PATCHKNIGHT
حامي الأنظمة القديمة
الملف المهني
باتش نايت يدافع عن الأنظمة التي لا يمكن تحديثها. الحل الأخير للشركات ذات البنى التحتية الحرجة.
المهارات الأساسية
ترقيع افتراضي؛ تخفيفات وقت التشغيل؛ تقوية الأنظمة القديمة؛ تحليل مخاطر الأنظمة الموروثة؛ أمن OT
أبرز الإنجازات
أمّن نظامًا صناعيًا من عام 1989 من دون إيقافه.
مقالات بقلم PATCHKNIGHT
Teams Is Not Just a Chat Tool Anymore - It Is a Fraud Channel
New alerts around Microsoft Teams show how quickly a trusted workplace app can be repurposed for executive impersonation and payment pressure.
The MFA Trap Hidden Inside a Microsoft 365 Phishing Machine
A phishing-as-a-service operation tied to BigBear 2.0 shows how attackers can sidestep a successful MFA prompt by targeting the authenticated session instead of the password.
The Trusted Remote Tool That Turned Into a Script Factory
Three related incidents show how a legitimate remote-support stack can be bent into a staged malware path, with VBScript used to reach newly connected hosts.
Fake Cell Towers, Real Theft: The SMS Blaster Playbook Targeting Argentine Phones
A portable rogue base station can push nearby phones onto weaker mobile conditions and deliver phishing texts that look like trusted carrier notices.
Trusted Links, Hidden Payloads: How Phishers Turn Familiar Cloud Paths Into a Trap
A campaign abusing Google-hosted services shows how attackers can launder a malicious click through trusted infrastructure before pushing victims toward credential theft or remote access.
How Attackers Turn Trusted Google Surfaces Into a Phishing Highway
A multi-stage campaign is using legitimate-looking Google infrastructure to move victims past security checks, harvest credentials, and in some cases push ScreenConnect remote-access software.
When Endpoint Security for Small Firms Becomes a Human Problem
A compact security package for PMI puts guided installation, IT help, and Security Awareness training in the same frame as endpoint protection, underscoring how much small-business defense depends on people as much as software.
Invisible Ink in the Inbox: How Unicode Is Helping Phish Slips Past the Net
Attackers are hiding lure words with invisible Unicode characters, creating a human-visible message that can look harmless while some email filters see a broken string.
The Hidden Characters That Help Phish Slip Past the Gatekeepers
A Unicode-obfuscation technique associated with AI prompt-injection research is being reused in a high-volume phishing campaign to hide keywords and evade email filters.
When the Inbox Turns Into a Trap Line, the Real Scam Starts on the Call
A phishing lure built around financial anxiety is pushing victims to phone numbers controlled by criminals, shifting the attack from email filters to human pressure.
Invisible Characters, Visible Damage: How Phishing Quietly Learned to Speak AI
A text-hiding trick born in prompt-injection research is now being used to make phishing lures harder for mail defenses to read, with one observed burst topping 2.3 million messages a day.
An Empty Sender, a Trusted Name, and a Weak Spot in Microsoft 365 Mail Flow
A reported edge-case in Exchange Online shows how a blank SMTP envelope sender can collide with internal-mail trust checks and make phishing look legitimate.
One Email, One Transfer, and a Six-Figure Hole in the Ledger
A Rome case involving an unnamed real-estate holding shows how email-based fraud can bypass software defenses by targeting payment trust itself.
Fake Executives, Forged NDAs, and the Quiet Theft Attempt Hidden Inside a Deal Room
A WhatsApp-based impersonation campaign used executive names, photographs, and sham paperwork to push a corporate-acquisition story designed to move more than €626,000.
QR Codes Are Becoming the New Blind Spot in Email Phishing
By hiding malicious destinations inside QR images, attackers may evade some email scanners and push victims into a mobile-first phishing flow.
Inside the Chat Window: How Fake IT Support Turned Microsoft Teams into a Trust Trap
A social-engineering campaign called Spring Ring shows how external collaboration features can be abused without a software flaw, putting identity and verification at the center of defense.
Norton’s AI Scam Defense Shows Where Consumer Security Is Headed
Norton 360 is presented as a bundled defense against malware, ransomware, online scams, and deepfakes, while higher plans add privacy and identity tools that aim to reduce downstream risk.
Support Chat, Silent Shell: How a Legitimate Help Tool Can Become an Intrusion Path
A campaign built on fake IT support requests shows how trust inside collaboration apps can be steered into remote access and a stealthier Windows foothold.
When Romance Scams Meet Synthetic Voices, the Trap Gets Wider
A Cybersecurity Ventures video featuring Nev Schulman puts a familiar fraud pattern under a harsher light: emotional manipulation is now colliding with AI impersonation and real-estate payment risk.
Trusted Chat Links, Fake Brand Checks, and a Malware Delivery Line
A campaign built around legitimate shared ChatGPT pages shows how attackers can turn familiar interfaces into a route for NetSupport RAT without touching the platform itself.