SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Why Prevention-First Security Is the Only Solution to Ransomware
In 2025, ransomware escalated from a disruptive nuisance to a global economic crisis. Cybersecurity Ventures projects that ransomware damages will reach $57 billion this year, translating to $156 million per day or $109,000 per minute. Reactive cybersecurity tools fail to contain this scale of damag...
CVE Research
Microsoft Patches 57 Flaws, 7 Zero Days in March 2025 Patch Tuesday
Microsoft’s March 2025 Patch Tuesday has arrived, delivering new security updates and enhancements. This month’s release addresses 57 vulnerabilities, including seven that are classified as zero-day vulnerabilities. Additionally, six “Critical” vulnerabilities involving remote code execution have al...
CVE Research
Oracle Releases Critical Security Updates January 2025 – Patch Now!
Oracle has released its Critical Patch Update (CPU) for January 2025, addressing 318 new security patches across various product families, including Oracle Database Server, Oracle MySQL, Oracle Communications, Oracle E-Business Suite, Oracle Fusion Middleware, and more. This update mitigates vulnera...
CVE Research
VMware Fixes Critical Bugs that Can Be Chained Together to Gain RCE
VMware, the virtualization giant, has released two advisories addressing three critical vulnerabilities in multiple products. VMSA-2021-0004 advisory fixes CVE-2021-21975, CVE-2021-21983 can be chained together to gain remote code execution (RCE) on the affected system. The other, VMSA-2021-0005 adv...
CVE Research
Error in lang: Erlang Users Urged to Patch Critical Security Flaw
A critical security flaw, tracked as CVE-2025-32433 and rated with a CVSS score of 10.0, has been found in the SSH implementation of the Erlang/Open Telecom Platform (OTP). This vulnerability could allow an unauthenticated attacker to run arbitrary code, but only under specific conditions.
CVE Research
Combating Inactive, Guest Users & Anonymous logins with SanerNow
Inactive and guest users in your network are more dangerous than you think. Accounts left alone unused for a long time, and guest users created for one-off logins are high-priority targets for cyber-attackers who exploit these accounts to get inside your network.
CVE Research
Introducing A Fresh Perspective to Cybersecurity: Continuous Vulnerability and Exposure Management!
IT landscape is expanding and getting more complex day by day. With the growing number of cyberattacks and changing working norms, organizations are in a critical situation to protect what they have built and save themselves from the eyes of the attackers. Achieving IT security is not an easy proces...
CVE Research
Vulnerability Counts from 1M to Zero in 3 weeks: Enterprise IT Security Team’s Dream Come True
While interacting with Enterprise IT Security Teams, I have come to notice that most enterprises have huge vulnerability backlogs. Thousands of unattended vulnerabilities stall the Month-on-Month progress for the IT Security teams. Primary reason for such backlogs is the disjointed approach to vulne...
CVE Research
Is Vulnerability Mitigation Just Patching? Or Patching and Beyond
The biggest reason for cyberattacks has been vulnerabilities. However, the trend has slowly changed, with threat actors using different methods and security risks to enter your network. Research suggests that 31% of cyberattacks were due to security risks such as misconfigurations, posture anomalies...