Chema Alonso

Chema Alonso
Alonso speaking at a cyber‑security conference in 2019
Born
José María Alonso Cebrián

1975 (age 50–51)
Madrid, Spain
Alma materPolytechnic University of Madrid (BEng)
Rey Juan Carlos University (MSc, PhD)
Occupations
  • Computer‑security researcher
  • technology executive
Known for
  • ElevenPaths
  • FOCA metadata tool
  • Latch app
  • Cloudflare executive
Awards
  • Civil Guard Cross of Merit (2017)
  • Forbes World’s 50 Most Influential CMOs (2022)
Websiteelladodelmal.com

José María "Chema" Alonso Cebrián (born 1975) is a Spanish computer‑security researcher and technology executive. He led Telefónica's cybersecurity unit ElevenPaths in 2013 and later served on the company's executive committee as Chief Data Officer and Chief Digital Officer between 2016 and 2025.

In August 2025, Alonso joined Cloudflare as vice president and head of international development.[1][2] Alonso is a frequent speaker at international security conferences (including Black Hat, DEF CON and Troopers). He has worked on connection-string parameter pollution and has been involved in tools such as the FOCA metadata-analysis suite and the Latch “digital padlock” app.[3][4][5]

Early life and education

Alonso was born in 1975 and grew up in Móstoles, in Community of Madrid, Spain[6][7] He holds a B.Eng. in Computer Systems Engineering from the Polytechnic University of Madrid and an M.Sc./Ph.D. in Computer Security from the Rey Juan Carlos University.[8][9]

Career

Informática 64 and ElevenPaths (1999–2016)

In June 2013, Telefónica created the cyber‑security unit ElevenPaths and appointed Alonso as its Chief Executive; the new unit drew staff from his earlier consultancy Informática 64.[10][11] At ElevenPaths, he increased awareness about tools and products such as the FOCA (Fingerprinting Organizations with Collected Archives) metadata‑analysis suite,[12] and Latch, a mobile “digital padlock” that lets users toggle access to online services.[13]

Telefónica executive roles (2016–2025)

Alonso joined Telefónica's executive committee in 2016 as Chief Data Officer, later serving as Chief Digital Consumer Officer and then Chief Digital Officer.[14] In this period, he spoke publicly about returning control of personal data to users and Telefónica's “fourth platform”.[15] From 2023, he was a prominent executive voice around the GSMA Open Gateway programme, which exposes standardised network APIs; Telefónica and the GSMA announced deployments and partnerships during MWC Barcelona.[16][17]

Telefónica was among the first large companies affected when the WannaCry ransomware attack began on 12 May 2017.[18]

Cloudflare (2025–present) and CTA episode

In August 2025, Alonso joined Cloudflare as vice president, Head of International Development.[19][20] The move was followed, two weeks later, by his resignation from an advisory role on artificial intelligence at Spain's Technical Committee of Referees (CTA).[21]

Research and selected projects

  • DirtyTooth (2017): co‑disclosure of a Bluetooth issue affecting iOS whereby a paired speaker could switch from A2DP to PBAP and exfiltrate contacts without user awareness; presented at ToorCon 19.[22][23]
  • RansomCloud (2017–2018): a proof‑of‑concept demonstrating how a rogue OAuth application could encrypt email in cloud services such as Office 365 in real time, which was later popularised through demonstrations with Kevin Mitnick.[24]

Media

Alonso has appeared in Spanish‑language media as a subject-matter expert on cybersecurity topics, including demonstrations on the TV show El Hormiguero.[25] He also hosted the 12‑episode web series Risk Alert (Atresmedia/Flooxer, 2018).[26]

