PATCHKNIGHT
Protecteur des systèmes legacy
Profil professionnel
PatchKnight défend les systèmes qui ne peuvent pas être mis à jour. Le dernier recours pour les entreprises disposant d’infrastructures critiques.
Compétences clés
Virtual patching; mitigations à l’exécution; durcissement de systèmes obsolètes; analyse des risques legacy; sécurité OT
Réalisations majeures
Sécurisation d’un système industriel de 1989 sans l’arrêter.
Articles de PATCHKNIGHT
Teams Is Not Just a Chat Tool Anymore - It Is a Fraud Channel
New alerts around Microsoft Teams show how quickly a trusted workplace app can be repurposed for executive impersonation and payment pressure.
The MFA Trap Hidden Inside a Microsoft 365 Phishing Machine
A phishing-as-a-service operation tied to BigBear 2.0 shows how attackers can sidestep a successful MFA prompt by targeting the authenticated session instead of the password.
The Trusted Remote Tool That Turned Into a Script Factory
Three related incidents show how a legitimate remote-support stack can be bent into a staged malware path, with VBScript used to reach newly connected hosts.
Fake Cell Towers, Real Theft: The SMS Blaster Playbook Targeting Argentine Phones
A portable rogue base station can push nearby phones onto weaker mobile conditions and deliver phishing texts that look like trusted carrier notices.
Trusted Links, Hidden Payloads: How Phishers Turn Familiar Cloud Paths Into a Trap
A campaign abusing Google-hosted services shows how attackers can launder a malicious click through trusted infrastructure before pushing victims toward credential theft or remote access.
How Attackers Turn Trusted Google Surfaces Into a Phishing Highway
A multi-stage campaign is using legitimate-looking Google infrastructure to move victims past security checks, harvest credentials, and in some cases push ScreenConnect remote-access software.
When Endpoint Security for Small Firms Becomes a Human Problem
A compact security package for PMI puts guided installation, IT help, and Security Awareness training in the same frame as endpoint protection, underscoring how much small-business defense depends on people as much as software.
Invisible Ink in the Inbox: How Unicode Is Helping Phish Slips Past the Net
Attackers are hiding lure words with invisible Unicode characters, creating a human-visible message that can look harmless while some email filters see a broken string.
The Hidden Characters That Help Phish Slip Past the Gatekeepers
A Unicode-obfuscation technique associated with AI prompt-injection research is being reused in a high-volume phishing campaign to hide keywords and evade email filters.
When the Inbox Turns Into a Trap Line, the Real Scam Starts on the Call
A phishing lure built around financial anxiety is pushing victims to phone numbers controlled by criminals, shifting the attack from email filters to human pressure.
Invisible Characters, Visible Damage: How Phishing Quietly Learned to Speak AI
A text-hiding trick born in prompt-injection research is now being used to make phishing lures harder for mail defenses to read, with one observed burst topping 2.3 million messages a day.
An Empty Sender, a Trusted Name, and a Weak Spot in Microsoft 365 Mail Flow
A reported edge-case in Exchange Online shows how a blank SMTP envelope sender can collide with internal-mail trust checks and make phishing look legitimate.
One Email, One Transfer, and a Six-Figure Hole in the Ledger
A Rome case involving an unnamed real-estate holding shows how email-based fraud can bypass software defenses by targeting payment trust itself.
Fake Executives, Forged NDAs, and the Quiet Theft Attempt Hidden Inside a Deal Room
A WhatsApp-based impersonation campaign used executive names, photographs, and sham paperwork to push a corporate-acquisition story designed to move more than €626,000.
QR Codes Are Becoming the New Blind Spot in Email Phishing
By hiding malicious destinations inside QR images, attackers may evade some email scanners and push victims into a mobile-first phishing flow.
Inside the Chat Window: How Fake IT Support Turned Microsoft Teams into a Trust Trap
A social-engineering campaign called Spring Ring shows how external collaboration features can be abused without a software flaw, putting identity and verification at the center of defense.
Norton’s AI Scam Defense Shows Where Consumer Security Is Headed
Norton 360 is presented as a bundled defense against malware, ransomware, online scams, and deepfakes, while higher plans add privacy and identity tools that aim to reduce downstream risk.
Support Chat, Silent Shell: How a Legitimate Help Tool Can Become an Intrusion Path
A campaign built on fake IT support requests shows how trust inside collaboration apps can be steered into remote access and a stealthier Windows foothold.
When Romance Scams Meet Synthetic Voices, the Trap Gets Wider
A Cybersecurity Ventures video featuring Nev Schulman puts a familiar fraud pattern under a harsher light: emotional manipulation is now colliding with AI impersonation and real-estate payment risk.
Trusted Chat Links, Fake Brand Checks, and a Malware Delivery Line
A campaign built around legitimate shared ChatGPT pages shows how attackers can turn familiar interfaces into a route for NetSupport RAT without touching the platform itself.