I would like to start this episode by talking about Microsoft vulnerabilities, which recently turned out to be much more serious than it seemed at first glance.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

This time I would like to review not only the vulnerabilities that were published in the last August Microsoft Patch Tuesday, but also the CVEs that were published on other, not Patch Tuesday, days. Of course, if there are any.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

I am doing this episode about July vulnerabilities already in August. Sorry for delay. I talk here about my new open source project Vulristics and review the PatchTruesday report.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

This episode is based on posts from my Telegram channel avleonovcom, published in the last 2 weeks. So, if you use Telegram, please subscribe. I update it frequently.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

This time, Microsoft addressed 129 vulnerabilities: 11 critical and 118 important. It's rather interesting month, but the focus is still mainly on SMB RCE vulnerabilities and the possible use of these vulnerabilities in malware attacks.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

I have been a Splunk guy for quite some time, 4 years or so. I have made several blog posts describing how to work with Splunk in automated manner. But after their decision to stop their business in Russia last year, including customer support and selling software and services, it was just a matter of time for me to start working with other dashboarding tools. For me, Grafana has become such a tool. In this post I want to describe the basic API operations with Grafana dashboards, which are necessary if you need to create and update dozens and hundreds of dashboards. Doing all this in the GUI will be painful. Grafana has a pretty logical and well-documented API. The only tricky moments I had were getting a list of all dashboard and editing an existing dashboard.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

It will be an off-topic, but I really wanted to share this with you. Adding your own tools in Notepad++ makes it much more fun!😊 I have to say, I spend a lot of time daily in Notepad++ text editor for Windows. I keep my “logbook” there. I record what I am doing now and what needs to be done. This allows me not to keep everything in my head and switch the context more efficiently. I can recommend this to everyone. And it is especially useful to note when you started working on a task and when you finished. This gives an understanding of what actually takes your time. I’m not a fan of very strict and formal techniques such as pomodoro, but using some form of time management is good. Recording timestamps manually is inconvenient. It would be much easier to press a key combination and automatically insert the current timestamp into the document. It turned out that this is possible, and even more – you can get the results of any Python script this way!

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

Last time I complained that different VM vendors release completely different reports for Microsoft Patch Tuesday. This time I decided that it’s not a bug, but a feature. I upgraded my script to not only show vulnerabilities, but also show how these vulnerabilities were mentioned in the reports of various VM vendors (Tenable, Qualys, Rapid7 and ZDI). In my opinion, it seems pretty useful.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

This time I want to write about the service of my friends from Antiphish. They call it “security awareness and employee behaviour management platform”. Simply put, they teach company employees how to detect and avoid phishing attacks.

How can you protect your organization from phishing attacks? Educate people and constantly provoke them using emulated phishing attacks (some of these Antiphish attacks are amazing, I show them in the video).

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.

Making the reviews of Microsoft Patch Tuesday vulnerabilities should be an easy task. All vulnerability data is publicly available. Even better, dozens of reviews have already been written. Just read them, combine and post. Right? Not really. In fact it is quite boring and annoying.

That's why I created a script that takes Patch Tuesday CVE data from microsoft.com and visualizes it giving me helicopter view on what can be interesting there. With nice grouping by vulnerability type and product, with custom icons for vulnerability types, coloring based on severity, etc.

Watch the video version of this episode on my YouTube channel.

Read the full text of this episode with all links on avleonov.com blog.