Alexander V. Leonov

AVLEONOV Podcast

Technology EN ↓ 94 episodes

Vulnerability assessment, IT compliance management, security automation and other beautiful stuff.

Author

Alexander V. Leonov

Episodes

Ep.44 - VMconf 22 Vulnerability Management conference: Call For Papers started 01.11.2021 4:59

Hello everyone! This episode will be about the VMconf 22 Vulnerability Management conference. CFP started on November 1, which will last a month and a half. So please submit your talk or share this video with someone who might be interested. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.43 - Security News: Microsoft Patch Tuesday October 2021, Autodiscover, MysterySnail, Exchange, DNS, Apache, HAProxy, VMware vCenter, Moodle 21.10.2021 7:36

Hello everyone! This episode will be about relatively recent critical vulnerabilities. Let’s start with Microsoft Patch Tuesday for October 2021. Specifically, with the vulnerability that I expected there, but it didn’t get there. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.42 - Career Navigator talk for IT Hub College 08.10.2021 5:21

Last week I gave a "Career Navigator" talk for the students of the IT Hub College in Moscow. By the way, this college has a very interesting practical information security program. If it is relevant for you, check it out. I’ve never talked so much about myself in public. It was like giving advises to yourself from the past. An interesting experience. It took about an hour and a half. And now I wil...

Ep.41 - Security News: Microsoft Patch Tuesday September 2021, OMIGOD, MSHTML RCE, Confluence RCE, Ghostscript RCE, FORCEDENTRY Pegasus 19.09.2021 5:17

Hello everyone! This time, let’s talk about recent vulnerabilities. I’ll start with Microsoft Patch Tuesday for September 2021. I created a report using my Vulristics tool. A link to the full report in the blogpost. The most interesting thing about the September Patch Tuesday is that the top 3 VM vendors ignored almost all RCEs in their reviews. However, there were interesting RCEs in the Office p...

Ep.40 - Microsoft Defender for Endpoint: The Latest Versions of Antivirus Engine and Signatures 14.09.2021 2:31

In a previous episode on Microsoft Defender for Endpoint, I described how to get a list of antivirus engine and signatures versions for the hosts in your infrastructure using the Microsoft Graph API. But the problem remains. You know the versions that are currently installed on the hosts. But where can you get the latest versions that should be installed there? Watch the video version of this epis...

Ep.39 - Security News: Exchange ProxyShell, Zoom RCE, Citrix Canceled PT Acknowledgments, Cisco No Patch Router RCEs 01.09.2021 6:52

Hello everyone! This is a new episode with my comments on the latest Information Security news. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.38 - Security News: Microsoft Patch Tuesday August 2021, Phishers Started Using reCAPTCHA, Scan 1 IP and Go to Jail 20.08.2021 5:05

Hello everyone! Yet another news episode. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.37 - How to get Antivirus-related Data from Microsoft Defender for Endpoint using Intune and Graph API 16.08.2021 3:47

Hello everyone! In this episode, I would like to tell you how I tried to get automatically antivirus-related data (current status, engine and signature version, last full scan date) from Microsoft Defender for Endpoint using Microsoft Intune and the Graph API. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.36 - Last Week’s Security News: Black Hat Pwnie Awards, iPhone Checks Photos, Evil Windows Print Server, Cisco VPN Routers Takeovers 12.08.2021 5:53

Hello everyone! Last Week’s Security News, August 1 – August 8. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.35 - Last Week’s Security news: Serious Sam in Metasploit, PetitPotam, Zimbra Hijack, Joint Advisory TOP30 CVEs 02.08.2021 6:53

Hello everyone! Last Week’s Security News, July 26 – August 1. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.34 - How to fix “Nessus failed to load the SSH private key” error? 31.07.2021 2:24

If you are using Nessus to scan Linux hosts and authenticate by key, you may encounter this problem. You have generated the keys correctly, placed the public key on a remote server. You can connect to this server using the private key. But when scanning with Nessus, you get weird errors in the various plugin outputs. Watch the video version of this episode on my YouTube channel. Read the full text...

