SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Microsoft February 2022 Patch Tuesday Addresses 57 Vulnerabilities Including a Zero-Day.
Microsoft has released February Patch Tuesday security updates with a total of 57 detected Vulnerabilities, including zero-day and 0 critical rated vulnerabilities, using a vulnerability management tool. Hence the products covered in the Microsoft February 2022 patch Tuesday security update include ...
CVE Research
Why Is It Important To Prioritize Vulnerabilities Beyond CVSS?
We all know the importance of vulnerability management in cyber-security. The pace with which the vulnerabilities are rising and their patches overwhelmed enterprises to deal with every loophole. Hence, enterprises tend to focus on flaws with high severity from CVSS.
CVE Research
Understanding Stake-holder Specific Vulnerability Categorization (SSVC) for Risk Prioritization
Risk Prioritization is not a new technology in the cyber security space. Cybersecurity professionals look for products that can integrate with existing vulnerability assessment reports to help prioritize risks, most often just software vulnerabilities. Primitive modus operandi such as Prioritization...
CVE Research
Vulnerability Management Controls for Critical Security Frameworks
The most common security framework policies, like HIPAA, PCI, NIST, etc., talk about vulnerability management controls, which are a set of recommended safeguards that help mitigate risks and prevent cyber-attacks in your network.
CVE Research
Zoho Patches Critical Zero-day Flaw in its ADSelfService plus Exploited in The Wild
Zoho Patches Critical Zero-day Flaw in ADSelfService to patch a remote code execution (RCE) vulnerability existing in Zoho ADSelfService plus. The vulnerability allows the execution of unauthenticated remote arbitrary code on the affected systems. A vulnerability management solution can remediate th...
CVE Research
The Most Notorious Security Risks Tagging Along from 2020
2020 has been a disaster for many organizations: multiple data breaches, ransomware attacks, and internal threats. After 2020, IT as a department and a role have changed for the good. Leaders are more receptive to the opinions and initiatives of CIO/CISO/IT Head roles. Every IT professional now give...
CVE Research
Patch Tuesday: Microsoft Security Bulletin Summary for April 2021
Microsoft Security Bulletin April 2021 has released Patch Tuesday, security updates with a total of 108 vulnerabilities in the family of Windows operating systems and related products. In the release by Microsoft, 19 were rated as Critical and 89 as Important. Six Chromium Edge vulnerabilities relea...
CVE Research
Why IT Security Experts Should Consider Continuous and Automated Vulnerability Remediation
The impact of the pandemic has brought a multitude of security challenges for the IT security team and chief information security officers. One of the main challenges includes remediation of security flaws in a complex IT network and patch vulnerabilities using a patch management tool whenever neces...
