SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
Patch Tuesday: Microsoft Security Bulletin Summary for Febraury 2019
CVE Research
Patch Tuesday: Microsoft Security Bulletin Summary for Febraury 2019
Microsoft Security Bulletin February 2019 released its monthly set of security updates to address the vulnerabilities in its products today. The number of vulnerabilities reported each month has come up again after the dip from last October. Moreover, There are 77 vulnerabilities reported with 20 CV
Patch Tuesday: Microsoft Security Bulletin Summary for April 2019
CVE Research
Patch Tuesday: Microsoft Security Bulletin Summary for April 2019
Microsoft Security Bulletin April 2019 is back with its monthly set of security updates, addressing a total of 75 vulnerabilities with 17 rated critical and 58 rated important. More than 30 vulnerabilities can lead to Remote Code Execution. 2 CVEs are being exploited in the wild and need immediate a
IoT Ransomware Attacks – Next Biggest Challenge For Cyber Warriors – Part 2
CVE Research
IoT Ransomware Attacks – Next Biggest Challenge For Cyber Warriors – Part 2
As stated in the IoT Ransomware Attacks – Part 1 IoT ransomware is not just holding your data hostage, it can lead to denial of service until the demanded ransom is payed to the hackers, which is quite a big market for hackers to see the money. There will be a greater threat for all […]
CVE-2023-44487: “HTTP/2 Rapid Reset” Flaw Results In Largest DDoS Attack
CVE Research
CVE-2023-44487: “HTTP/2 Rapid Reset” Flaw Results In Largest DDoS Attack
Until August 2023, the largest DDoS attack ever recorded sent 46 million requests per second (rps). This attack was mitigated by Google Cloud, which stated that its scale was comparable to receiving all the daily requests to Wikipedia at once. What could top that? A new vulnerability in HTTP/2 expos
CVE-2014-1776: Zero-Day vulnerability in Internet Explorer
CVE Research
CVE-2014-1776: Zero-Day vulnerability in Internet Explorer
A new zero-day vulnerability (CVE-2014-1776) in Internet Explorer is being used in targeted attacks, which was discovered by the security firm FireEye. Therefore, a good vulnerability management tool can prevent these attacks. A memory corruption vulnerability exists in Internet Explorer that can be
Apple Security Updates September 2019
CVE Research
Apple Security Updates September 2019
Apple has released a set of Apple Security Updates September 2019 to address the vulnerabilities in its products. There are a total of 5 CVEs. The affected products are MacOS, Safari, tvOS, iOS and WatchOS. CVE-2019-8641 is considered critical and is classified as out-of-bounds read (CWE-125), where
Apple Critical Security Updates May 2020
CVE Research
Apple Critical Security Updates May 2020
Apple Security Updates May 2020 released security updates for multiple products. A total of 59 vulnerabilities addressed. The exploitation of some of these security flaws could allow an attacker to take control of an affected system. However, a vulnerability management tool can stop the exploitation
Apple Security Updates July 2019
CVE Research
Apple Security Updates July 2019
Apple released a set of Apple security updates July 2019 to address vulnerabilities in its various products. About 49 vulnerabilities were identified and fixed by Apple in these security updates. Out of the 49, 44 CVEs were relevant to MacOS, while 23 CVEs were reported for iCloud, Safari, and iTune
Apple Security Updates January 2020
CVE Research
Apple Security Updates January 2020
Apple Security Updates January 2020 released security updates for multiple products today. A total of 46 vulnerabilities addressed. Exploitation of some of these security flaws could allow an attacker to take control of an affected system. A vulnerability management solution can stop the exploitatio