SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Faster Delivery of Vulnerability Scanning for Security Platforms
Vulnerability detection is becoming a baseline expectation in security product evaluations. Buyers want tools that go beyond runtime signals to identify known software flaws across managed systems. They ask how exposures are linked to assets, how often the data is updated, and whether those results ...
CVE Research
Remote Code Execution Risks Found in VMware ESXi and Workstation
Broadcom has recently addressed multiple critical vulnerabilities affecting VMware ESXi, Workstation, Fusion, and Tools. These vulnerabilities could allow attackers to execute malicious code on host systems, potentially leading to complete system compromise. The vulnerabilities, CVE-2025-41236, CVE-...
CVE Research
Turn Your Employees into Your Strongest Cyber Defense
Cyber threats and attacks are always on the go. While business and enterprises invest heavily in firewall, endpoint protection, and vulnerability management tools, one critical security layer often gets overlooked, employees. Your employees can be your biggest cybersecurity weakness or your stronges...
CVE Research
Google Chrome Zero-day Vulnerability Actively Exploited in the Wild
Google has urgently released a security update for its Chrome browser to address a zero-day vulnerability, CVE-2025-6558, which is currently being exploited in the wild. This update also includes patches for two additional high-severity flaws CVE-2025-7656 and CVE-2025-7657 making immediate action e...
CVE Research
3 Sales Triggers to Pitch Vulnerability Management to Your Customers
Crafting a compelling pitch around vulnerability management starts with knowing exactly when your customers are most receptive. As a partner alliance manager for MSPs, your role is to spot those moments and guide prospects to recognize how proactive risk reduction pays off in the form of lowered inc...
CVE Research
Token Based SQLi in FortiWeb: Users Urged to Patch this Critical Flaw
A critical security vulnerability, CVE-2025-25257, has been discovered in FortiWeb web application firewalls, potentially allowing unauthenticated attackers to execute unauthorized SQL commands. This vulnerability, classified as CWE-89 (Improper Neutralization of Special Elements used in an SQL Comm...
CVE Research
Scaling AI Too Fast: The Cybersecurity Blind Spots No One Talks About
Scaling AI across enterprises is moving faster than most security teams can adapt. IBM’s 2025 X-Force Threat Intelligence Index reported an 84% rise in phishing emails delivering infostealers in 2024, often powered by generative AI to mimic human behavior and scale attacks.
CVE Research
Buffer Busted: FortiOS Users Urged to Patch Buffer Overflow Vulnerability
Fortinet disclosed a critical security vulnerability in its FortiOS operating system, which is CVE-2025-24477. The flaw is classified as CWE-122, a heap-based buffer overflow, and affects the cw_stad daemon, a core component responsible for wireless station management. This vulnerability enables exp...
CVE Research
Wing FTP Under Siege: Critical Vulnerability Actively Exploited
A critical vulnerability, CVE-2025-47812, in Wing FTP Server is under active exploitation, allowing unauthenticated remote code execution with root or SYSTEM privileges. This flaw has a CVSS score of 10.0, marking it highly severe.