PATCHVIPER
فارس ترقيع للأنظمة الصناعية
الملف المهني
يطبق ترقيعات حية في البيئات الصناعية التي لا يمكن فيها إيقاف الإنتاج.
المهارات الأساسية
الترقيع من دون توقف؛ أمن OT؛ حماية ICS؛ التخفيف من الثغرات؛ سلامة الإنتاج المستمر
أبرز الإنجازات
طبق ترقيعات حية على آلات صناعية متجنبًا توقف إنتاج بقيمة 1.4 مليون يورو.
مقالات بقلم PATCHVIPER
PS5 Exploit Chain Draws a Straight Line From Browser Code to Kernel Memory Control
A newly named chain, Relapse, illustrates how a web-facing weakness can become a much deeper system problem when it is paired with a kernel memory bug.
When the Request Lies: Why Host Headers and Redirects Still Break Web Trust
A new technique-focused post puts two old web bugs back under the microscope: host header injection and open redirects, both of which matter because applications often trust request data too quickly.
When Branch Predictors Turn into Memory Leaks
A newly disclosed Spectre-v2 style technique shows how reused JIT code can confuse CPU prediction state and, in a proof of concept, expose Linux secrets including a root password hash.
The Analytics Gate That Should Have Stayed Shut
A reported authentication flaw in Microsoft’s Titan analytics service is a reminder that in data platforms, the login layer can be as sensitive as the data itself.
When Scanning Is Not Enough: The Push Toward Validated Exploits in AI Pentesting
AI-assisted penetration testing is being used to separate a vulnerability that exists from one that can actually be exercised in a controlled test.
Convenience APIs, Hidden Eyes: The Quiet Leak Behind File Notifications
Researchers have exposed a cross-platform side channel in file-notification plumbing that may let unprivileged local users infer sensitive activity on Windows, Linux, macOS, and Android.
AI Sandboxes Can Leak More Than Data When Agents Start Acting Like Operators
A reported evaluation-sandbox escape involving AI agents shows how browser access, if too broad, can become a route to code execution-like behavior and large-scale abuse tooling.
Windows Injection Takes a Side Door Through Console Input
A newly documented technique uses redirected standard input in a console process to place code without the usual memory-write calls that many defenders monitor first.
When Windows Hides the Payload in Plain Sight
A newly disclosed injection method uses redirected console input and named pipes to move data into a child process without calling the Windows memory APIs defenders watch most closely.
RSA’s Quiet Failure Point: Researchers Show a HSM Can Be Mimicked Without Taking the Key
A cryptographic disclosure raises an uncomfortable question: what happens when the hardware keeps the key secret, but the signature can still be forged?
Retail Targets Meet Machine Speed: AI Tooling Enters the Pre-Breach Phase
An online-retail campaign built around three AI harnesses shows how vulnerability research, exploitation, and orchestration can be fused into a faster attack workflow, even when the full technical path remains unclear.
The Silent Path Into a Device: Reading Firmware Without Pulling the Chip
SPI-based firmware recovery shows how a tiny serial bus can become both a rescue lane for analysts and a sensitive edge in the trust chain.
Identity Leak, Exploit Drop: Why Microsoft Defender Is Back in the Crosshairs
A reported attribution tied to a familiar alias has revived scrutiny of Windows defense layers, where one valid exploit can pressure patching, hardening, and trust in endpoint controls.
When Defender Stops Updating, the Gate Still Looks Closed
A reported Microsoft Defender zero-day that blocks antivirus updates turns a routine maintenance path into the real target, creating a protection gap without necessarily knocking the product offline.
Writing Your Own Scanner Rules Is Where Security Gets Real
Custom Semgrep rules can turn static analysis from a generic checklist into a more precise control, but the value depends on how carefully teams define and maintain those rules.
When an Air Gap Starts Whispering
A revived TEMPEST-style technique shows why physical isolation is not the same thing as silence: unwanted radio emissions can still become an attack surface.
Why a Laser Incident on the RP2350 Matters More Than It Looks
A reported laser-based path into debug mode highlights a hard truth for embedded security: strong features still have to survive physical tampering.
Two Small RouterOS Flaws, One Big Admin Door
A chained weakness in MikroTik RouterOS shows how exposed edge devices can turn a narrow protocol flaw into full administrative control.
Pentest Shops Meet the AI Temptation: Speed, Policy, and the New Trust Problem
Penetration testers are under pressure to use faster AI tools, but the real question is whether firms can keep client data, review standards, and evidence quality under control.
18 Paths Into the Directory: The New Playbook for Breaking Identity Control
A refreshed Five Eyes cybersecurity guide maps 18 attacker techniques against Active Directory, showing why identity infrastructure remains one of the highest-value targets in enterprise networks.