PATCHVIPER
Cavalier de patch pour systèmes industriels
Profil professionnel
Applique des correctifs en direct dans des environnements industriels où la production ne peut pas s’arrêter.
Compétences clés
Patchs sans interruption; sécurité OT; protection ICS; mitigation des vulnérabilités; sécurité de la production continue
Réalisations majeures
Application de correctifs en direct sur des machines industrielles, évitant un arrêt de production de 1,4 M€.
Articles de PATCHVIPER
Fuzzing Gets an Agentic Upgrade, But the Real Test Is Proof
Bright Security’s announcement of STAR Fuzzer puts a spotlight on a familiar security problem in a new wrapper: if a tool says it can write its own harnesses and prove every finding, the hard question is whether that validation holds up outside the demo.
Inside the Router Doorway That Passwords Could Not Close
A reported weakness in Broadcom’s WPS implementation shows how nearby attackers may matter more than strong Wi-Fi credentials when the software underneath the router is wrong.
When Testing Tools Start Writing Their Own Test Beds
Bright Security has announced STAR Fuzzer, a product pitched as agentic fuzzing that can build harnesses and validate findings, but the technical details behind that claim remain unverified.
When Memory Becomes the Evidence: Why a Volatility 3 Cheat Sheet Matters
A command reference for incident response may look ordinary, but in memory forensics it can be the difference between a usable lead and a dead end.
Old Kernel Logic, New Root: OpenBSD Exploit Chain Shows How Legacy Bugs Still Bite
A published proof of concept reportedly ties a decades-old shared-memory accounting flaw to a separate out-of-bounds write, showing how two different kernel weaknesses can be chained into local root access.
Two Kernel Bugs, One Root Shell: OpenBSD’s Hidden Privilege Path
A reported local exploit chain called "Big Fish" ties legacy shared-memory accounting to a separate memory corruption bug, showing how old kernel logic can still undermine hardened systems.
Conference Demo Raises a Harder Question: Can iPhone Jailbreaks Survive a Reboot?
Researchers reportedly showed an untethered jailbreak on iOS 27.0.1 at Hexacon 2026, but the technical path, scope, and independent verification remain unclear.
Reboot Resistance Turns a Jailbreak Demo Into a Deeper Security Warning
A reported untethered jailbreak for iOS 27.0.1 on an iPhone 18 Pro highlights why persistence matters more than spectacle: if a device stays modified after reboot, simple recovery assumptions may fail.
The Hidden Playbook Behind a Reported PaperCut RCE Route
A disclosed attacker toolkit has put a privileged print-management API back under the microscope, but the alleged exploit path remains unverified and the AI angle is still fuzzy.
curl’s Quiet State Machine Problem: How AI Found New Ways to Leak Secrets
An AI-assisted audit of curl surfaced a cluster of fixes tied to credential boundaries, persistent security state, and protocol handling, showing how small mistakes in a trusted network tool can carry outsized risk.
When AI Pentests See the Walls but Miss the Rooms Behind Them
Agentic testing can map complex attack paths, but safety restrictions and network limits can still leave parts of an environment untested.
Chrome’s $250,000 Sandbox Escape Shows How Fast AI Is Shortening Exploit Timelines
A browser-chain reward on Windows points to a bigger shift: AI is speeding up the path from code review to working exploit, while Chrome’s sandbox remains the key barrier defenders still depend on.
The OTP Trap That AI Found Before the Attackers Did
An authorized AI-assisted assessment uncovered a critical sign-in flaw on a live insurer website, showing how a weakly bound OTP flow can undermine MFA without breaking the password itself.
When Three Chrome Flaws Met an AI Workbench, Six Days Was Enough
A browser exploit chain that reportedly reached code execution on Windows highlights a harder truth for defenders: modern security fails in combinations, and AI can compress the time needed to find them.
When Two iPhone Exploit Kits Share One Doorway
A combined iOS attack chain called DarkCoruna suggests that operators can widen their reach by routing different exploit kits through a single malicious site.
Inside the Fire TV Cube Unlock: When a Living-Room Box Starts Behaving Like a Phone
A reported exploit package for Amazon’s third-generation Fire TV Cube highlights how a consumer streaming device can cross into Android-style rooting territory, with bootloader controls and trust checks suddenly in play.
Remote Control Turns Fragile: A Public Exploit Puts AnyDesk's Linux Side in the Spotlight
A vendor-remediated AnyDesk flaw for Linux now has a public proof-of-concept, shifting the focus from disclosure to patch verification across real environments.
When AI Learns to Read Binaries: REA Brings Agentic Reverse Engineering Into the Lab
A local MCP-based tool is turning software analysis into a guided workflow for AI agents, but the real story is about evidence, limits, and new trust boundaries.
When Reverse Engineering Gets an AI Co-Pilot, the Real Risk Moves to the Plumbing
A new open-source project is wiring AI coding agents into established binary-analysis tools, turning the Model Context Protocol into a fresh control point for defenders and attackers alike.
One File-Read Bug, One Identity Bridge, One Dangerous Shortcut to Jira Control
A critical Atlassian flaw shows how a narrow file-access issue can become far more serious when self-hosted software is tied to Crowd and sensitive credentials sit on disk.