SHADOWFIREWALL
Architetto della difesa adattiva
Profilo professionale
ShadowFirewall crea firewall comportamentali basati su modelli di pattern ostili. Con un background in AI e sistemi embedded, progetta difese reattive che apprendono dal traffico.
Competenze chiave
Firewall adattivi; Modellazione del comportamento ostile; Rilevamento delle anomalie; Micro-segmentazione; Sicurezza OT/SCADA
Risultati principali
Progettato il primo firewall comportamentale di una smart factory europea.
Articoli di SHADOWFIREWALL
One Ticket, Many Doors: The AD360 Flaw That Put SSO Under the Microscope
A critical ManageEngine vulnerability shows how a predictable login artifact can turn a convenience feature into a cross-product security risk.
One Ticket, Many Doors: The ManageEngine Identity Flaw That Could Turn Trust Into Impersonation
CVE-2026-11374 shows how a predictable SSO artifact inside an integrated identity suite can become a serious account-takeover risk.
Password Vaults Are Replacing Password Chaos - and the Attack Surface Behind Them
Credential management is no longer a housekeeping task: when passwords are reused, shared informally, or stored in scattered places, a single compromise can ripple across an entire environment.
When the Password Is the Body: Why Biometric Identity Is Hard to Take Back
Biometrics can make logins smoother, but they also turn identity into something that cannot be rotated the way a password or token can.
When a CRM Connector Becomes the Weakest Door in the Building
A reported Klue-related incident shows how a single SaaS integration can turn Salesforce data into the real target, even when the platform itself is not the product under attack.
AI Sovereignty Is a Control Problem, Not a Flag on a Server
The real question is who can govern data, identities, infrastructure, and model lifecycles when cloud and AI are intertwined.
When One Token Becomes the Breach: The SaaS Integration Risk Hiding in Plain Sight
A limited customer-data exposure tied to Klue and LastPass shows how delegated access can turn a third-party integration into a security choke point.
Stolen Trust: How a Third-Party OAuth Token Put CRM Data in Reach
A reported breach involving a Salesforce-connected environment shows how a single compromised integration credential can turn SaaS trust into a data-access problem.
The Exit Door Is the Weakest Wall in Cloud Security
Outbound traffic often stays too open in cloud environments, and that can turn a compromised workload or AI agent into a quiet data-leak path.
AWS Egress Gets the Spotlight as Quiet Outbound Traffic Becomes a Security Decision
The real cloud control problem is not only what gets in, but what is allowed to leave, be observed, and be explained later.
Microsoft Draws a New Boundary Between Copilot and Sensitive Office Files
A label-driven control is rolling out in Microsoft 365, tightening how protected documents can interact with connected experiences and AI-powered features.
The SaaS Shortcut That Turned Risky: What a Salesforce-Klue Token Incident Reveals
A disabled integration, a legacy credential, and reported OAuth token theft point to a familiar cloud problem: trusted connectors can become high-value access paths when secrets outlive their purpose.
When an iPhone App Hands Out the Keys to Its Own AI
A security study found that many LLM-integrated iOS apps expose API credentials over network traffic, creating a practical risk of unauthorized AI inference usage and billing abuse.
OpenAI’s New Budget Knobs Turn Enterprise AI Into Something Finance Can Finally See
ChatGPT Enterprise now gives administrators a clearer view of credit consumption, a tighter way to set budgets, and a better lens on where AI spend is actually going.
The Login Problem: Why Identity Has Become the New Perimeter
ITDR is emerging as a response to attackers who do not smash endpoints first, but abuse valid logins, stolen tokens, and identity paths that ordinary tools may not fully watch.
Token Trouble at the SaaS Border: Why Salesforce Cut Off a Third-Party Connector
A disabled app integration has turned into a lesson in delegated access, where one abused token can force a platform to shut the door on an entire data path.
How a Compromised Klue Integration Could Turn Salesforce Into an Exfiltration Channel
A reported abuse of OAuth-linked SaaS trust shows how one third-party integration can become a quiet path to CRM data.
Trusted App, Quiet Pipe: How a SaaS Integration Can Become a CRM Drain
A reported compromise of a Klue Battlecards integration shows how OAuth-backed connections can turn routine Salesforce access into a low-noise collection path.
1Password’s Move Points to the New Frontier of Access Control: Humans, Machines, and AI
A reported nine-figure acquisition highlights how identity security is shifting from static passwords to time-bound privilege, machine identities, and AI-era governance.
Inside the New Security Bet: Watching Intent Before the Click Becomes a Breach
Ent has surfaced with a large seed round and a pitch that moves endpoint defense closer to decision time, where behavior can be judged before a risky action is completed.