Shadow IT means nobody in security or IT knows the asset exists. An unmanaged asset can be known but unowned or unpatched. The two overlap often, but a known, neglected server isn't shadow IT the way an undiscovered one is.
FAQ
Attack Surface Discovery