TheCyberThrone – Thinking Security ! Always

Japan’s Cybersecurity Emergency: Is a fact check or an over reaction

October 15, 2026

TheCyberThrone Top 5 Articles — August and September 2026

October 15, 2026

CISA Adds Microsoft, Ivanti, Cisco and Palo Alto Networks Vulnerabilities to KEV Catalog

October 15, 2026

Microsoft Patch Tuesday – October 2026

October 14, 2026

The CISO Journey – Part 10

October 13, 2026

CISM Executive Briefing 7: The Risk You Don’t Control

October 13, 2026

CVE-2026-97229: Critical GitLab Vulnerability Could Allow Remote Code Execution

October 12, 2026

CISM Domain 3 — Information Security Program Development and Management Detailed Notes

October 11, 2026

The Gentlemen Ransomware Dissection

October 10, 2026

CISSP Executive Briefing: The Digital Sovereignty Dilemma

October 9, 2026

Critical NetScaler RCE Vulnerability CVE-2026-107406

October 9, 2026

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

October 8, 2026

CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

October 7, 2026

Microsoft Releases Out-of-Band Exchange Security Update

October 6, 2026

CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

October 5, 2026

CISM Domain 2 — Information Risk Management and Compliance

October 4, 2026

The CISO Journey – Part 9

October 4, 2026

CVE-2026-90970: Critical GitLab AI Gateway Vulnerability

October 3, 2026

FortiMail Zero-Day Exploited in the Wild — CVE-2026-104286

October 2, 2026

CVE-2026-76504: Cisco SD-WAN Manager Zero-Day Exploited in Wild

October 1, 2026

How the Citrix NetScaler Zero-Days Are Actually Being Exploited

September 30, 2026

Apple CoreGraphics Zero-Day: CVE-2026-86950

September 29, 2026

Four More Vulnerabilities Enter CISA KEV

September 28, 2026

Citrix NetScaler Zero-Days Exploited in the Wild: CISA Adds Them to KEV

September 28, 2026

CISM Domain 1 — Information Security Governance Detailed Notes

September 27, 2026

Microsoft Cybersecurity Blueprint – Part 8: Zero Trust

September 26, 2026

When an AI Agent Crossed the Australian Security Boundary

September 26, 2026

CISA Moves the CVE Program Into a Quality Era

September 25, 2026

TheCyberThrone Universe – Episode 12

September 24, 2026

BigDiskBuster: Microsoft Defender Update DoS PoC

September 24, 2026

CISA adds Five Vulnerabilities to Exploitable Catalog

September 23, 2026

€403 Million GDPR Lesson: When Location Data Becomes a Governance Failure

September 22, 2026

CISM Executive Briefing 6 – Beyond the Dashboard

September 21, 2026

OpenAI Codex Sandbox Escape: When the AI Coding Agent Crossed the Security Boundary

September 21, 2026

CISSP Executive Briefing: The Price of Cyber Risk

September 20, 2026

Google Gemini breached three real companies during a cybersecurity test

September 20, 2026

CISM — The Complete Certification Overview

September 19, 2026

The CISO Journey – Part 8

September 19, 2026

CISA KEV Update: Three Linux Kernel Bugs, Acronis Backup and Google Pixel

September 19, 2026

CrowdStrike SafeMind: When AI Learns to Attack to Defend and Adapt

September 18, 2026

CCSP Executive Briefing – The Cloud Control Plane Is the Real Crown

September 17, 2026

Cisco ISE and Secure Email Gateway Enter the KEV Spotlight

September 17, 2026

CenterPoint Energy Data Breach

September 16, 2026

Oracle September 2026 Security Patch Tuesday

September 16, 2026

ENISA CRA Single Reporting Platform

September 15, 2026

CISA Insider Threat Mitigation – The Enemy Doesn’t Always Break In

September 14, 2026

From 6000 Questions to One Word: Congratulations

September 13, 2026

TheCyberThrone Universe – Episode 11

September 13, 2026

The Economics of Defence – When Secure Enough Is No Longer Enough

September 12, 2026

CISA adds Six Vulnerabilities in Two Days

September 12, 2026

My CISSP Journey Part 6 – Climax

September 12, 2026

CISM Executive Briefing 5 – When the Incident Happens

September 11, 2026

CISA KEV Update – 8 Vulnerabilities Added in Two Days

September 10, 2026

Microsoft’s Cybersecurity Blueprint – Part 7: Well-Architected Security

September 9, 2026

Microsoft Patch Tuesday — September 2026

September 9, 2026

The CISO Journey – Part 7

September 8, 2026

Rhysida Attack On Berlin

September 8, 2026

My CISSP Journey Part 5 – When CISSP Became Part of My Everyday Life

September 7, 2026

90% Compliant But Still Risk Exist – Rethinking Control Implementation

September 6, 2026

The Certification Trap : Why Passing the Exam Is Just a Beginning

September 5, 2026

VMware VM Escape: When the Guest Becomes the Path to the Host

September 5, 2026

Cloudflare VDR and the CVE Tsunami: The Race from Discovery to Remediation

September 4, 2026

CISSP Executive Briefing: The Efficiency Trap

September 3, 2026

CISA Adds 7 Vulnerabilities to KEV: A New Wave of Actively Exploited Flaws

September 3, 2026

The CISO Journey – Part 6

September 2, 2026

The CVE Tsunami: AI Can Find Them Faster. Can We Fix Them Faster?

