Security Archives

Retbleed: Intel and AMD Processors Information Disclosure Vulnerability. Patch Now!

Post author:Arpit K
Post published:July 18, 2022
Post category:Featured Articles Patch Management Security Research and Intelligence Vulnerability Management
Reading time:4 mins read

A new Speculative execution attack is discovered that affects both Intel and AMD processors that can result in information disclosure…

Atlassian Confluence Server and Data Center Zero Day Vulnerability Under Active Exploitation. Patch Now!

Post author:Arpit K
Post published:June 6, 2022
Post category:Featured Articles Security Research and Intelligence Vulnerability Management
Reading time:5 mins read

An OGNL Injection Vulnerability was discovered in Atlassian Confluence Server and Data Center, and it is tracked with CVE-2022-26134. This Zero-Day vulnerability…

Follina: Microsoft Support Diagnostic Tool RCE Vulnerability Under Active Exploitation

Post author:Arpit K
Post published:June 1, 2022
Post category:Endpoint Security Featured Articles Patch Management Security Research and Intelligence Vulnerability Management
Reading time:7 mins read

A remote code execution vulnerability was discovered in MSDT (Microsoft Support Diagnostic Tool), and it is tracked with CVE-2022-30190. The vulnerability…

Critical Alert: Spring Core(SpringShell) Remote Code Execution Vulnerability Exploited In The Wild

Post author:Keshav R
Post published:April 5, 2022
Post category:Endpoint Security Endpoint Security and Management Security Research and Intelligence Vulnerability Management
Reading time:6 mins read

The Spring Framework is an application framework and inversion of the control container for the Java platform developed by VMware.…

Apple Has Addressed A Zero-Day Vulnerability Which Is Being Actively Exploited In The Wild

Post author:Keshav R
Post published:February 8, 2022
Post category:Endpoint Management Endpoint Security Endpoint Security and Management Featured Articles Security Research and Intelligence Vulnerability Management
Reading time:2 mins read

This year, Apple released security updates for their third zero-day vulnerability. The affected software processes maliciously crafted web content, leading…

Log4Shell-Critical Remote Code Execution Vulnerability in H2database Console

Post author:Keshav R
Post published:January 10, 2022
Post category:Endpoint Security and Management Featured Articles Security Research and Intelligence Vulnerability Management
Reading time:5 mins read

JFrog has recently disclosed a remote code execution vulnerability on H2 Database consoles. This is based on a Java Naming…

Intel Addresses 3 High Severity Vulnerabilities in BIOS of Several Processors

Post author:Keshav R
Post published:November 16, 2021
Post category:Category(Default) - Do Not Use This Computer Engineering Endpoint Security Featured Articles Patch Management Security Research and Intelligence Vulnerability Management
Reading time:4 mins read

Intel has recently disclosed a short advisory with details of high-severity for 3 CVEs here. They are CVE-2021-0157, CVE-2021-0158, and…

AgeLocker Ransomware Targeting QNAP NAS Devices

Post author:Vishesh S
Post published:September 30, 2020
Post category:Endpoint Security and Management SecPod News Updates Security Research and Intelligence
Reading time:3 mins read

AgeLocker Ransomware targeting QNAP network-attached storage (NAS) devices have been used by attackers to encrypt user data and demand a…

Cisco Read-Only Path Traversal Vulnerability (CVE-2020-3452)

Post author:Vishesh S
Post published:July 28, 2020
Post category:Security Research and Intelligence
Reading time:5 mins read

Cisco has released a Security Advisory for the actively exploited worldwide CVE-2020-3452. Cisco Read-Only Path Traversal Vulnerability in the web services…