SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Closing the Ever-Widening Gap Between Vulnerability Scanning and Patch Management
Security risk management is a complicated and time-consuming affair. Organizations spend many resources to ensure all their business operations and data are running and stored by risk-free assets. Patch management tools are the most common tools to manage and mitigate risks. You scan, detect and reg...
CVE Research
CVE-2014-1761: Zero-day vulnerability in Microsoft Word
A zero-day vulnerability (CVE-2014-1761) in Microsoft Word is being exploited in the wild, which was discovered by the Google security team. A good vulnerability management software can prevent these attacks.
CVE Research
SanerNow Automated Patch Management Process: Speed-up Patching Cycle!
Being an IT security admin feels like you are the “Mr. Fix-It” of your organization. But we know that IT security admins are so much more than that. Vulnerabilities emerge daily, and spending your time and attention on this recurring task is not the best use of your time. You can better serve to put...
CVE Research
Chrome Zero-Day Under Active Exploitation – Patch Now
We all know the popularity and extensive audience of the Google Chrome browser, which can be used on Windows, Mac, or Linux computers and Android devices. To those currently using the same and who have not yet deployed the patch, it’s time to update their Chrome browsers to the latest version, 86.0....
CVE Research
Critical Vulnerabilities in Palo Alto Networks PAN-OS devices
Palo Alto Network (PAN) has recently fixed a critical vulnerability related to the PAN-OS operating systems. The operating systems are known to power Palo Alto’s next-generation firewall. The vulnerability is tracked as CVE-2020-2021 with a CVSSv3 base score of 10. PAN-OS is the custom operating sys...
CVE Research
Beware : Microsoft Warns of Active Attacks on Windows Using Unpatched Zero-Days
Microsoft and its updates are of utmost interest to the security community during the second Tuesday of every month, the Patch Tuesday. However, Microsoft has filled the headlines of the fourth Tuesday too with important information about two critical unpatched zero-days in Microsoft Windows operati...
CVE Research
Unpatched Zero-Day Vulnerabilities Put IBM Data Risk Manager At Risk
A security researcher recently uncovered four vulnerabilities in IBM Data Risk Manager and publicly disclosed them following a refusal from the tech giant to act on the same. These Zero-Day vulnerabilities, which have not been assigned any CVEs yet, comprise 3 critical and 1 high severity bugs.