SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
Top Vulnerability Scanning Tools 2024
CVE Research
Top Vulnerability Scanning Tools 2024
According to statistics, a new cyberattack was detected every 39 seconds in 2023! With this rise in number of attacks, protecting sensitive data becomes crucial and challenging. To protect IT, vulnerability scanners are the lead at defense, actively identifying weaknesses within systems and networks
The Webm Zero-Days: All Over The Wild
CVE Research
The Webm Zero-Days: All Over The Wild
Webmproject, a popular media file format, has been experiencing hardships in security. Two of its libraries, libwebp and libvpx, have been found to contain zero-day vulnerabilities that affect multiple commonly used software products, such as Chrome, Edge, Tor, Telegram, and more! The two notorious
The Ultimate Vulnerability Assessment Checklist
CVE Research
The Ultimate Vulnerability Assessment Checklist
Vulnerability assessment is the process of identifying and assessing vulnerabilities. It makes up for a significant chunk of vulnerability management, and vulnerability management relies heavily on it. Without properly assessing vulnerabilities, your vulnerability management program might fail to me
SCAP Feed Release : 02-Dec-2017
CVE Research
SCAP Feed Release : 02-Dec-2017
The following SCAP content has been released to SCAP Repo and SecPod Saner Solution. SecPod Saner will automatically pull the relevant content on its next scheduled update. oval:org.secpod.oval:def:42845 CVE-2017-11293 Out-of-bounds read vulnerability in Adobe Acrobat and Reader products via unspeci
Patch Tuesday: Microsoft Security Bulletin Summary for September 2018
CVE Research
Patch Tuesday: Microsoft Security Bulletin Summary for September 2018
Today, Microsoft Patch Tuesday September 2018 has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This is done using a vulnerability scanning tool. This month’s advisory release addresses 62 new vulnerabilities, with 17
Patch Tuesday: Microsoft Security Bulletin Summary for September 2017
CVE Research
Patch Tuesday: Microsoft Security Bulletin Summary for September 2017
Microsoft Patch Tuesday September 2017 released total of 94 individual security updates addressing total of 84 CVE’s, in addition to the 2 vulnerabilities for Adobe Flash Player. However, a vulnerability management tool can help detect and remediate these vulnerabilities. Also, Among these, 27 are r
Patch Tuesday: Microsoft Security Bulletin Summary for September 2015
CVE Research
Patch Tuesday: Microsoft Security Bulletin Summary for September 2015
Microsoft Patch Tuesday September 2015 brings 12 security bulletins which address 55 CVE’s. Four are rated Critical and eight are Important. Detect these vulnerabilities with the help of a vulnerability management tool. 4 bulletins are rated as Critical , MS15-94 for Internet Explorer 7 (IE 7), Inte
Patch Tuesday: Microsoft Security Bulletin Summary for September 2014
CVE Research
Patch Tuesday: Microsoft Security Bulletin Summary for September 2014
Microsoft Patch Tuesday September 2014 was announced this month with Four Security Bulletins addressing a total of 42 vulnerabilities. The high priority fix is for Internet Explorer, which alone addresses 37 out of 42 vulnerabilities. One is rated as Critical, addressing 37 vulnerabilities and three
Patch Tuesday: Microsoft Security Bulletin Summary for October 2019
CVE Research
Patch Tuesday: Microsoft Security Bulletin Summary for October 2019
Microsoft Patch Tuesday October 2019 security updates today Remediating 60 common vulnerabilities and exposures (CVEs) in the family of Windows operating systems and related products. Out of these 9 are classified as “Critical“, and 51 as “Important”. A vulnerability management tool can mitigate the