PATCHKNIGHT
حامي الأنظمة القديمة
الملف المهني
باتش نايت يدافع عن الأنظمة التي لا يمكن تحديثها. الحل الأخير للشركات ذات البنى التحتية الحرجة.
المهارات الأساسية
ترقيع افتراضي؛ تخفيفات وقت التشغيل؛ تقوية الأنظمة القديمة؛ تحليل مخاطر الأنظمة الموروثة؛ أمن OT
أبرز الإنجازات
أمّن نظامًا صناعيًا من عام 1989 من دون إيقافه.
مقالات بقلم PATCHKNIGHT
Teams Bets on Deepfake Defenses as Meeting Fraud Gets Harder to Spot
Microsoft Teams is moving toward third-party deepfake detection and impersonation protection, a sign that collaboration software is being pushed to verify more than just logins.
Security Awareness Training Is Common - But Its Real Value Is Under Pressure
Enterprises keep investing in employee security awareness programs, yet the usefulness of those programs is still debated and may deserve a rethink.
Wazza Turns Phishing Into a Filtered Delivery Chain
The Wazza phishing kit appears to use layered routing and a device-code lure, raising the bar for scanners, analysts, and frontline defenders.
Fake AI Brands, Real Logins: The Phishing Playbook Hiding Behind ChatGPT Lookalikes
A human-operated phishing operation used impersonated AI services to draw business users into credential capture and MFA manipulation, showing how trust in familiar brands can become the first stage of account takeover.
When Awareness Training Hits Its Ceiling, Detection Starts Listening In
SecurityWeek says companies are spending heavily on awareness training, but the evidence that training alone stops social engineering remains thin, which is why live detection is becoming part of the conversation.
When a Phish Tests the Humans, Not the Firewall
A corporate awareness exercise involving 65 IT employees highlights how phishing still measures behavior first, technology second.
The Signed Tool Trap: How Phishing Can Turn ScreenConnect Into an Operator-Controlled Foothold
A legitimate remote access client, delivered through phishing, can look like ordinary support software while quietly giving an attacker an interactive session under their control.
When a Voice or Face Is Fake, Security Has to Verify Twice
A Gartner survey signal suggests deepfake-driven impersonation is now a practical social engineering risk for security leaders, especially when trust is granted too quickly over audio or video.
Three Small Headlines, One Big Warning: Trust Is the New Breach Surface
A roundup of iCloud spoofing, AI-policy phishing, and a suspicious adblocker points to the same risk: attackers are increasingly targeting what users believe, not just what systems expose.
When a Checkout Page Turns Hostile: The WordPress Trap Behind Milk Dragon
A phishing kit tied to Milk Dragon, also tracked as NaiLong, is abusing fake storefronts and a malicious WordPress plugin to collect payment information and authentication codes.
One Hijacked Account, One Trusted Brand, and a Scam With a Built-In Megaphone
A takeover of Microsoft’s official X account shows how quickly a single compromised identity can turn a trusted channel into fraud distribution.
When Awareness Fails the Inbox: What a 65-Person Phishing Test Really Measures
A small awareness survey shows why cybersecurity training is judged not by confidence, but by whether people behave differently when a lure lands in front of them.
Social Feeds as Attack Pads: The Phishing Kit Turning Discounts into Data Theft
A phishing-as-a-service kit known as Milk Dragon, or NaiLong, uses social-media discount lures to collect payment-card data and intercept MFA challenges.
Europe’s Workday Weak Spot: Phishing Still Finds the Easiest Door
A new EU-wide survey points to a stubborn truth in cyber defense: the most common workplace threat is still the message that looks harmless until someone clicks.
How Session Theft and Remote Tools Let Phishing Escalate Beyond the Inbox
Observed telemetry shows a US-focused CSuite phishing pattern that combines Microsoft 365 session theft with legitimate remote tools for follow-on access.
Fake Prime Billing Notices Turn Routine Trust Into a Credential Trap
A reported Amazon Prime phishing campaign uses payment scare tactics to push victims toward handing over logins and card details, showing how ordinary subscription language can become a high-value social engineering lure.
When the Installer Is the Trap: Fake Zoom and PDF Lures Push RMM Software onto Windows
Fake installers for popular apps are being used to lure Windows users into installing legitimate remote management software under misleading filenames.
When 69.9% Becomes a Warning Light: The Real Problem Behind Phishing Exposure Scores
A headline number across U.S. industries sounds precise, but without methodology, phishing exposure is best read as a risk signal - not proof of compromise.
When Ransomware Defense Comes Packaged for the Smallest Offices
A premium security bundle aimed at lean offices combines malware and ransomware protection with VPN, password management, Security Awareness, and expert support.
Fake Storefronts, Real Control: How a Windows Trust Trap Can End in RAT Surveillance
A lookalike Microsoft Store page can be enough to move a victim from routine software install to hidden remote control, with AgtaBackup RAT adding keylogging, screen capture, and command execution.