SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Severe Dell Data Lakehouse Security Bug Enables Remote Privilege Escalation
A critical vulnerability, tracked as CVE-2025-46608, has been disclosed in the Dell Data Lakehouse platform, enabling remote attackers to escalate privileges within affected environments. Successful exploitation could allow adversaries to gain elevated access and compromise both data and system inte...
CVE Research
Beyond CVSS: Using MITRE ATT&CK for smarter prioritization
Cloud teams face more findings than available hours. The gap is not detection, it is deciding what deserves action now. A decision-first approach ranks cloud risks using clear outcome levels that turn scattered alerts into a plan shared by operators and leadership. Saner Cloud Security Risk Prioriti...
CVE Research
Microsoft Tackles 6 Zero-Days and 172 Fixes in October 2025 Patch Tuesday
The second Tuesday of the month has arrived, and so has another major round of Microsoft security updates. For October 2025, Microsoft has released fixes for a total of 172 vulnerabilities, including 6 actively exploited zero-day flaws and 8 rated as Critical in severity.
CVE Research
SAP November Patch Roundup: Critical Flaws Demand Immediate Action
SAP has recently rolled out its November security updates, aiming to resolve a spectrum of vulnerabilities across its enterprise software suite. These updates address critical issues, emphasizing the need for organizations to promptly review and apply the necessary patches to safeguard their SAP env...
CVE Research
Pre-Auth and Persistent: How a Sophisticated APT Targeted Cisco ISE and Citrix Gateways
Amazon’s security teams have made a critical discovery, revealing a sophisticated Advanced Persistent Threat (APT) campaign actively exploiting zero-day vulnerabilities in two widely deployed enterprise solutions: Cisco Identity Service Engine (ISE) and Citrix NetScaler ADC/Gateway products. This fi...
CVE Research
Watch Your Cloud Hygiene Evolve: Trend Analysis in Saner Cloud CHS
Cloud environments are dynamic!New resources are spun up in seconds, configurations change constantly, and threats evolve even faster. In such a complex landscape, cloud security hygiene isn’t a one-time check, but a continuous journey. To help organizations track this journey, Saner Cloud introduce...
CVE Research
RelayState Ruse: Exploiting Reflected XSS in Citrix NetScaler
In the realm of cybersecurity, it’s not uncommon to stumble upon vulnerabilities while dissecting a system during the pursuit of reproducing an N-day. Security researchers at watchTowr Labs recently encountered such a scenario while analyzing CitrixBleed2 (CVE?2025?5777), which affected Citrix NetSc...
CVE Research
Active Campaign Against Triofox: How Attackers Bypassed Setup and Gained SYSTEM Execution
A cyber-espionage group, identified as UNC6485, is actively exploiting a critical vulnerability in Gladinet’s Triofox file-sharing platform. This campaign aims to gain initial network access, steal data, and establish long-term persistence. Attackers are bypassing authentication to create administra...