Ep.33 - Last Week’s Security news: Pegasus, SeriousSAM, Sequoia 26.07.2021 6:40

So, the last week, July 19 – July 25. In my opinion, the most interesting news was the scandal related to the iPhone Pegasus spyware and two Elevations of Privileges: SeriousSAM for Windows and Sequoia for Linux. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.32 - My thoughts on the “2021 Gartner Market Guide for Vulnerability Assessment”. What about the quality? 25.07.2021 9:52

Hello everyone! I decided to share my thoughts on the latest Gartner vulnerability assessment report. Not so bad text after all, but it could be better. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.31 - Last Week’s Security news: Exploits for ForgeRock, vSphere, Apache Tomcat, new Print Spooler vuln, Kaseya Patch and REvil, SolarWinds, Schneider Electric, Bulletins 19.07.2021 9:12

Hello guys! The fourth episode of Last Week’s Security news, July 12 – July 18. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.30 - Vulristics Microsoft Patch Tuesday July 2021: Zero-days EoP in Kernel and RCE in Scripting Engine, RCEs in Kernel, DNS Server, Exchange and Hyper-V 15.07.2021 4:18

Hello everyone! For the past 9 months, I’ve been doing Microsoft Patch Tuesday reviews quarterly. Now I think it would be better to review the July Patch Tuesday while the topic is still fresh. And that will save us some time in the next Last Week’s Security news episode. So, July Patch Tuesday, 116 vulnerabilities. Watch the video version of this episode on my YouTube channel. Read the full text...

Ep.29 - Last Week’s Security news: PrintNightmare patches and Metasploit, Kaseya CVEs, Morgan Stanley Accellion FTA, Cisco BPA and WSA, Philips Vue PACS, CISA RVAs, Lazarus job offers 11.07.2021 8:46

Hello guys! The third episode of Last Week’s Security news, July 5 – July 11. There was a lot of news last week. Most of them was again about PrintNightmare and Kaseya. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.28 - Vulristics: Microsoft Patch Tuesdays Q2 2021 10.07.2021 4:43

Hello everyone! Let’s now talk about Microsoft Patch Tuesday vulnerabilities for the second quarter of 2021. April, May and June. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.27 - Last Week’s Security news: PrintNightmare, Kaseya, Intune, Metasploit Docker escape 05.07.2021 4:52

Hello guys! The second episode of Last Week’s Security news from June 28 to July 4. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.26 - Vulristics HTML Report Update: Table for Products, Table for Vuln. Types and Prevalence 04.07.2021 3:34

Hi guys! I was on vacation this week. So I had time to work on my Vulristics project. For those who don’t know, this is a framework for prioritizing known CVE vulnerabilities. I was mainly grooming the HTML report. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.25 - Last Week’s Security news: Cisco ASA, BIG-IQ, vSphere, Solaris, Dlink, iPhone %s, DarkRadiation, Google schema, John McAfee 28.06.2021 10:23

Hello, today I want to experiment with a new format. I will be reading last week’s news from my @avleonovnews channel, which I found the most interesting. I do this mostly for myself, but if you like it too, then that would be great. Please subscribe to my YouTube channel and my Telegram @avleonovcom. Watch the video version of this episode on my YouTube channel. Read the full text of this episode...

Ep.24 - PHDays 10: U.S. Sanctions, My Talk on Vulristics, Other Great Talks Related to VM 15.06.2021 5:41

Today I will talk about the Positive Hack Days conference, which took place on May 20 and May 21 in Moscow. I can say that this was and remains the main event for Information Security Practitioners in Russia. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.23 - Getting Hosts from Microsoft Intune MDM using Python 09.06.2021 3:40

Today I want to talk about Microsoft Intune Mobile Device Management platform. The task I needed to solve was how to get the timestamp of the last activity for all hosts in Microsoft Intune using the official API. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.22 - AM Live Vulnerability Management Conference Part 2: What was I talking about there 08.04.2021 6:46

Hello all! It is the second part about AM Live Vulnerability Management conference. In the first part I made the timecodes for the 2 hours video in Russian. Here I have combined all my lines into one text. Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.

Ep.21 - Vulristics: Microsoft Patch Tuesdays Q1 2021 26.03.2021 11:49

Hello everyone! It has been 3 months since my last review of Microsoft vulnerabilities for Q4 2020. In this episode I want to review the Microsoft vulnerabilities for the first quarter of 2021. There will be 4 parts: January, February, March and the vulnerabilities that were released between the Patch Tuesdays. Watch the video version of this episode on my YouTube channel. Read the full text of th...

Ep.20 - Vulristics: Beyond Microsoft Patch Tuesdays, Analyzing Arbitrary CVEs 02.03.2021 3:38

I have completed a major refactoring of Vulristics. Now it can create beautiful reports not only for Microsoft Patch Tuesdays, but for any set of CVEs! Watch the video version of this episode on my YouTube channel. Read the full text of this episode with all links on avleonov.com blog.