PATCHKNIGHT
Legacy System Protector
Professional Profile
PatchKnight defends systems that cannot be updated. The last resort for companies with critical infrastructures.
Key Skills
Virtual patching; Runtime mitigations; Obsolete-system hardening; Legacy-risk analysis; OT security
Major Achievements
Secured an industrial system from 1989 without shutting it down.
Articles by PATCHKNIGHT
Midair Wi-Fi Trouble Turns a Return Flight Into a Security Puzzle
A reported in-flight Wi-Fi disruption on a Delta flight returning from DEF CON shows how quickly a cabin networking issue can become a security and law-enforcement matter.
Midair Wi-Fi Deception Turns a Cabin Network Into a Phishing Trap
An alleged rogue wireless network on a Delta flight shows how “evil twin” tactics can abuse passenger trust long before any malware or credential theft is proven.
Mailbox Theft for Profit: How AiTM Phishing Is Hunting Microsoft 365 Finance Teams
A phishing wave aimed at Microsoft 365 is using adversary-in-the-middle tricks and residential proxy camouflage to reach the mailboxes that sit closest to payroll and finance workflows.
Shipping-Branded SMS Lures Keep Card Fraud Alive
A GLS-themed smishing campaign detected by ACN CSIRT Italia shows how a familiar delivery brand can be used to pressure recipients into handing over payment-card data.
The Subscription Scam Selling Microsoft 365 Break-ins as a Service
A Telegram-marketed phishing kit illustrates how cloud identity abuse has been industrialized, with ready-made lures and reported paths for token theft, device-code tricks, and OAuth consent abuse.
When a Trusted Support Tool Becomes the Trap
A credential-free-looking install flow can turn a legitimate remote support product into an attacker-controlled foothold, with the session blending into normal IT activity.
DarkSword’s Web Trail Shows How iPhone Attacks Can Scale Without Looking Loud
A leaked iOS exploit kit, rotating hosts, and fake Apple login pages point to a mobile intrusion model built for persistence, not one-off abuse.
When a Browser Trick Becomes an Apple ID Trap on iPhone
A leaked iOS exploit chain paired with a counterfeit Apple sign-in page shows how one malicious visit can blend device exploitation and credential theft into a single attack path.
Hotel Wi-Fi, Real Microsoft Pages, and the MFA Trap Behind Device Code Phishing
A described campaign ties hostile Wi-Fi conditions to a Microsoft login flow that can turn ordinary user approval into cloud access, showing why identity controls now matter as much as network trust.
Phishing for Rent: Two New Kits Put Microsoft 365 BEC on Autopilot
TokenLover and YaksaLover point to a market where business email compromise is being packaged as a service, with cloud identity as the real target.
Holiday Mode Is a Cyber Trap When Oversharing Meets Public Networks
Vacation changes the threat model: location leaks, public Wi-Fi, and rushed messaging can turn routine travel into an easy opening for phishing and account abuse.
Fake Helpdesk Calls Are Turning Teams Into a Ransomware Launchpad
Attackers are using Microsoft Teams voice calls and false IT support identities to reach endpoints, then moving quickly toward Chaos ransomware in some cases.
Fake Bank Calls, Real Device Control: The Scam Playbook Behind Copybara
A fraud chain aimed at N26 users in Italy shows how voice impersonation, phishing infrastructure, and Android malware can be combined to pressure victims into surrendering control of their banking sessions.
Italy Puts Cyber Lessons on the Student Front Line
ACN and Skuola.net have launched a cyber-education campaign aimed at young people, turning awareness into a practical layer of digital defense.
The Kit Was Burned, Not the Playbook: Kratos and the Afterlife of Phishing Infrastructure
A July 2026 disruption did not end the threat around Kratos - it appears to have pushed its methods into fresh Microsoft 365 phishing campaigns.
Fake Attacks, Real Pressure: Why Simulated Cyber Drills Matter for SMEs
A realistic attack exercise can reveal a company’s weakest point long before criminals do: how people decide when the clock is ticking.
One Phishing Kit Fell, but Microsoft 365 Attackers Kept the Blueprint
The disruption of Kratos may have removed one criminal service, but the deeper problem is the reusable playbook behind modern Microsoft 365 account-takeover campaigns.
When Confidential Messages Leave the Office, the Phone Becomes the Perimeter
Italian SMEs and public offices are facing a quieter but harder problem: protecting sensitive communications as smartphones, cloud services, and collaboration apps pull them beyond traditional boundaries.
Fake Teams Update, Real Remote Access: The BlueDash Playbook
A counterfeit Microsoft Teams update flow is being used to push legitimate remote management tools onto victim systems, blurring the line between phishing and admin software abuse.
More Than 70 Look-Alike Windows Download Sites Turn Software Search Into a Trap
A cluster of impersonation domains shows how attackers can abuse search traffic, brand trust, and download reputation before any file ever reaches the desktop.