PATCHKNIGHT
Protecteur des systèmes legacy
Profil professionnel
PatchKnight défend les systèmes qui ne peuvent pas être mis à jour. Le dernier recours pour les entreprises disposant d’infrastructures critiques.
Compétences clés
Virtual patching; mitigations à l’exécution; durcissement de systèmes obsolètes; analyse des risques legacy; sécurité OT
Réalisations majeures
Sécurisation d’un système industriel de 1989 sans l’arrêter.
Articles de PATCHKNIGHT
When Phishing Learns Your Language, the Inbox Stops Looking Safe
Artificial intelligence can make scam messages more believable and more personal, which turns phishing into a sharper identity problem and makes early digital education a real security control.
Brand Theft, Clipboard Traps, and the New Shape of Malware Delivery
A compromised Reddit identity tied to HBO Max was used in a ClickFix-style lure that tried to push macOS and Windows users into running attacker-controlled commands.
One Million Fake Invoices, One Familiar Trick: AI Gives BEC a Faster Mouth
A large email fraud wave shows how executive impersonation still works when the message is written faster, personalized better, and sent at industrial scale.
When the Login Page Never Leaves the Browser
A browser-generated blob URL can make a phishing page harder to spot before the victim ever sees it, shifting the defender's job from website blocking to runtime detection and identity hardening.
Fake Registry Mail Turns Corporate Compliance Into a Trap
A recently detected phishing campaign uses the branding of Italy’s business registry and chambers of commerce to pressure companies into handing over data through a fraudulent portal.
Digital Classrooms Need More Than Filters: They Need Attention Discipline
Schools that bring smartphones, learning platforms, and AI into everyday teaching face a quieter challenge too: helping students stay focused, critical, and in control of their tools.
When the Phone Becomes the Breach: ShinyHunters and the Health Sector’s Identity Trap
A warning about voice-based social engineering shows how a call, a credential, and a weak second factor can be enough to put cloud access at risk.
The Phish That Never Lived on a Normal Website
A browser-resident phishing trick tied to trusted Microsoft services and blob URLs shows how attackers can shrink the value of static blocklists and force defenders to look at runtime behavior instead.
CSIRT Italia Flags a Delivery-Themed Smishing Run Built to Harvest Payment Details
A text-message lure using the name “Corriere BRT” pushes recipients to rebook a supposed failed delivery and enter personal and card data.
Shadow Support: How Hackers Weaponize Microsoft Teams Trust to Target the Enterprise
A social-engineering campaign is turning a routine helpdesk conversation into a path toward endpoint control, showing how collaboration tools can become a security boundary instead of just a convenience.
The Hidden Glyphs Hiding in Phishing Mail
Invisible Unicode characters are turning ordinary-looking lures into parsing traps, forcing defenders to inspect how email is processed, not just what it appears to say.
Teams Is Not Just a Chat Tool Anymore - It Is a Fraud Channel
New alerts around Microsoft Teams show how quickly a trusted workplace app can be repurposed for executive impersonation and payment pressure.
The MFA Trap Hidden Inside a Microsoft 365 Phishing Machine
A phishing-as-a-service operation tied to BigBear 2.0 shows how attackers can sidestep a successful MFA prompt by targeting the authenticated session instead of the password.
The Trusted Remote Tool That Turned Into a Script Factory
Three related incidents show how a legitimate remote-support stack can be bent into a staged malware path, with VBScript used to reach newly connected hosts.
Fake Cell Towers, Real Theft: The SMS Blaster Playbook Targeting Argentine Phones
A portable rogue base station can push nearby phones onto weaker mobile conditions and deliver phishing texts that look like trusted carrier notices.
Trusted Links, Hidden Payloads: How Phishers Turn Familiar Cloud Paths Into a Trap
A campaign abusing Google-hosted services shows how attackers can launder a malicious click through trusted infrastructure before pushing victims toward credential theft or remote access.
How Attackers Turn Trusted Google Surfaces Into a Phishing Highway
A multi-stage campaign is using legitimate-looking Google infrastructure to move victims past security checks, harvest credentials, and in some cases push ScreenConnect remote-access software.
When Endpoint Security for Small Firms Becomes a Human Problem
A compact security package for PMI puts guided installation, IT help, and Security Awareness training in the same frame as endpoint protection, underscoring how much small-business defense depends on people as much as software.
Invisible Ink in the Inbox: How Unicode Is Helping Phish Slips Past the Net
Attackers are hiding lure words with invisible Unicode characters, creating a human-visible message that can look harmless while some email filters see a broken string.
The Hidden Characters That Help Phish Slip Past the Gatekeepers
A Unicode-obfuscation technique associated with AI prompt-injection research is being reused in a high-volume phishing campaign to hide keywords and evade email filters.