereignty Has to Pass an Audit
Four providers entering a CISPE certification path shows how cloud sovereignty is shifting from branding to testable controls, with law and governance now part of the security stack.
When Agents Start Buying Software, the Real Battleground Becomes Identity, Not Interface
Gartner’s forecast of US$234 billion in exposed SaaS spend is less about a software collapse than a shift in control, where permissions, contracts, and machine memory matter more than dashboards.
When the Badge Belongs to Software, HR Rules Stop Working
Identity programs built for employees are colliding with AI agents that can act, delegate, and persist without a hire date or departure notice.
When Microsoft Sign-In Becomes the Trap: ARToken and the New Token-Theft Playbook
A phishing kit tied to Microsoft 365 targeting shows how attackers can lean on legitimate cloud login flows, trusted collaboration branding, and edge-hosted delivery to turn identity into the attack surface.
The ARToken Panel Shows How Phishing Became a Token Factory
A React-based phishing-as-a-service panel reportedly built for Microsoft 365 abuse points to a quieter threat: industrialized token handling, not just stolen passwords.
The SaaS Blind Spot: Why Security Teams Are Now Chasing Settings, Identities, and OAuth Grants
SSPM shifts cloud defense toward the place many teams least control: the configuration and delegated access of SaaS apps they use every day.
81 Million Logins, 78 Compromises: The Password-Spray Flood Hitting Microsoft 365
A massive credential campaign against Microsoft 365 shows how distributed password spraying can turn identity controls into the real front line of cloud defense.
How a Port Can Go Dark Without Touching the Control Room
The Porto di Ancona case points to a harsh lesson for critical infrastructure: cloud identity failures can disrupt operations even when industrial systems are reportedly untouched.
81 Million Login Shots Fired at Azure CLI - and Identity Teams Take the Hit
A huge password-spray wave against Microsoft’s command-line cloud tooling shows why authentication, not code, is often the real battleground in modern cloud attacks.
Teams Puts AI Meeting Bots Behind a New Trust Gate
Microsoft is tightening meeting access controls as organizations struggle to tell a helpful assistant from an unwanted listener.
AppViewX Bets on the Hidden Identity Layer Powering Cloud and AI Workloads
A new partner push around machine and agent identity security shows how enterprise trust is moving beyond human logins and into the cryptographic systems that keep software, devices, and AI agents in check.
Where the Cloud Fractures: The Security Logic Behind Multicloud Segmentation
In multicloud environments, the real defense is not a bigger perimeter but tighter boundaries that can survive change, expansion, and misconfiguration.