Awards and honours

See also

References

  1. ^ "Former Telefónica data chief Alonso named Cloudflare VP". Telecompaper. 8 August 2025. Retrieved 1 November 2025.
  2. ^ Muñoz, Ramón (7 August 2025). "Chema Alonso desata un conflicto en el fútbol tras fichar por el "pirata" enemigo de LaLiga". El País (in Spanish). Retrieved 1 November 2025.
  3. ^ Higgins, Kelly Jackson (30 June 2009). "'FOCA' and the power of metadata analysis". Dark Reading. Retrieved 1 November 2025.
  4. ^ Gibbs, Samuel (26 February 2014). "Lock up your digital valuables with Latch, the digital padlock". The Guardian. Retrieved 1 November 2025.
  5. ^ "Connection String Parameter Pollution — white paper" (PDF). Black Hat DC 2010. Retrieved 1 November 2025.
  6. ^ "Chema Alonso, doctor honoris causa por la URJC". Cadena SER (in Spanish). 28 January 2020. Retrieved 1 November 2025.
  7. ^ "La URJC inviste doctor honoris causa a Chema Alonso" (in Spanish). Universidad Rey Juan Carlos. 28 January 2020. Retrieved 1 November 2025.
  8. ^ "Chema Alonso — speaker profile". MWC Barcelona. Retrieved 1 November 2025.
  9. ^ "La URJC inviste doctor honoris causa a Chema Alonso" (in Spanish). Universidad Rey Juan Carlos. 28 January 2020. Retrieved 1 November 2025.
  10. ^ "Telefónica y el «hacker» Chema Alonso lanzan la empresa de ciberseguridad Eleven Paths". ABC (in Spanish). 7 June 2013. Retrieved 1 November 2025.
  11. ^ Scott, Jennifer (10 June 2013). "Telefonica Digital forms security group Eleven Paths". Computer Weekly. Retrieved 1 November 2025.
  12. ^ Higgins, Kelly Jackson (30 June 2009). "'FOCA' and the power of metadata analysis". Dark Reading. Retrieved 1 November 2025.
  13. ^ Gibbs, Samuel (26 February 2014). "Lock up your digital valuables with Latch, the digital padlock". The Guardian. Retrieved 1 November 2025.
  14. ^ "Chema Alonso — Telefónica author page". Telefónica. 4 May 2023. Retrieved 1 November 2025.
  15. ^ "Take back your data: how Telefónica is on a quest to return our information". Wired. 5 November 2016. Retrieved 1 November 2025.
  16. ^ "Telefónica accelerates global rollout of Open Gateway with agreements with tech firms and companies from around the world" (Press release). Telefónica. 3 March 2025. Retrieved 1 November 2025.
  17. ^ "Mobile industry deploys open network APIs and prepares for mass adoption" (Press release). GSMA. 27 February 2023. Retrieved 1 November 2025.
  18. ^ "A massive cyberattack using leaked NSA exploits has hit companies around the world". Business Insider. 12 May 2017. Retrieved 1 November 2025.
  19. ^ "Former Telefónica data chief Alonso named Cloudflare VP". Telecompaper. 8 August 2025. Retrieved 1 November 2025.
  20. ^ "Chema Alonso se marcha del CTA". AS (in Spanish). 7 August 2025. Retrieved 1 November 2025.
  21. ^ Muñoz, Ramón (7 August 2025). "Chema Alonso desata un conflicto en el fútbol tras fichar por el "pirata" enemigo de LaLiga". El País (in Spanish). Retrieved 1 November 2025.
  22. ^ "DirtyTooth: extracting vCard data from Bluetooth iOS profiles" (PDF). Exploit-DB. Retrieved 1 November 2025.
  23. ^ "DirtyTooth: Put Music & Lose Your Contacts (ToorCon 19)". InfoConDB. Retrieved 1 November 2025.
  24. ^ "Ransomcloud demo with Kevin Mitnick". Datto. 29 October 2018. Retrieved 1 November 2025.
  25. ^ "Chema Alonso: "Hay que diferenciar entre hackers y cibercriminales"". Antena 3 (in Spanish). 18 February 2014. Retrieved 1 November 2025.
  26. ^ "Risk Alert — complete series". Atresplayer (in Spanish). 12 July 2018. Retrieved 1 November 2025.
  27. ^ "La Guardia Civil condecora a Chema Alonso, el 'hacker' de Telefónica". 20minutos (in Spanish). 19 May 2017. Retrieved 1 November 2025.
  28. ^ "La URJC inviste doctor honoris causa a Chema Alonso" (in Spanish). Universidad Rey Juan Carlos. 28 January 2020. Retrieved 1 November 2025.
  29. ^ Matlins, Seth (23 June 2022). "The Forbes World's Most Influential CMOs List: 2022". Forbes. Retrieved 1 November 2025.

Content Disclaimer

Informasi ini disarikan dari Wikipedia dan disajikan kembali untuk tujuan edukasi. Konten tersedia di bawah lisensi CC BY-SA 3.0. Kami tidak bertanggung jawab atas ketidakakuratan data yang bersumber dari kontribusi publik tersebut.

  1. The information displayed on this website is sourced in part or in whole from Wikipedia and has been adapted for the purpose of restating it. We strive to provide accurate and relevant information, however:
  2. There is no guarantee of absolute accuracy. Wikipedia is an open, collaborative project that can be edited by anyone, so information is subject to change.
  3. It is not intended to constitute professional advice. The content displayed is for informational and educational purposes only. For important decisions (e.g., medical, legal, or financial), please consult a professional.
  4. Content copyright. Wikipedia is licensed under the Creative Commons Attribution-ShareAlike License (CC BY-SA). This means that content may be reused with appropriate attribution and shared under a similar license.
  5. Responsible use. Any risk arising from the use of information from this website is entirely the responsibility of the user.