SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Data Breach in the Healing Sphere – Cyberattack Hits 5 Hospitals!
In recent news, a cyberattack hit 5 hospitals and healthcare, forcing some emergency rooms to be closed and ambulances diverted. A ransomware attack on a shared IT service organization caused the attack, which is forcing 5 hospitals in Ontario to reschedule patient appointments. They also forced to ...
CVE Research
Critical Vulnerabilities in SAP Adaptive Server Enterprise (ASE)
The SAP Adaptive Server Enterprise (ASE), previously known as Sybase SQL Server, is a high-performance relational database server that can be hosted on-premise or cloud structure that is used by over 30,000 organizations worldwide, including banking institutions, healthcare companies, security firms...
CVE Research
Microsoft September 2023 Patch Tuesday Fixes 59 Vulnerabilities Including 2 Zero-Day Exploits!
Microsoft has released September 2023 Patch Tuesday security updates, which fixes 59 vulnerabilities. Five are classified as critical, two zero-day(CVE-2023-36802 and CVE-2023-36761), and twenty-four vulnerabilities were related to remote code execution. Vulnerability management tools play a crucial...
CVE Research
5+ Tips to Secure Your Java Code from Attackers
Every software developer must follow certain standards and practices while coding and writing, secure code is one such practice. Everyone who loves to code must ensure their software is not vulnerable to exploits or being a principal cause of a cyber-attack. Here are the few best Java code security ...
CVE Research
Microsoft’s December 2023 Patch Tuesday Fixes 34 Vulnerabilities, Including 1 Zero Days!
Microsoft addressed 34 security flaws in its December 2023 Patch Tuesday, including one previously known vulnerability in AMD CPUs. While eight of these vulnerabilities were classified as remote code execution (RCE), only three were considered critical by Microsoft. In total, four vulnerabilities we...
CVE Research
Citrix Bleed: Critical Information Disclosure Vulnerability In Citrix NetScaler, Patch Now!
According to a security bulletin released by Citrix this month, their recent patches include a fix for a flaw with a CVSS score of 9.4. If that high score wasn’t enough to make you run to patch your device, the flaw has reportedly been exploited as a zero-day in the wild since August 2023, and the e...
CVE Research
Apple Releases Critical Updates to Patch 3 Zero-Day Vulnerabilities Under Active Attack
Apple has swiftly issued crucial security updates in response to the exploitation of three fresh Zero-Day Vulnerabilities. The vulnerabilities are being used in targeted attacks against iPhone and Mac users. This brings the total count of Zero-Day Vulnerabilities resolved by Apple this year to 16.
