Chema Alonso

From Wikipedia, the free encyclopedia
Jump to navigation Jump to search


Chema Alonso
File:Chema Alonso.jpg
Alonso speaking at a cyber‑security conference (2019)
Born
José María Alonso Cebrián

1975 (age 50–51)
Madrid, Spain
Alma materPolytechnic University of Madrid (B.Eng.)
Rey Juan Carlos University (M.Sc., Ph.D.)
OccupationsComputer‑security researcher and technology executive
Known forElevenPaths; FOCA metadata tool; Latch app; Cloudflare executive
AwardsCivil Guard Cross of Merit (2017); Forbes World’s 50 Most Influential CMOs (2022)
Websiteelladodelmal.com

José María "Chema" Alonso Cebrián (born 1975) is a Spanish computer‑security researcher and technology executive. He founded Telefónica’s cybersecurity unit ElevenPaths in 2013 and later served on Telefónica’s executive committee, including as Chief Data Officer and Chief Digital Officer between 2016 and 2025.

In August 2025, Alonso joined Cloudflare as Vice President, Head of International Development.[1][2] Alonso is a frequent speaker at international security conferences (including Black Hat, DEF CON and Troopers) and has been involved in research and tools such as the FOCA metadata-analysis suite, the Latch “digital padlock” app, and work on connection-string parameter pollution.[3][4][5]

Early life and education

[edit | edit source]

Alonso was born in 1975 and grew up in Móstoles, in Community of Madrid, Spain[6][7] He holds a B.Eng. in Computer Systems Engineering from the Polytechnic University of Madrid and an M.Sc./Ph.D. in Computer Security from the Rey Juan Carlos University.[8][9]

Career

[edit | edit source]

Informática 64 and ElevenPaths (1999–2016)

[edit | edit source]

In June 2013 Telefónica created the cyber‑security unit ElevenPaths and appointed Alonso as its chief executive; the new unit drew staff from his earlier consultancy Informática 64.[10][11] At ElevenPaths, he increased awareness about tools and products such as the FOCA (Fingerprinting Organizations with Collected Archives) metadata‑analysis suite,[12] and Latch, a mobile “digital padlock” that lets users toggle access to online services.[13]

Telefónica executive roles (2016–2025)

[edit | edit source]

Alonso joined Telefónica’s executive committee in 2016 as Chief Data Officer, later serving as Chief Digital Consumer Officer and then Chief Digital Officer.[14] In this period he spoke publicly about returning control of personal data to users and Telefónica’s “fourth platform”.[15] From 2023, he was a prominent executive voice around the GSMA Open Gateway programme, which exposes standardised network APIs; Telefónica and the GSMA announced deployments and partnerships during MWC Barcelona.[16][17]

Telefónica was among the first large companies affected when the WannaCry ransomware attack began on 12 May 2017.[18]

Cloudflare (2025–present) and CTA episode

[edit | edit source]

In August 2025 Alonso joined Cloudflare as Vice President, Head of International Development.[19][20] The move was followed, two weeks later, by his resignation from an advisory role on artificial intelligence at Spain’s Technical Committee of Referees (CTA).[21]

Research and selected projects

[edit | edit source]
  • DirtyTooth (2017): co‑disclosure of a Bluetooth issue affecting iOS whereby a paired speaker could switch from A2DP to PBAP and exfiltrate contacts without user awareness; presented at ToorCon 19.[22][23]
  • RansomCloud (2017–2018): a proof‑of‑concept demonstrating how a rogue OAuth application could encrypt email in cloud services such as Office 365 in real time; which was later popularised through demonstrations with Kevin Mitnick.[24]

Selected conference talks and papers

[edit | edit source]
Year Conference Talk / paper Reference
2008 DEF CON 16 Time‑Based Blind SQL Injection Using Heavy Queries Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2008 Black Hat Europe Blind LDAP Injection Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2009 DEF CON 17 Tactical Fingerprinting Using Metadata, Hidden Info and Lost Data Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2009 ShmooCon Re‑Playing with (Blind) SQL Injection Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2010 Troopers 10 Parameter Pollution in Connection Strings Attack Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2010 Black Hat DC Connection String Parameter Pollution (CSPP) Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value). Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2010 DEF CON 18 FOCA 2: The FOCA Strikes Back Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2012 DEF CON 20 Owning Bad Guys {And Mafia} with JavaScript Botnets Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2012 Black Hat USA Owning Bad Guys {And Mafia} with JavaScript Botnets Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2013 DEF CON 21 Fear the Evil FOCA: IPv6 Attacks in Internet Connections Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2014 Troopers 14 How I Latch on Me and Protect My Digital Life against Passwords Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2017 ToorCon 19 DirtyTooth: Put Music & Lose Your Contacts Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
2021 HITB CyberWeek Gremlin Apps & Gremlin Botnets Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).

Media

[edit | edit source]

Alonso has appeared frequently in Spanish‑language media as a subject matter expert on cyber‑security topics, including demonstrations on the TV show El Hormiguero.[25] He also hosted the 12‑episode web series Risk Alert (Atresmedia/Flooxer, 2018).[26]

Awards and honours

[edit | edit source]

See also

[edit | edit source]

References

[edit | edit source]
  1. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  2. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  3. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  4. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  5. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  6. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  7. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  8. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  9. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  10. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  11. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  12. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  13. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  14. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  15. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  16. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  17. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  18. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  19. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  20. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  21. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  22. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  23. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  24. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  25. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  26. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  27. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  28. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
  29. ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
[edit | edit source]
Retrieved from "http://70.231.62.181/index.php?title=Chema_Alonso&oldid=18305564"