SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
53 Vulnerabilities (2 Critical) Fixed in Microsoft’s January 2024 Patch Tuesday
The second week of the new year has arrived, and with it comes 2024’s first Microsoft Patch Tuesday. This time around, Microsoft has fixed 53 vulnerabilities, including 2 critical ones (CVE-2024-20674 and CVE-2024-20700). Perhaps as a new year’s gift to patch writers, there have been no zero days re...
CVE Research
Terrapin Alert (CVE-2023-48795): Safeguarding Against the Latest SSH Vulnerability
In a recent revelation, a new vulnerability named Terrapin (CVE-2023-48795) has been identified in the Secure Shell (SSH) cryptographic network protocol. This vulnerability poses a serious threat to the integrity of SSH connections, impacting both clients and servers.
CVE Research
Google Fixes Chrome’s Sixth Zero-day Vulnerability in 2023
In response to ongoing attacks exploiting a security vulnerability, Google released a security patch on 28th November, effectively addressing the sixth zero-day flaw in the Chrome browser this year. The company has officially acknowledged the existence of an exploit for the identified security flaw,...
CVE Research
Proactive Vulnerability Mitigation: Staying Ahead of Cyber Threats
Companies are taking proactive steps to address vulnerabilities before their security team find and resolve them. While this approach is necessary and effective to a certain extent, it carries the risk of delayed responses, leaving systems exposed to potential threats. According to Check Point Rese...
CVE Research
VMware Products Under Active Attack Through a Critical Zero-Day Vulnerability
VMware has released security updates to fix a critical vulnerability that is being exploited in the wild. According to the advisory, CVE-2020-4006 is a command injection bug, and attackers can take control of the system once exploited. This fix supersedes an initial workaround released by VMware in ...
CVE Research
Zoom Zero-Day Critical Vulnerability Allows RCE
A critical zero-day vulnerability has been found in Zoom – A video conferencing software, for Windows 7 or below. The vulnerability allows an attacker to execute remote code on the victim’s system without triggering any security warning. To successfully exploit this vulnerability, the attacker trick...
SCAP Feed Release – Part 2 : 13-Apr-2017