SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Adobe Security Updates for November 2016
Adobe has released one critical security update for Adobe Flash Player (APSB16-37) and one security update for Adobe Connect (APSB16-35). The security updates for Adobe Flash Player resolve critical vulnerabilities that allow attackers to execute arbitrary code and take control of the affected syste...
CVE Research
Patch Tuesday: Microsoft Security Bulletin Summary For September 2016
Microsoft Microsoft Patch Tuesday September 2016 brings 14 Security Bulletins addressing a total of 50 vulnerabilities. Seven Security Bulletins are rated as Critical and Seven are rated as Important. A vulnerability management solution can help deal with these vulnerabilities.
CVE Research
Adobe Security Updates for September 2016
Adobe has released three security updates for Adobe AIR SDK & Compiler (APSB16-31), Adobe Flash Player (APSB16-29), and Adobe Digital Editions (APSB16-28) which covers a total of 35 CVEs . The security update resolves a critical vulnerability for Adobe Flash Player and for AIR it resolves a remote s...
Google discloses zero-day Vulnerability in Windows kernel
CVE Research
Google discloses zero-day Vulnerability in Windows kernel
Google discloses a Windows zero-day vulnerability in the Windows kernel. That is currently in exploitation in the wild by Black Hats. This was disclosing after Microsoft failed to release a patch within the 7-day deadline. Also, a reliable vulnerability management tool can prevent these issues.
CVE Research
ESXiArgs Ransomware Actively Targeting Vulnerable Unpatched VMware ESXi Servers. Patch Now!
A new ESXiArgs ransomware is actively targeting VMware ESXi servers that are unpatched against a two-year-old remote code execution vulnerability known as CVE-2021-21974. The vulnerability originates from a heap overflow problem within the OpenSLP service, leaving it open to exploitation by attacker...
CVE Research
5 Stages of Vulnerability Management Maturity Model: Know How Mature is your Model!
In today’s rapidly evolving threat landscape, organizations face a constant barrage of vulnerabilities that can potentially expose their systems to cyber threats. To effectively address this challenge, a vulnerability management maturity model becomes essential. And a good vulnerability management t...
CVE Research
Microsoft January 2023 Patch Tuesday Addresses 98 Vulnerabilities Including a Zero-Day!
Microsoft has released January 2023 Patch Tuesday security updates, addressing 98 vulnerabilities. Also, 11 are classified as critical as they allow the most severe types of vulnerabilities like privilege elevation, security feature bypass, or remote code execution, and 87 are classified as importan...
CVE Research
Retbleed: Intel and AMD Processors Information Disclosure Vulnerability. Patch Now!
Researchers have discovered a new Speculative execution attack called Retbleed, which affects both Intel and AMD processors that can result in information disclosure vulnerability. CVE-2022-29900 (AMD) is the tracking identifier for AMD, while CVE-2022-29901 (Intel) is the tracking identifier for In...