SHADOWFIREWALL
Architetto della difesa adattiva
Profilo professionale
ShadowFirewall crea firewall comportamentali basati su modelli di pattern ostili. Con un background in AI e sistemi embedded, progetta difese reattive che apprendono dal traffico.
Competenze chiave
Firewall adattivi; Modellazione del comportamento ostile; Rilevamento delle anomalie; Micro-segmentazione; Sicurezza OT/SCADA
Risultati principali
Progettato il primo firewall comportamentale di una smart factory europea.
Articoli di SHADOWFIREWALL
The Real Login Trap: How Device Code Prompts Can Turn Microsoft 365 Into a Token Prize
A legitimate Microsoft sign-in path can be twisted into an authorization relay, letting an attacker win access after the victim approves the wrong device.
When a Trusted Copilot Becomes a Data Trap
SearchLeak shows how a single crafted link in Microsoft 365 Copilot Enterprise could turn everyday productivity into a high-risk disclosure path across mail, files, and collaboration data.
Claude Draws a Harder Line Between Identity and Access
Anthropic is formalizing age and identity checks for consumer Claude accounts, a move that turns onboarding into a security control rather than a simple signup step.
CNAPP’s Real Test: What Gets Unified, and What Still Lives in the Gaps
CNAPP is often framed as a single answer to cloud security sprawl, but the useful question is narrower: does it genuinely connect posture, workload, identity, and runtime, or only place them under one label?
Kubernetes Risk Is Often Written in Its Own Configuration
The sharp edge in many clusters is not a zero-day, but a chain of permissive choices across RBAC, pod policy, admission control, and network rules.
When Audit Trails Turn into Cover Tracks in the Cloud
Cloud logging is built to expose suspicious behavior, but the same trust can make log stores and export paths attractive to stealthy exfiltration tactics.
Cloud Exit, Hidden Ties: Why Hybrid Freedom Is Harder Than It Looks
The push to reduce dependence on dominant cloud providers is technically possible, but the real battle is portability, identity control, and cost discipline across hybrid and multicloud stacks.
When a Hosted Control Plane Slips, Customer Data Can Move With It
ServiceNow’s June 5 security update highlights how a single SaaS authorization flaw can create risk far beyond one tenant, even when the exact technical path remains undisclosed.
France’s Secure Chat Wasn’t Broken - Its Identity Layer Was
A compromised user account inside Tchap shows how a trusted login can become the real breach point, even when encrypted messaging itself is not the weak link.
When a Mailbox Send Becomes an Identity Mystery Inside Entra
A logged email from an assistive agent shows how delegated cloud identities can blur the line between automation, authorization, and suspicious behavior.
Why Microsoft Entra Logs Matter When AI Agents Start Acting Like Users
Assistive AI can move fast inside enterprise accounts, but the security story is increasingly about identity traces, delegated consent, and whether an agent’s sign-ins look normal or suspicious.
When Cloud Spending Becomes a Sovereignty Test
Enterprise cloud is no longer judged only by cost savings: governance, FinOps, hybrid design, data quality, AI, and change management now decide whether it creates real strategic value.
The Hidden Test Behind Every PAM Buy: Can It Actually Cut Privilege?
A 2026 roundup of privileged access management tools is a reminder that the real question is not who ranks first, but whether the product shrinks standing admin power in cloud, SaaS, and hybrid estates.
Ghost-Sender Turns Exchange Online Into a Trust Trap
A configuration-dependent mail-flow weakness in Microsoft’s cloud email stack shows how sender authentication can be undermined when the tenant boundary is trusted too early.
Instagram’s Recovery Path Became the Weak Link in Account Security
A Meta-described bug in an Instagram recovery tool put 20,225 accounts into a password-reset risk zone and showed why recovery flows need the same hardening as login itself.
OpenAI Adds New Locks to ChatGPT as Account Security Becomes the Real Battleground
Active Sessions and Lockdown Mode are being expanded, turning ChatGPT into a tighter-controlled workspace where visibility and restriction matter as much as convenience.
Recovery Flows Became the Target in a 20,000-Account Instagram Breach Wave
A reported abuse of AI-assisted account recovery shows why support systems are now part of the authentication battlefield.
When an AI Action Can Read the Runner, Secrets Stop Being Secret
A GitHub Actions warning shows how a file-reading tool inside an agentic workflow can become a quiet path to CI/CD environment data.
When a Package Becomes a Proxy: The Claude Code MCP Token Trap
A malicious npm package was used in a demonstrated attack path that rerouted Claude Code integrations and put OAuth bearer tokens in the crosshairs.
The Seams Are the Battlefield: Multi-Cloud’s Hidden Control Problem
The real risk in multi-cloud is not having too many tools, but failing to govern routing, sovereignty, and recovery as one continuous system.