PATCHVIPER
Cazador de parches para sistemas industriales
Perfil profesional
Aplica parches en vivo en entornos industriales donde la producción no puede detenerse.
Competencias clave
Patching sin tiempo de inactividad; seguridad OT; protección de ICS; mitigación de vulnerabilidades; seguridad de producción continua
Logros principales
Aplicó parches en vivo a máquinas industriales evitando una parada de producción de 1,4 millones de euros.
Artículos de PATCHVIPER
When a Headset Loses Its Lock, the Whole Trust Chain Shifts
QuestStack is described as turning a Quest VR device into fully unlocked hardware, a small-sounding change that carries big consequences for firmware trust, privilege boundaries, and device control.
When a Sandbox Becomes a Fault Line: A Node.js Library Bug Puts AI Workflows on Alert
A critical type confusion flaw in isolated-vm can crash the host process and, in some conditions, may open a path toward host-process control for systems that run untrusted JavaScript.
The Signed Driver That Can Turn Defender Against Itself
A boot-time Microsoft component designed to clean stubborn malware can, under the right privileges, be steered into doing the opposite - a reminder that trusted code is still a powerful attack surface.
How a Salvaged Cutter Exposed the Fragility of Device Identity
A discarded Cricut Maker was brought back into use by spoofing its serial number, showing how a single identifier can sit too close to the trust boundary.
The Boot-Time Trap Hidden Inside a Trusted Defender Driver
A Microsoft-signed remediation component has become a case study in how boot-stage trust can be repurposed to weaken endpoint security before it fully comes online.
When the Sandbox Cracks, the Host Becomes the Prize
A critical flaw in isolated-vm puts a familiar JavaScript isolation model under pressure and shows how quickly a boundary bug can turn into host-level risk.
When a Fast Edge Becomes a Slow Burn: The CDN Tsunami DoS Pattern
A new research family shows how CDN translation between HTTP/3 and HTTP/1.1 can turn a modest request stream into a much larger burden for origin servers.
The Payment Ghost in the Tap: How an Expired Visa Card Was Made to Work Again
A demonstrated "Zombie Card" attack shows how expiry handling in contactless payment logic can become a weak point, even when the card itself is not being cloned or cracked.
When a Dashboard Becomes a Detour: The CyberPanel Chain That Could Turn Admin Convenience Into Code Execution
A newly disclosed exploit path shows how weak trust boundaries in a hosting panel can let unauthenticated input travel into an admin workflow and, under the right conditions, reach server-side execution.
Expired Plastic, Alive Radio: The NFC Trick That Still Passes the Test
A research demo shows that expiration is not always the final word in contactless payments, exposing how much trust a terminal places in a brief radio exchange.
Google’s AI Vulnerability Hunt Points to a New Speed Advantage in Source-Code Defense
A reported two-day sweep through stolen source code shows how agentic security tools may compress discovery and triage, while also raising the bar for validation and governance.
The Hacker Who Became the Security Face of AI-Powered Offense
Nico Waisman’s path from Argentina’s self-taught hacking circles to XBOW highlights a bigger shift in cybersecurity: offensive testing is becoming a product, not just a service.
When the Console Becomes the Crown Jewel: A SCCM PoC Puts the Management Plane Under the Microscope
A proof-of-concept for a Microsoft Configuration Manager flaw is a reminder that post-authentication bugs in enterprise management tools can matter as much as internet-facing ones.
From Domain User to SYSTEM: SCCM’s Management Plane Lands in the Spotlight
A publicly released proof-of-concept around CVE-2026-47301 puts Microsoft Configuration Manager under a harsh light, because the risk is not just server access but privileged control of the management layer itself.
Video Call, Deep Damage: A Mobile Exploit Path Reaches the Android Kernel
A newly disclosed two-stage chain tied to Unisoc modem firmware shows how a standards-based call path can cross from telecom signaling into the most privileged layer of Android.
Telephony’s Hidden Fault Line: A VoLTE Call Path That Can Reach the Android Kernel
Researchers mapped a two-stage Unisoc modem exploit path that, under specific conditions, can move from a malformed call into kernel-level impact on Android devices.
When an Airliner Analog Becomes a Security Test for the Whole Machine
A research hack against an airliner analog is a reminder that aviation security is often defined less by one component than by how many systems have to trust each other at once.
Windows Security Meets a Hard Stop: The “Download More RAM” Technique and the Trust Beneath VBS
A newly disclosed attack against Windows is drawing attention because it appears to weaken protections from below the operating system, not by using a classic kernel bug.
When Windows Trust Is the Target: "Download More RAM" and the Quiet Collapse of VBS
A newly disclosed Windows technique tied to CVE-2026-23670 is framed as a test of the operating system's own trust boundary, not just another endpoint-bypass story.
When a Water Monitor Talks, the Network Listens
A Flume water monitor sends usage data to remote services and a utility workflow, and that makes its traffic worth examining as a privacy and trust signal, not just a hobbyist curiosity.