SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
IoT Ransomware Attacks – Next Biggest Challenge For Cyber Warriors – Part 2
CVE Research
IoT Ransomware Attacks – Next Biggest Challenge For Cyber Warriors – Part 2
As stated in the IoT Ransomware Attacks – Part 1 IoT ransomware is not just holding your data hostage, it can lead to denial of service until the demanded ransom is payed to the hackers, which is quite a big market for hackers to see the money. There will be a greater threat for all […]
CVE-2023-44487: “HTTP/2 Rapid Reset” Flaw Results In Largest DDoS Attack
CVE Research
CVE-2023-44487: “HTTP/2 Rapid Reset” Flaw Results In Largest DDoS Attack
Until August 2023, the largest DDoS attack ever recorded sent 46 million requests per second (rps). This attack was mitigated by Google Cloud, which stated that its scale was comparable to receiving all the daily requests to Wikipedia at once. What could top that? A new vulnerability in HTTP/2 expos
CVE-2014-1776: Zero-Day vulnerability in Internet Explorer
CVE Research
CVE-2014-1776: Zero-Day vulnerability in Internet Explorer
A new zero-day vulnerability (CVE-2014-1776) in Internet Explorer is being used in targeted attacks, which was discovered by the security firm FireEye. Therefore, a good vulnerability management tool can prevent these attacks. A memory corruption vulnerability exists in Internet Explorer that can be
Apple Security Updates September 2019
CVE Research
Apple Security Updates September 2019
Apple has released a set of Apple Security Updates September 2019 to address the vulnerabilities in its products. There are a total of 5 CVEs. The affected products are MacOS, Safari, tvOS, iOS and WatchOS. CVE-2019-8641 is considered critical and is classified as out-of-bounds read (CWE-125), where
Apple Critical Security Updates May 2020
CVE Research
Apple Critical Security Updates May 2020
Apple Security Updates May 2020 released security updates for multiple products. A total of 59 vulnerabilities addressed. The exploitation of some of these security flaws could allow an attacker to take control of an affected system. However, a vulnerability management tool can stop the exploitation
Apple Security Updates July 2019
CVE Research
Apple Security Updates July 2019
Apple released a set of Apple security updates July 2019 to address vulnerabilities in its various products. About 49 vulnerabilities were identified and fixed by Apple in these security updates. Out of the 49, 44 CVEs were relevant to MacOS, while 23 CVEs were reported for iCloud, Safari, and iTune
Apple Security Updates January 2020
CVE Research
Apple Security Updates January 2020
Apple Security Updates January 2020 released security updates for multiple products today. A total of 46 vulnerabilities addressed. Exploitation of some of these security flaws could allow an attacker to take control of an affected system. A vulnerability management solution can stop the exploitatio
Apple Security Updates – January 2018
CVE Research
Apple Security Updates – January 2018
Image Source: www.digitaltrends.comApple released security updates this week, which affects macOS High Sierra, OS X El Capitan, iPhone, iPad, iPod, Apple TV and all Apple Watch models. These security updates addresses total of 17 vulnerabilities (CVE’s), Out of these 17 vulnerabilities 10 lead to ar
Apple Security Updates December 2019
CVE Research
Apple Security Updates December 2019
In the Apple Security Updates December 2019, Apple has rolled out security patches for various products. There are a total of 59 CVEs addressing arbitrary code execution, privilege escalation, information disclosure and denial of service vulnerabilities. Five vulnerabilities in macOS are considered