PATCHKNIGHT
Protettore dei sistemi legacy
Profilo professionale
PatchKnight difende sistemi che non possono essere aggiornati. L'ultima risorsa per le aziende con infrastrutture critiche.
Competenze chiave
Virtual patching; Mitigazioni runtime; Hardening di sistemi obsoleti; Analisi del rischio legacy; Sicurezza OT
Risultati principali
Messo in sicurezza un sistema industriale del 1989 senza spegnerlo.
Articoli di PATCHKNIGHT
Password Security Gets a Price Cut, But the Real Value Is in Better Habits
Proton Pass is discounting its Family plan, and the offer is a reminder that the strongest security tools still depend on how people use them.
The Phone Number Was the Trap: How a Robinhood Impersonation Campaign Escapes Email Defenses
A callback-phishing lure uses fake account sign-in alerts to pull targets off the inbox and into a live voice scam, where trust is easier to exploit and harder to automate away.
The Fake Passkey Trap: How Vishing Is Moving Into Identity Enrollment
A reported Microsoft Entra-themed scam shows why attackers are now targeting the moment a user adds a new sign-in method, not just the login page.
Fake Passkey Enrollment Is Becoming the New Front Door for Microsoft 365 Intrusions
A vishing-led campaign is abusing the trust users place in passkey onboarding, showing that phishing resistance can still be undermined at the enrollment step.
The Phishing Page That Waited to Wake Up
A ghost-phishing campaign is reportedly hiding malicious pages until they decrypt inside the browser, a trick that can leave traditional email and URL checks staring at an empty frame.
The Service Desk Is the New Identity Battlefield
AI is making impersonation calls harder to spot, pushing support teams to treat onboarding and recovery as high-risk security events, not routine admin.
The Internet’s Safety Problem Is Not Abstract - It Lands Heaviest on Women
A published discussion on women’s online safety is a reminder that digital risk is not limited to malware: the everyday architecture of the internet can shape who feels safe enough to participate.
Why the Inbox Is No Longer the Whole Battlefield for Phishing
A webinar promotion about email security points to a larger problem: inbox controls help, but phishing now lives across identity, authentication, and user trust layers.
Kratos Phishing Grows Harder to Spot as Operators Refine the Login Trap
A newer Kratos PhaaS flow is drawing attention because it appears designed to look more like routine sign-in friction while reducing the cues defenders normally use to triage phishing.
The Inbox Is the New Perimeter - and It Is Still Too Easy to Fake
A comparison of email security tools is really a stress test for how organizations balance phishing defense, malware filtering, and data-loss controls across a very fragile channel.
Aphish Trap Built on Trusted Tools: How a Fake Invoice Chain Turned AnyDesk Into a Quiet Foothold
A targeted email lure tied to aerospace branding reportedly used a password-protected archive, a multi-stage dropper, and legitimate remote-access software to create a stealthy access path.
When an Invoice Becomes an Access Pass: The Hidden Power of Legitimate Remote Tools
A fake business document and a trusted support app can be enough to create durable access, especially when defenders do not tightly govern remote software.
Hiring Lure, Hidden Hop: Gmail Phishing Is Smuggling Trust Through Redirect Chains
A targeted credential-phishing run is blending recruiter impersonation with layered redirects, turning ordinary job-seeker behavior into a trap for Google accounts.
The Real Target Is No Longer the Firewall - It Is the Person Who Can Move the Money
Business Email Compromise, deepfakes, and generative AI are pushing cyber risk away from the network edge and into payment approvals, vendor changes, and finance workflows.
One RedLine Beacon, and a Maritime Phishing Web Surfaces
A single command-and-control indicator can be enough to expose the wider shape of a credential-theft operation, especially when the target is a sector where email trust and operational continuity matter.
World Cup Lures, Fake Rewards, Real Card Theft
A World Cup-themed phishing run is turning event excitement into a payment-data trap, using counterfeit reward pages and email lures that can look legitimate enough to get past routine checks.
When a Few Seconds of Speech Become a Fraud Kit
Voice cloning is turning short audio snippets into a practical tool for CEO-style scams, while the privacy risk reaches far beyond a single deceptive call.
Opera Puts a Speed Bump in the Clipboard Trap
The browser’s new Paste Protect feature targets a social-engineering pattern that turns copied text into risky command execution.
The Fake Storefront Playbook Behind Gambling PWAs
Cloned app pages, staged reviews, and brand impersonation are being used to make gambling PWAs look routine and safe.
Fake Storefronts, Real Trust: How Gambling Ads Borrow Google Play's Skin
A campaign using lookalike Google Play pages and paid social ads shows how brand trust can be repurposed into a low-friction funnel for gambling PWAs.