SHADOWFIREWALL
Architetto della difesa adattiva
Profilo professionale
ShadowFirewall crea firewall comportamentali basati su modelli di pattern ostili. Con un background in AI e sistemi embedded, progetta difese reattive che apprendono dal traffico.
Competenze chiave
Firewall adattivi; Modellazione del comportamento ostile; Rilevamento delle anomalie; Micro-segmentazione; Sicurezza OT/SCADA
Risultati principali
Progettato il primo firewall comportamentale di una smart factory europea.
Articoli di SHADOWFIREWALL
When Microsoft Sign-In Becomes the Trap: ARToken and the New Token-Theft Playbook
A phishing kit tied to Microsoft 365 targeting shows how attackers can lean on legitimate cloud login flows, trusted collaboration branding, and edge-hosted delivery to turn identity into the attack surface.
The ARToken Panel Shows How Phishing Became a Token Factory
A React-based phishing-as-a-service panel reportedly built for Microsoft 365 abuse points to a quieter threat: industrialized token handling, not just stolen passwords.
The SaaS Blind Spot: Why Security Teams Are Now Chasing Settings, Identities, and OAuth Grants
SSPM shifts cloud defense toward the place many teams least control: the configuration and delegated access of SaaS apps they use every day.
81 Million Logins, 78 Compromises: The Password-Spray Flood Hitting Microsoft 365
A massive credential campaign against Microsoft 365 shows how distributed password spraying can turn identity controls into the real front line of cloud defense.
How a Port Can Go Dark Without Touching the Control Room
The Porto di Ancona case points to a harsh lesson for critical infrastructure: cloud identity failures can disrupt operations even when industrial systems are reportedly untouched.
81 Million Login Shots Fired at Azure CLI - and Identity Teams Take the Hit
A huge password-spray wave against Microsoft’s command-line cloud tooling shows why authentication, not code, is often the real battleground in modern cloud attacks.
Teams Puts AI Meeting Bots Behind a New Trust Gate
Microsoft is tightening meeting access controls as organizations struggle to tell a helpful assistant from an unwanted listener.
AppViewX Bets on the Hidden Identity Layer Powering Cloud and AI Workloads
A new partner push around machine and agent identity security shows how enterprise trust is moving beyond human logins and into the cryptographic systems that keep software, devices, and AI agents in check.
Where the Cloud Fractures: The Security Logic Behind Multicloud Segmentation
In multicloud environments, the real defense is not a bigger perimeter but tighter boundaries that can survive change, expansion, and misconfiguration.
When Cloud First Becomes Risk First: The New Fight Over Data, Jurisdiction, and Control
Enterprise cloud strategy is shifting away from cost-only thinking toward workload sensitivity, portability, and identity-based access in a world shaped by regulation and geopolitical pressure.
When a Deleted Bucket Becomes Someone Else’s Inbox: The Cloud Name-Reuse Trap
A reported cloud storage hijack pattern can redirect logs, telemetry, and other routed data when a deleted bucket name is later reclaimed, turning namespace hygiene into a security control.
One Ticket, Many Doors: The AD360 Flaw That Put SSO Under the Microscope
A critical ManageEngine vulnerability shows how a predictable login artifact can turn a convenience feature into a cross-product security risk.
One Ticket, Many Doors: The ManageEngine Identity Flaw That Could Turn Trust Into Impersonation
CVE-2026-11374 shows how a predictable SSO artifact inside an integrated identity suite can become a serious account-takeover risk.
Password Vaults Are Replacing Password Chaos - and the Attack Surface Behind Them
Credential management is no longer a housekeeping task: when passwords are reused, shared informally, or stored in scattered places, a single compromise can ripple across an entire environment.
When the Password Is the Body: Why Biometric Identity Is Hard to Take Back
Biometrics can make logins smoother, but they also turn identity into something that cannot be rotated the way a password or token can.
When a CRM Connector Becomes the Weakest Door in the Building
A reported Klue-related incident shows how a single SaaS integration can turn Salesforce data into the real target, even when the platform itself is not the product under attack.
AI Sovereignty Is a Control Problem, Not a Flag on a Server
The real question is who can govern data, identities, infrastructure, and model lifecycles when cloud and AI are intertwined.
When One Token Becomes the Breach: The SaaS Integration Risk Hiding in Plain Sight
A limited customer-data exposure tied to Klue and LastPass shows how delegated access can turn a third-party integration into a security choke point.
Stolen Trust: How a Third-Party OAuth Token Put CRM Data in Reach
A reported breach involving a Salesforce-connected environment shows how a single compromised integration credential can turn SaaS trust into a data-access problem.
The Exit Door Is the Weakest Wall in Cloud Security
Outbound traffic often stays too open in cloud environments, and that can turn a compromised workload or AI agent into a quiet data-leak path.