WHITEHAWK
Estratega de inteligencia cibernética
Perfil profesional
WhiteHawk es un experto en inteligencia y atribución de ataques. Trabaja con agencias de investigación y empresas de alto riesgo.
Competencias clave
Inteligencia cibernética; análisis de actores de amenazas; monitorización de la dark web; atribución y perfilado; OSINT avanzado
Logros principales
Identificó a un grupo criminal vinculando nueve alias de la dark web.
Artículos de WHITEHAWK
Inside the AI Sandbox: The Real Test Is Not Accuracy, but Data Necessity
A controlled AI sandbox can help teams measure performance, but the harder question is whether each dataset is truly needed, proportionate, and replaceable by less exposing alternatives.
When the AI Act Reaches the Town Hall, Small Municipalities Become Compliance Front Lines
For local administrations, the challenge is not just using AI - it is deciding which rules apply, who supervises them, and how to do it without losing accountability.
Europe Turns AI Misfires Into Reportable Cyber Events
Europe’s AI Act turns frontier-model risk into a compliance engineering challenge, with incident logging and rapid reporting for serious cyber events; the pre-market boundary remains unresolved.
Italy’s AI Paper Trail Is Turning into a Compliance Weapon
As companies fold AI into 231 governance, the real risk is no longer just model output - it is whether they can prove who owned the system, who watched it, and what evidence exists when something goes wrong.
When a Component List Is Not Proof: The New Fight for Software Trust
SBOMs tell defenders what is inside software, but a TBOM is being explored as a way to show what was actually checked, and with what evidence.
Ad-Tech’s Hidden Risk Surface Draws a €-Style Hammer in Norway
A major privacy penalty against Microsoft-owned Xandr underscores how advertising systems can become a compliance hazard when sensitive user data moves beyond its intended boundary.
Italy Turns AI Compliance Into a Proof Test, Not a Paper Exercise
For in-scope AI systems, the new regulatory mood is clear: companies may need to reconstruct decisions, versions, controls, and human oversight well enough to survive an inspection.
Italy’s VAT Window Gets Wider, and That Exposes How Fragile Digital Compliance Can Be
The Omnibus correction gives businesses more time to register purchase invoices and recover VAT, while also acknowledging the delays that digital workflows and uneven system integration can create.
NIS2 Turns Cyber Risk Into a Service Map, Not a Checkbox
The compliance challenge is shifting from cataloging systems to proving how incidents affect business services, suppliers, and the decisions leaders can defend.
When AI Stops Being a Product and Starts Acting Like Infrastructure, Contracts Become the Control Layer
AI delivered through cloud and SaaS models is shifting risk from the license file to the service boundary, where updates, data handling, and accountability can become part of the security problem.
When a Pair of Smart Glasses Becomes a GDPR Test Case
The Ray-Ban Meta debate is less about hardware and more about a harder question: when does a user choice around AI training become a legal responsibility issue under the GDPR?
UK Regulator Pushes AI Firms Toward Harder Privacy Controls
The privacy fight around generative AI is shifting from promises to operational controls over prompts, logs, retention, and training data.
Who Owns the Camera Feed? A New Urban Security Pact Puts Privacy Roles on the Record
When municipalities and police share urban surveillance systems, the real issue is not the lens itself but who decides the purpose, the processing, and the legal role behind each access.
AI in Public Administration Is Exposing a New Transparency Gap
As government agencies adopt artificial intelligence, the real test is no longer whether information is available, but whether citizens can understand it, verify it, and trace responsibility for it.
Europe’s Digital Tax Squeeze Is Turning Pricing Into a Compliance Problem
Brussels is weighing a rethink of CORE, Italy’s web tax remains part of the revenue picture, and e-commerce charges are pushing a basic question to the front: who ultimately pays when digital trade gets more expensive?
Municipal Cameras, Private Homes, Public Risk
A privacy sanction against a small Alpine municipality shows how video systems can fail when purpose, legal basis, and documentation are treated as paperwork instead of controls.
When a Supplier Breaks the Shield: Publica and the Hidden Risk of Pension Data
A reported supplier-linked incident around Switzerland's Publica pension fund shows how third-party access can turn sensitive records into a long-tail cyber risk, with NIS2 sharpening the compliance stakes.
Autonomous AI Crossed the Line - and Europe Is Turning That Into a Reporting Problem
The real security issue is not whether an agent sounds smart, but whether its privileges, tools, and inputs make a model event serious enough to trigger AI Act reporting duties.
Italy Gives the CRA a Watchdog: ACN Moves to the Center of Product Security
A draft decree would place Italy’s Cyber Resilience Act machinery under ACN, with a market-surveillance role, a sandbox, and a dedicated channel for SMEs.
Why Compliance Partnerships Are Becoming a Security Signal in Australia
Kiteworks and A-LIGN have expanded their collaboration around IRAP-aligned assessments, underscoring how assurance has become a major factor in public-sector and regulated procurement.