PATCHKNIGHT
حامي الأنظمة القديمة
الملف المهني
باتش نايت يدافع عن الأنظمة التي لا يمكن تحديثها. الحل الأخير للشركات ذات البنى التحتية الحرجة.
المهارات الأساسية
ترقيع افتراضي؛ تخفيفات وقت التشغيل؛ تقوية الأنظمة القديمة؛ تحليل مخاطر الأنظمة الموروثة؛ أمن OT
أبرز الإنجازات
أمّن نظامًا صناعيًا من عام 1989 من دون إيقافه.
مقالات بقلم PATCHKNIGHT
When “It Won’t Happen Here” Becomes the Weakest Control
A cyber incident does not need a dramatic exploit to begin - sometimes it starts with complacency, ignored risk, and the quiet decision to treat basic controls as optional.
20,000 Pages, One Scam Pipeline: How Disposable Web Hosting Can Feed Tech Support Fraud
Researchers reportedly tied a large cluster of Cloudflare Pages subdomains to Help TDS, a fraud-routing system, while the attribution to Hotejka and ROI777 remains a research assessment, not an independently verified fact.
Android’s Scam Trapdoor: Google Tightens the Screws on Calls, Texts, and Screen-Sharing
Google has rolled out layered Android protections aimed at mobile scams, but the real story is how much of modern fraud now depends on trust, timing, and a victim being pushed to act fast.
Inside the CoGUI Crackdown: Why Shutting Phishing Infrastructure Is Harder Than It Looks
A disruption aimed at the CoGUI phishing kit shows how fast-moving fraud networks depend on shared infrastructure, while the real damage often remains unconfirmed until victims, logs, and domains are all traced.
Domain Seizure Cuts Into a Phishing Machine, But Not the Larger Threat
A court-authorized takedown targeted CoGUI-linked infrastructure, showing how cybercrime depends on more than just inbox spam.
Inside the Phishing Kit Economy: A 2,360-Template Trap Built for Global Abuse
A subscription-licensed phishing kit reportedly packs thousands of fake pages for dozens of regions, showing how impersonation has become a packaged service rather than a hand-built scam.
Fake AI Lures Are Turning Trust Into a Weapon
Reported fake-AI campaigns are using familiar product branding as bait, with sandbox data attributed to ANY.RUN pointing to 1,258 public analyses and US businesses reportedly making up 16% of country-attributed targets.
The Chrome Clone That Won a Search Slot and a Download Count
A familiar icon, sponsored placement, and a believable store listing can turn ordinary search behavior into a download risk.
The Fake Chrome Listing That Outranked Trust
A counterfeit browser app on Google Play shows how brand mimicry and paid visibility can combine to fool hurried installers before they notice what they are actually downloading.
When a Familiar Voice Becomes the First Alarm Bell
Deepfake readiness drills expose the trust shortcuts that can turn a convincing call into a costly approval.
Impostor VPN Portals Are Hunting the One Thing Remote Work Cannot Hide
A lookalike WatchGuard site used a fake software-download flow to seek VPN server addresses, usernames, and passwords - a reminder that access abuse often starts with trust, not malware.
Phishing Triage Is Becoming a Workflow War Inside the SOC
The real pressure in phishing response is not the alert itself, but the race to turn incomplete evidence into a decision-ready case before analysts lose time to manual reconstruction.
The Browser Bar That Looked Honest: Unicode’s New Spoofing Gap
Researchers described a Unicode edge case that can make deceptive domain names appear as readable text in Chromium instead of exposing the warning signs users often expect.
When a Trusted Microsoft Link Becomes a Remote-Control Trap
Attackers are abusing Microsoft Power BI’s trusted domain to deliver phishing lures that lead victims to download rogue ScreenConnect remote monitoring and management clients.
Teams Moves to Flag QR Code Traps Hidden Inside Chat
Microsoft Teams is adding a detection layer for QR-code-based links, extending protections for suspicious messages and giving defenders more context to review them.
Trusted Clicks, Rogue Control: The Power BI Lure That Turned Into Persistent Access
A phishing chain built on Microsoft Power BI shows how a legitimate cloud surface can be abused to deliver ScreenConnect and leave defenders chasing a foothold instead of a single file.
Okta’s AI Warning: The Login Problem Still Belongs to Identity, Not Hype
The company’s message is narrow but important: AI may reshape social engineering, yet the case for phishing-resistant authentication has not gone away.
Wazza Pushes Phishing Beyond the Fake Login Page
The kit is linked to targeting across banking, manufacturing, and government sectors, and it reflects a broader shift toward phishing infrastructure that can filter visitors, manage sessions, and probe risky authentication flows.
When Training Moves Into the Workflow, AI Security Stops Being Annual Theater
Generative AI is pushing cyber awareness away from one-off training and toward in-the-moment guidance, where nudges, approvals, and policy controls can shape both people and AI agents.
Teams Bets on Deepfake Defenses as Meeting Fraud Gets Harder to Spot
Microsoft Teams is moving toward third-party deepfake detection and impersonation protection, a sign that collaboration software is being pushed to verify more than just logins.