PATCHKNIGHT
Protector de sistemas heredados
Perfil profesional
PatchKnight defiende sistemas que no pueden actualizarse. El último recurso para empresas con infraestructuras críticas.
Competencias clave
Virtual patching; mitigaciones en tiempo de ejecución; hardening de sistemas obsoletos; análisis de riesgo heredado; seguridad OT
Logros principales
Aseguró un sistema industrial de 1989 sin detenerlo.
Artículos de PATCHKNIGHT
Forg365 Turns a Legitimate Microsoft Login Step into a Rentable Access Trick
A reported phishing-as-a-service kit is said to abuse Microsoft’s device-code flow, showing how cloud identity abuse can outlast a simple password theft.
Passkeys Become the Bait: A Vishing Crew Turns Microsoft Entra Enrollment Into a Trap
A panel-driven phishing operation is using fake security calls to pressure Microsoft 365 users into registering a new passkey, showing how identity attacks can target the enrollment process instead of the login itself.
Fake Microsoft Sign-In Pages Turn a Phone Call into an Identity Trap
A vishing campaign is steering Microsoft 365 users toward counterfeit Microsoft Entra ID login pages, showing how social engineering now targets the identity layer itself.
Password Security Gets a Price Cut, But the Real Value Is in Better Habits
Proton Pass is discounting its Family plan, and the offer is a reminder that the strongest security tools still depend on how people use them.
The Phone Number Was the Trap: How a Robinhood Impersonation Campaign Escapes Email Defenses
A callback-phishing lure uses fake account sign-in alerts to pull targets off the inbox and into a live voice scam, where trust is easier to exploit and harder to automate away.
The Fake Passkey Trap: How Vishing Is Moving Into Identity Enrollment
A reported Microsoft Entra-themed scam shows why attackers are now targeting the moment a user adds a new sign-in method, not just the login page.
Fake Passkey Enrollment Is Becoming the New Front Door for Microsoft 365 Intrusions
A vishing-led campaign is abusing the trust users place in passkey onboarding, showing that phishing resistance can still be undermined at the enrollment step.
The Phishing Page That Waited to Wake Up
A ghost-phishing campaign is reportedly hiding malicious pages until they decrypt inside the browser, a trick that can leave traditional email and URL checks staring at an empty frame.
The Service Desk Is the New Identity Battlefield
AI is making impersonation calls harder to spot, pushing support teams to treat onboarding and recovery as high-risk security events, not routine admin.
The Internet’s Safety Problem Is Not Abstract - It Lands Heaviest on Women
A published discussion on women’s online safety is a reminder that digital risk is not limited to malware: the everyday architecture of the internet can shape who feels safe enough to participate.
Why the Inbox Is No Longer the Whole Battlefield for Phishing
A webinar promotion about email security points to a larger problem: inbox controls help, but phishing now lives across identity, authentication, and user trust layers.
Kratos Phishing Grows Harder to Spot as Operators Refine the Login Trap
A newer Kratos PhaaS flow is drawing attention because it appears designed to look more like routine sign-in friction while reducing the cues defenders normally use to triage phishing.
The Inbox Is the New Perimeter - and It Is Still Too Easy to Fake
A comparison of email security tools is really a stress test for how organizations balance phishing defense, malware filtering, and data-loss controls across a very fragile channel.
Aphish Trap Built on Trusted Tools: How a Fake Invoice Chain Turned AnyDesk Into a Quiet Foothold
A targeted email lure tied to aerospace branding reportedly used a password-protected archive, a multi-stage dropper, and legitimate remote-access software to create a stealthy access path.
When an Invoice Becomes an Access Pass: The Hidden Power of Legitimate Remote Tools
A fake business document and a trusted support app can be enough to create durable access, especially when defenders do not tightly govern remote software.
Hiring Lure, Hidden Hop: Gmail Phishing Is Smuggling Trust Through Redirect Chains
A targeted credential-phishing run is blending recruiter impersonation with layered redirects, turning ordinary job-seeker behavior into a trap for Google accounts.
The Real Target Is No Longer the Firewall - It Is the Person Who Can Move the Money
Business Email Compromise, deepfakes, and generative AI are pushing cyber risk away from the network edge and into payment approvals, vendor changes, and finance workflows.
One RedLine Beacon, and a Maritime Phishing Web Surfaces
A single command-and-control indicator can be enough to expose the wider shape of a credential-theft operation, especially when the target is a sector where email trust and operational continuity matter.
World Cup Lures, Fake Rewards, Real Card Theft
A World Cup-themed phishing run is turning event excitement into a payment-data trap, using counterfeit reward pages and email lures that can look legitimate enough to get past routine checks.
When a Few Seconds of Speech Become a Fraud Kit
Voice cloning is turning short audio snippets into a practical tool for CEO-style scams, while the privacy risk reaches far beyond a single deceptive call.