SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
Open Gunra Ransomware Exploits Fortinet Auth Bypass Flaws in Global Double Extortion Campaign
CVE Research
Gunra Ransomware Exploits Fortinet Auth Bypass Flaws in Global Double Extortion Campaign
Gunra, a Conti-derived ransomware-as-a-service group, breaches networks by exploiting Fortinet authentication bypass flaws CVE-2024-55591 and CVE-2025-24472, then exfiltrates data and deploys ChaCha20/RSA-4096 encryption in a double extortion scheme.
Open Three Zero-Days, 421 Flaws Fixed: Microsoft's August 2026 Patch Tuesday Delivers a Massive Update
CVE Research
Three Zero-Days, 421 Flaws Fixed: Microsoft's August 2026 Patch Tuesday Delivers a Massive Update
The second Tuesday of August 2026 brought one of the largest Patch Tuesday releases in recent memory, with Microsoft shipping updates for 421 CVEs across Windows, Office, Azure, SharePoint, Exchange Server, and critical developer tools — including three zero-day vulnerabilities, one of which was actively exploited in the wild.
