Welcome to the first Patch Tuesday of 2024! We are starting a New Year with 49 new bugs where only 2 are critical. As the article will be really short this time, let’s briefly review these bugs! CVE-2024-20674 – Windows Kerberos Security Feature Bypass Vulnerability The first one one our list is a Critical bug […]
Microsoft Patch Tuesday – January 2024 Read More »
This month, Microsoft released patches addressing 78 CVEs, including 3 zero-days + 2 publicly disclosed and 3 criticals. Let’s briefly review them! CVE-2023-36025 – Windows SmartScreen Security Feature Bypass Vulnerability The first zero-day looks more like a bypass than a privilege escalation. An attacker can bypass Windows Defender SmartScreen checks and other prompts. This bug
Microsoft Patch Tuesday – November 2023 Read More »
Do you know that it’s possible to use PowerShell to integrate OpenAI GPT with context menu in Windows? It’s even really simple and with help of this article everyone can make it. In this example, I’ll add a new item to context menu (when you right click on a file). It appears only for PowerShell
Use PowerShell to integrate OpenAI GPT with context menu Read More »
In this article, I will describe a simple way to let OpenAI improve and correct your PowerShell code. It will contain 2 main functions: Get-CodeImprovementSuggestion and Get-CodeFixSuggestion. Both accept a ScriptBlock parameter. As names indicate, the first one checks in OpenAI if there are some possible improvements. The second one checks for errors. Both are
Let OpenAI improve and correct your PowerShell code Read More »
For October, Microsoft released patches for 103 CVEs, including 3 zero-days and 13 criticals. Let’s briefly review them! CVE-2023-44487 – HTTP/2 Rapid Reset Attack The first zero-day was reported as being under active attack across Google systems in August 2023, but Microsoft released a patch for their products right now. This vulnerability allows attackers to
Microsoft Patch Tuesday – October 2023 Read More »
Web Link is a simple way to publish URL shortcuts in Intune. It allows the administrator to control which URL shortcut appear on user’s mobile device either without user consent or as an optional application. The way to create it is fairly simple, you can look at Microsoft’s documentation. Recently I had a need to
Create Web Link with PowerShell in Intune Read More »
Intro Recently I had a need to re-write one of my old scripts. It was a simple case: once a month send an email with the number of received and sent messages from the previous month for a shared mailbox. The original one used Exchange on-prem. The new one connects to Exchange Online. What seemed
Increase maturity of PowerShell script with Mermaid diagram Read More »
This month the Patching Tuesday brings us 59 new CVEs including 2 zero-days and 5 criticals. Look like a common month? Let’s check! CVE-2023-36761 – Microsoft Word Information Disclosure Vulnerability This critical bug in Word comes first. Microsoft classified that as an information disclosure vulnerability, but… this one allows the disclosure of NTLM hashes, presumably
Microsoft Patch Tuesday – September 2023 Read More »
Today’s Patch Tuesday brings us 74 new CVEs which contain 6 criticals. Not that bad, so let’s briefly review them! CVE-2023-35385 / CVE-2023-36910 / CVE-2023-36911 – Microsoft Message Queuing Remote Code Execution Vulnerability We are starting with 3 critical bugs (9.8) which are very similar to bugs from the past 4 months – these bugs
Microsoft Patch Tuesday – August 2023 Read More »
This month, Microsoft has fixed 130 vulnerabilities, including 5 zero-days + 9 criticals. It’s more than the last two months, so let’s briefly review them, because patching is waiting 🙂 CVE-2023-36884 – Office and Windows HTML Remote Code Execution Vulnerability We starting with the most important CVE this month, at least in my opinion. Microsoft
Microsoft Patch Tuesday – July 2023 Read More »