SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
How do you set up your Microsoft Office Patching for Continuous Update Mode?
With every passing day, every vendor seems to release many patches to their software application to fix vulnerabilities. But with so many patches and apps, it becomes cumbersome to keep them all up-to-date manually. Additionally, not patching apps poses a security risk to your organization too. Micr...
CVE Research
Microsoft Exchange Servers Actively Under Exploitation Via ProxyShell Vulnerabilities
Microsoft Exchange Servers are actively exploited in the wild by various threat actors. Attackers are looking for vulnerable instances of Microsoft Exchange Servers and exploiting them via ProxyShell vulnerabilities. ProxyShell is the name given to the set of three vulnerabilities existing in Micros...
CVE Research
SaltStack Salt Critical Vulnerabilities Under Active Exploitation
SaltStack Salt is a very popular open-source remote task and configuration management framework widely used in data centers and cloud environments. Two critical security flaws have been discovered by a vulnerability management tool. In Salt that can allow an attacker to execute arbitrary commands as...
CVE Research
How Effectively are you Handling Hidden Vulnerabilities?
Addressing vulnerabilities and fixing them is easier said than done. What notion do you get when you hear about vulnerability management? All a vulnerability management system does is scan, discover, and remediate vulnerabilities. Only the security teams know how winding and bumpy the road is betwee...
CVE Research
Linux Kernel Vulnerabilities That Could Threaten Your Linux Security
When securing your Linux environment, you cannot miss the Linux Kernel. It forms the foundation of your Linux operating system and is the core interface between computer hardware and its processes. Linux Kernel is also loved and actively used by IT communities across the globe. Unlike the other oper...
CVE Research
The Journey of Vision: Breaking Barriers, Defying Odds; SecPod’s 15 Years
Fifteen years – a testament to perseverance and resilience for SecPods Journey. In the growth story of any company, this is no small feat. A long and arduous journey becomes inevitable when you choose to swim against the tide, challenge preconceived notions, and fight against mediocrity.
CVE Research
Cisco Releases Security Updates for Multiple Products
Cisco has released security updates for multiple products to address critical, high, and medium severity vulnerabilities for twelve different Cisco products. Advisories released for Cisco Policy Suite and Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) are...