SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
RustDuck: The DDoS Botnet Engineered to Outlast Detection
RustDuck is an actively developed DDoS botnet targeting routers, cameras, and servers through known CVEs and default credential abuse, deploying a Rust-based payload with Noise protocol-grade C2 encryption and a weighted sandbox evasion system to build resilient, hard-to-detect flood infrastructure.
CVE Research
Citrix Critical Update: NetScaler Vulnerabilities Fixed Enabling File Leakage and Service Disruption
Citrix has issued critical fixes for six NetScaler vulnerabilities that could lead to arbitrary file reads, memory disclosure, and denial-of-service attacks. As internet-facing appliances, NetScaler deployments remain attractive targets for threat actors seeking initial access to enterprise networks.
Breaking Down CVE-2026-43503: Dirty Clone Linux Kernel Privilege Escalation Vulnerability
CVE Research
FortiBleed: The Leak That Turned 73,000 Firewalls Into a Targeting Database
FortiBleed is a credential-exposure campaign targeting Fortinet firewalls, with over 86,000 devices compromised across 194 countries. No patch exists – attackers crack stolen password hashes and turn devices into listening posts for credential theft.
