WHITEHAWK
Estratega de inteligencia cibernética
Perfil profesional
WhiteHawk es un experto en inteligencia y atribución de ataques. Trabaja con agencias de investigación y empresas de alto riesgo.
Competencias clave
Inteligencia cibernética; análisis de actores de amenazas; monitorización de la dark web; atribución y perfilado; OSINT avanzado
Logros principales
Identificó a un grupo criminal vinculando nueve alias de la dark web.
Artículos de WHITEHAWK
Italy’s CRA Draft Exposes the Hard Part of Cyber Law: Turning Rules into Operations
A new Italian draft decree for the Cyber Resilience Act signals that the real battle is no longer the text of the regulation, but the machinery needed to enforce it without creating gaps, overlap, or confusion.
Smart Glasses, Silent Bystanders, and the New Privacy Liability Line
An EDPB clarification suggests that responsibility for smart-glasses data can extend beyond the wearer, putting manufacturers and service providers in the privacy frame when passers-by are recorded.
The Audit Trail That Decides Whether Police Data Is Defensible
In law-enforcement data processing, the hard part is not only collecting records, but proving that access, logs, retention, and transfers are controlled well enough to survive scrutiny.
Italy’s AI Rulebook Tightens, But the Hard Questions Stay Legal
Two Italian decrees are being framed as new guardrails for workplace AI, yet the verified record still leaves key questions about scope, remedies, and proof unresolved.
When AI Design Starts Shaping Human Rights
A digital-humanism lens shows how choices made in building AI can quietly influence privacy, autonomy, freedom, and even the way people spend their free time.
Italy’s AI Act Turns from Policy to Enforcement, and Companies Are Now on Notice
A new national decree moves the EU AI Act into an operational compliance regime, with inspections, corrective orders, and penalty exposure that can scale to Article 5-level fines.
Inside the AI Sandbox: The Real Test Is Not Accuracy, but Data Necessity
A controlled AI sandbox can help teams measure performance, but the harder question is whether each dataset is truly needed, proportionate, and replaceable by less exposing alternatives.
When the AI Act Reaches the Town Hall, Small Municipalities Become Compliance Front Lines
For local administrations, the challenge is not just using AI - it is deciding which rules apply, who supervises them, and how to do it without losing accountability.
Europe Turns AI Misfires Into Reportable Cyber Events
Europe’s AI Act turns frontier-model risk into a compliance engineering challenge, with incident logging and rapid reporting for serious cyber events; the pre-market boundary remains unresolved.
Italy’s AI Paper Trail Is Turning into a Compliance Weapon
As companies fold AI into 231 governance, the real risk is no longer just model output - it is whether they can prove who owned the system, who watched it, and what evidence exists when something goes wrong.
When a Component List Is Not Proof: The New Fight for Software Trust
SBOMs tell defenders what is inside software, but a TBOM is being explored as a way to show what was actually checked, and with what evidence.
Ad-Tech’s Hidden Risk Surface Draws a €-Style Hammer in Norway
A major privacy penalty against Microsoft-owned Xandr underscores how advertising systems can become a compliance hazard when sensitive user data moves beyond its intended boundary.
Italy Turns AI Compliance Into a Proof Test, Not a Paper Exercise
For in-scope AI systems, the new regulatory mood is clear: companies may need to reconstruct decisions, versions, controls, and human oversight well enough to survive an inspection.
Italy’s VAT Window Gets Wider, and That Exposes How Fragile Digital Compliance Can Be
The Omnibus correction gives businesses more time to register purchase invoices and recover VAT, while also acknowledging the delays that digital workflows and uneven system integration can create.
NIS2 Turns Cyber Risk Into a Service Map, Not a Checkbox
The compliance challenge is shifting from cataloging systems to proving how incidents affect business services, suppliers, and the decisions leaders can defend.
When AI Stops Being a Product and Starts Acting Like Infrastructure, Contracts Become the Control Layer
AI delivered through cloud and SaaS models is shifting risk from the license file to the service boundary, where updates, data handling, and accountability can become part of the security problem.
When a Pair of Smart Glasses Becomes a GDPR Test Case
The Ray-Ban Meta debate is less about hardware and more about a harder question: when does a user choice around AI training become a legal responsibility issue under the GDPR?
UK Regulator Pushes AI Firms Toward Harder Privacy Controls
The privacy fight around generative AI is shifting from promises to operational controls over prompts, logs, retention, and training data.
Who Owns the Camera Feed? A New Urban Security Pact Puts Privacy Roles on the Record
When municipalities and police share urban surveillance systems, the real issue is not the lens itself but who decides the purpose, the processing, and the legal role behind each access.
AI in Public Administration Is Exposing a New Transparency Gap
As government agencies adopt artificial intelligence, the real test is no longer whether information is available, but whether citizens can understand it, verify it, and trace responsibility for it.