SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Unveiling Order from Chaos: Device Tagging’s Role in Streamlining Vulnerability Management
The sophistication of cyber-attacks isn’t waning. The rise in ransomware attacks is sound proof of that. Instead, it adds to the security agony of every organization across geography.
CVE Research
OpenSSL Addresses Two High Severity Vulnerabilities. Patch Now!
On October 25, 2022, the OpenSSL team issued a major flaw alert to users. OpenSSL 3.0.7 was released on November 1, 2022, to fix two serious vulnerabilities, CVE-2022-3786 and CVE-2022-3602. These flaws initially given a critical rating before being lowered to high. OpenSSL is a widely used cryptogr...
CVE Research
Risk Prioritization Strategies for Rapid Attack Surface Reduction
How many vulnerabilities do you have in your IT infrastructure right now? The odds are that the number could be thousands or even 10s of thousands and always rising too! And with software vendors releasing updates to their software almost daily, there’s always a constant chance for potential risk in...
CVE Research
Critical Security Updates: Cisco, Fortinet, and VMware Address Vulnerabilities
In today’s digital age, cybersecurity remains a paramount concern for businesses worldwide. As cyber threats evolve in complexity and sophistication, organizations must stay vigilant and proactive in securing their systems and data. Recently, leading technology companies Cisco, Fortinet, and VMware ...
CVE Research
The February 2024 Microsoft Patch Tuesday Addresses 73 Vulnerabilities, Including 2 zero-day exploits
Microsoft’s latest security updates for Patch Tuesday in February 2024 address a total of 73 vulnerabilities. Among these, five are classified as critical, including two zero-day vulnerabilities (CVE-2024-21351 and CVE-2024-21412), with thirty vulnerabilities linked to remote code execution. The uti...
CVE Research
True Prevention: Preventing Cyberattacks the Real Way
What have you been doing for cyberattack prevention? Listing IT assets and assessing vulnerabilities alone? In the modern scenario of increasingly complex networks and evolving cyber threats, assessing vulnerabilities alone with traditional vulnerability management tools is just not enough.
CVE Research
New-Age Cyber Hygiene Responsibilities Of Vulnerability Management Security Team Post-Pandemic
In today’s Information-rich era, data security is a top concern for organizations. As per the study, cyber-attacks are launched 2,244 times daily, i.e., every 39 seconds. An organization’s vulnerability management security team plays the most vital role in protecting sensitive data against informati...