SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Google Releases Emergency Patch For New Actively Exploited Chrome Zero-Day
Google has recently released an out-of-band security patch to address a high-severity zero-day vulnerability in its Chrome browser. This vulnerability, tracked as CVE-2025-5419, is actively being exploited in the wild, posing a significant risk to Chrome users. The vulnerability is an out-of-bounds ...
CVE Research
CISA Issues Warning on Active Exploitation of TP-Link Vulnerability CVE-2023-33538
The Cybersecurity and Infrastructure Security Agency (CISA) has recently added CVE-2023-33538, a high-severity vulnerability affecting certain TP-Link wireless routers, to its Known Exploited Vulnerabilities (KEV) catalog. This critical flaw is under active exploitation, prompting immediate action f...
CVE Research
What Does Your Security Posture Talk About Your Security?
In March 2024, a major US-based healthcare provider fell victim to a ransomware attack that compromised the personal data of over 2 million patients. The entry point? An unpatched vulnerability in an outdated system that had been flagged months prior but never resolved.
CVE Research
Cisco Warns of Hardcoded Root SSH Credentials in Unified CM
A critical security vulnerability has been discovered in Cisco Unified Communications Manager (Unified CM), presenting a serious threat to organizations running impacted versions. Tracked as CVE-2025-20309 and carrying a maximum CVSS score of 10.0, the issue arises from hardcoded root credentials. T...
CVE Research
What is Exposure Management?
Every organization today depends on a wide range of digital assets, such as laptops, servers, cloud instances, and applications. These assets make business possible, but they also open doors to potential risks. If not managed properly, these risks become security exposures: opportunities for attacke...
CVE Research
Swiper, No Swiping! Mozilla Patches Two Firefox Zero Days
Mozilla released emergency Firefox patches to combat two critical zero days discovered during the hacking contest Pwn2own. CVE-2025-4918, credited to Edouard Bochin and Tao Yan from Palo Alto Networks, and CVE-2025-4919, credited to Manfred Paul, could potentially be exploited to access sensitive da...
CVE Research
Integrating Security and ITSM: SecPod x ServiceNow
In today’s hybrid, hyper-connected IT landscape, the speed at which vulnerabilities are discovered and exploited has never been faster. Security teams are flooded with new threats, while IT teams are tasked with maintaining uptime, delivering services, and ensuring compliance.
Veeam Patches CVE-2025-23121: Critical RCE Bug in Backup & Replication
CVE Research
Veeam Patches CVE-2025-23121: Critical RCE Bug in Backup & Replication
Veeam, a prominent data backup and disaster recovery solution provider, has recently addressed a critical security vulnerability in its Backup and Replication software. The flaw, CVE-2025-23121, poses a significant risk as it could allow remote code execution (RCE) on affected systems. With a near-m...