PATCHKNIGHT
Protecteur des systèmes legacy
Profil professionnel
PatchKnight défend les systèmes qui ne peuvent pas être mis à jour. Le dernier recours pour les entreprises disposant d’infrastructures critiques.
Compétences clés
Virtual patching; mitigations à l’exécution; durcissement de systèmes obsolètes; analyse des risques legacy; sécurité OT
Réalisations majeures
Sécurisation d’un système industriel de 1989 sans l’arrêter.
Articles de PATCHKNIGHT
WhatsApp Adds Optional Scam Alert to Catch Suspicious Messages Earlier
The new feature uses a local machine learning model to warn users about potential scams, turning message screening into a lightweight, on-device safety check.
AI Steps Into the Smishing Chain as Fake INPS Messages Get Harder to Spot
A campaign framed around Italy's social security brand shows how automation can improve fraud credibility without proving any breach of the impersonated institution.
Chat Apps Move the Fight Against Fraud Into the Interface
WhatsApp's scam alert feature and Signal's automatic key verification show how secure messaging is shifting from pure encryption toward user-facing trust checks.
Chrome’s Notification Clampdown Exposes a Quiet Scam Economy
Google’s layered defenses against abusive Android notifications show how a browser can become a frontline security control, not just a delivery path for spam.
Chrome Turns Notification Abuse Into a Security Problem, Not a Nuisance
Google Chrome is tightening defenses around web push notifications because the same permission used for legitimate alerts can also be twisted into a delivery channel for phishing, scams, and malware lures.
Fake Hiring Lure Turns a VPN Client into a Delivery Vector
A job-interview pretext and a trojanized WireGuard VPN client show how attackers can target the people trusted to set up access in the first place.
Midair Wi-Fi Trouble Turns a Return Flight Into a Security Puzzle
A reported in-flight Wi-Fi disruption on a Delta flight returning from DEF CON shows how quickly a cabin networking issue can become a security and law-enforcement matter.
Midair Wi-Fi Deception Turns a Cabin Network Into a Phishing Trap
An alleged rogue wireless network on a Delta flight shows how “evil twin” tactics can abuse passenger trust long before any malware or credential theft is proven.
Mailbox Theft for Profit: How AiTM Phishing Is Hunting Microsoft 365 Finance Teams
A phishing wave aimed at Microsoft 365 is using adversary-in-the-middle tricks and residential proxy camouflage to reach the mailboxes that sit closest to payroll and finance workflows.
Shipping-Branded SMS Lures Keep Card Fraud Alive
A GLS-themed smishing campaign detected by ACN CSIRT Italia shows how a familiar delivery brand can be used to pressure recipients into handing over payment-card data.
The Subscription Scam Selling Microsoft 365 Break-ins as a Service
A Telegram-marketed phishing kit illustrates how cloud identity abuse has been industrialized, with ready-made lures and reported paths for token theft, device-code tricks, and OAuth consent abuse.
When a Trusted Support Tool Becomes the Trap
A credential-free-looking install flow can turn a legitimate remote support product into an attacker-controlled foothold, with the session blending into normal IT activity.
DarkSword’s Web Trail Shows How iPhone Attacks Can Scale Without Looking Loud
A leaked iOS exploit kit, rotating hosts, and fake Apple login pages point to a mobile intrusion model built for persistence, not one-off abuse.
When a Browser Trick Becomes an Apple ID Trap on iPhone
A leaked iOS exploit chain paired with a counterfeit Apple sign-in page shows how one malicious visit can blend device exploitation and credential theft into a single attack path.
Hotel Wi-Fi, Real Microsoft Pages, and the MFA Trap Behind Device Code Phishing
A described campaign ties hostile Wi-Fi conditions to a Microsoft login flow that can turn ordinary user approval into cloud access, showing why identity controls now matter as much as network trust.
Phishing for Rent: Two New Kits Put Microsoft 365 BEC on Autopilot
TokenLover and YaksaLover point to a market where business email compromise is being packaged as a service, with cloud identity as the real target.
Holiday Mode Is a Cyber Trap When Oversharing Meets Public Networks
Vacation changes the threat model: location leaks, public Wi-Fi, and rushed messaging can turn routine travel into an easy opening for phishing and account abuse.
Fake Helpdesk Calls Are Turning Teams Into a Ransomware Launchpad
Attackers are using Microsoft Teams voice calls and false IT support identities to reach endpoints, then moving quickly toward Chaos ransomware in some cases.
Fake Bank Calls, Real Device Control: The Scam Playbook Behind Copybara
A fraud chain aimed at N26 users in Italy shows how voice impersonation, phishing infrastructure, and Android malware can be combined to pressure victims into surrendering control of their banking sessions.
Italy Puts Cyber Lessons on the Student Front Line
ACN and Skuola.net have launched a cyber-education campaign aimed at young people, turning awareness into a practical layer of digital defense.