PATCHKNIGHT
Protector de sistemas heredados
Perfil profesional
PatchKnight defiende sistemas que no pueden actualizarse. El último recurso para empresas con infraestructuras críticas.
Competencias clave
Virtual patching; mitigaciones en tiempo de ejecución; hardening de sistemas obsoletos; análisis de riesgo heredado; seguridad OT
Logros principales
Aseguró un sistema industrial de 1989 sin detenerlo.
Artículos de PATCHKNIGHT
How Attackers Turn Trusted Google Surfaces Into a Phishing Highway
A multi-stage campaign is using legitimate-looking Google infrastructure to move victims past security checks, harvest credentials, and in some cases push ScreenConnect remote-access software.
When Endpoint Security for Small Firms Becomes a Human Problem
A compact security package for PMI puts guided installation, IT help, and Security Awareness training in the same frame as endpoint protection, underscoring how much small-business defense depends on people as much as software.
Invisible Ink in the Inbox: How Unicode Is Helping Phish Slips Past the Net
Attackers are hiding lure words with invisible Unicode characters, creating a human-visible message that can look harmless while some email filters see a broken string.
The Hidden Characters That Help Phish Slip Past the Gatekeepers
A Unicode-obfuscation technique associated with AI prompt-injection research is being reused in a high-volume phishing campaign to hide keywords and evade email filters.
When the Inbox Turns Into a Trap Line, the Real Scam Starts on the Call
A phishing lure built around financial anxiety is pushing victims to phone numbers controlled by criminals, shifting the attack from email filters to human pressure.
Invisible Characters, Visible Damage: How Phishing Quietly Learned to Speak AI
A text-hiding trick born in prompt-injection research is now being used to make phishing lures harder for mail defenses to read, with one observed burst topping 2.3 million messages a day.
An Empty Sender, a Trusted Name, and a Weak Spot in Microsoft 365 Mail Flow
A reported edge-case in Exchange Online shows how a blank SMTP envelope sender can collide with internal-mail trust checks and make phishing look legitimate.
One Email, One Transfer, and a Six-Figure Hole in the Ledger
A Rome case involving an unnamed real-estate holding shows how email-based fraud can bypass software defenses by targeting payment trust itself.
Fake Executives, Forged NDAs, and the Quiet Theft Attempt Hidden Inside a Deal Room
A WhatsApp-based impersonation campaign used executive names, photographs, and sham paperwork to push a corporate-acquisition story designed to move more than €626,000.
QR Codes Are Becoming the New Blind Spot in Email Phishing
By hiding malicious destinations inside QR images, attackers may evade some email scanners and push victims into a mobile-first phishing flow.
Inside the Chat Window: How Fake IT Support Turned Microsoft Teams into a Trust Trap
A social-engineering campaign called Spring Ring shows how external collaboration features can be abused without a software flaw, putting identity and verification at the center of defense.
Norton’s AI Scam Defense Shows Where Consumer Security Is Headed
Norton 360 is presented as a bundled defense against malware, ransomware, online scams, and deepfakes, while higher plans add privacy and identity tools that aim to reduce downstream risk.
Support Chat, Silent Shell: How a Legitimate Help Tool Can Become an Intrusion Path
A campaign built on fake IT support requests shows how trust inside collaboration apps can be steered into remote access and a stealthier Windows foothold.
When Romance Scams Meet Synthetic Voices, the Trap Gets Wider
A Cybersecurity Ventures video featuring Nev Schulman puts a familiar fraud pattern under a harsher light: emotional manipulation is now colliding with AI impersonation and real-estate payment risk.
Trusted Chat Links, Fake Brand Checks, and a Malware Delivery Line
A campaign built around legitimate shared ChatGPT pages shows how attackers can turn familiar interfaces into a route for NetSupport RAT without touching the platform itself.
Clipboard Tricks Are Winning the Front Door
ClickFix shows how a fake “prove you are not a robot” page can steer a user into pasting a command that opens the door for an attacker.
When the Perimeter Moves to the Keyboard: Why Human Behavior Became the New Security Boundary
Cloud services, hybrid work and generative AI are pushing cybersecurity away from network walls and toward the daily decisions people make inside digital systems.
Silent Phone Break-ins Put WhatsApp Users Back on Alert
A warning tied to WhatsApp account compromises and outdated iOS versions shows how zero-click style threats can reduce the margin for human error to almost nothing.
When Accounting Data Becomes a Fraud Playbook
A TeamSystem-related breach may have exposed accounting information that can be repurposed into convincing payment scams, especially fake IBAN-change requests and urgent payment instructions.
Why a Router DNS Swap Is Becoming a Quiet Front Line Against Phishing
A small change at the network edge can reduce exposure to known bad domains for every device that follows the router’s DNS path, but it is a filter, not a guarantee.