Hello everyone! This episode will be about the VMconf 22 Vulnerability Management conference. CFP started on November 1, which will last a month and a half. So please submit your talk or share this video with someone who might be interested.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

Hello everyone! This episode will be about relatively recent critical vulnerabilities. Let’s start with Microsoft Patch Tuesday for October 2021. Specifically, with the vulnerability that I expected there, but it didn’t get there.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

Last week I gave a "Career Navigator" talk for the students of the IT Hub College in Moscow. By the way, this college has a very interesting practical information security program. If it is relevant for you, check it out. I’ve never talked so much about myself in public. It was like giving advises to yourself from the past. An interesting experience. It took about an hour and a half. And now I will try to mention the main points.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

Hello everyone! This time, let’s talk about recent vulnerabilities. I’ll start with Microsoft Patch Tuesday for September 2021. I created a report using my Vulristics tool. A link to the full report in the blogpost. The most interesting thing about the September Patch Tuesday is that the top 3 VM vendors ignored almost all RCEs in their reviews. However, there were interesting RCEs in the Office products. And what is most unforgivable is that they did not mention CVE-2021-38647 RCE in OMI – Open Management Infrastructure. Only ZDI wrote about this.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

In a previous episode on Microsoft Defender for Endpoint, I described how to get a list of antivirus engine and signatures versions for the hosts in your infrastructure using the Microsoft Graph API. But the problem remains. You know the versions that are currently installed on the hosts. But where can you get the latest versions that should be installed there?

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

Hello everyone! This is a new episode with my comments on the latest Information Security news.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

Hello everyone! Yet another news episode.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

Hello everyone! In this episode, I would like to tell you how I tried to get automatically antivirus-related data (current status, engine and signature version, last full scan date) from Microsoft Defender for Endpoint using Microsoft Intune and the Graph API.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

Hello everyone! Last Week’s Security News, August 1 – August 8.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

Hello everyone! Last Week’s Security News, July 26 – August 1.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.