September 2, 2026

Aesto Health Data Breach: 9.5 Million Individuals Impacted

September 1, 2026

My CISSP Journey Part 4 – What My Wrong Answers Taught Me

August 31, 2026

McKesson Data Breach 2026: What We Know So Far

August 31, 2026

CCSP Executive Briefing – Cloud Resilience Begins with Governance

August 30, 2026

Microsoft’s Cybersecurity Blueprint – Part 6: Microsoft Cloud Security Benchmark

August 30, 2026

CISM Executive Briefing – Beyond Security Controls

August 29, 2026

My CISSP Journey Part 3 – When Experience Becomes a Bias

August 29, 2026

ServiceNow fixes Three Perfect 10 Vulnerabilities

August 28, 2026

Next.js Patches Two Critical RCE Vulnerabilities: AVIF Processing and Windows Path Traversal

August 28, 2026

My CISSP Journey Part 2 – The Difference Between Knowing and Choosing

August 27, 2026

CISA Adds Six Actively Exploited Vulnerabilities to KEV on Aug 26 2026

August 27, 2026

My CISSP Journey – 6000 Questions Prepared Me but the Exam Tested Me Differently

August 26, 2026

The CISO Journey – Part 5

August 26, 2026

CISA adds TrueConf and Zimbra and Oracle WebLogic to KEV

August 25, 2026

TheCyberThrone Universe – Episode 10

August 24, 2026

CVE-2026-69836: Critical RCE Vulnerability in Microsoft Entra ID

August 24, 2026

CISSP Executive Briefing: Security Decision Quality

August 23, 2026

Microsoft’s Cybersecurity Blueprint – Part 5: Security Adoption Framework

August 22, 2026

CISSP Domain 3 – Secure Design Principles

August 22, 2026

Critical NetScaler Security Update Patching Two Vulnerabilities

August 21, 2026

CISA Adds Five Actively Exploited Vulnerabilities to KEV in Just Two Days

August 20, 2026

The CISO Journey – Part 4

August 19, 2026

GitLab 19.2.4: Critical GraphQL Vulnerability patched

August 19, 2026

CISSP and AI in 2026: What Actually Changed?

August 18, 2026

CISM Executive Briefing-Risk Register Is Not Risk Management

August 17, 2026

Microsoft’s Cybersecurity Blueprint – Part 4

August 16, 2026

CVE-2026-59310: Critical VMware vCenter Vulnerability

August 16, 2026

CCSP Executive Briefing – Governance Gap between Cloud Models

August 15, 2026

The CISO Journey – Part 3

August 14, 2026

ShieldBreak: Windows Defender Zero-Day

August 14, 2026

Adobe August 2026 Security Update- Three Perfect 10

August 13, 2026

CISA Adds Cisco ASA and Microsoft Windows WinSock Vulnerabilities to KEV

August 12, 2026

The CISO Journey-Part 2

August 12, 2026

Microsoft Patch Tuesday August 2026

August 12, 2026

Attack Surface Management

Japan’s Cybersecurity Emergency: Is a fact check or an over reaction

Japan's recent cybersecurity concerns have raised an important question: why has the situation attracted so much attention when data breaches and ransomware incidents are reported worldwide every day? The answer…

PravinKarthik October 15, 2026

CISA Adds Microsoft, Ivanti, Cisco and Palo Alto Networks Vulnerabilities to KEV Catalog

CISA has expanded its Known Exploited Vulnerabilities (KEV) catalog with four vulnerabilities affecting Microsoft Windows, Ivanti Connect Secure, Cisco Secure Email Gateway, and Palo Alto Networks PAN-OS. What makes these…

PravinKarthik October 15, 2026

Microsoft Patch Tuesday – October 2026

1,411 Vulnerabilities and Three Zero-Days An actively exploited Windows Shell flaw, publicly disclosed vulnerabilities and a record-breaking security release put enterprise patch management under pressure. 1. October’s Patch Tuesday Is…

PravinKarthik October 14, 2026

The CISO Journey – Part 10

Build a Team, Not a Dependency If your team cannot function without you, are you really leading the team—or have you become its biggest dependency? It is a question worth…

PravinKarthik October 13, 2026

CISM Executive Briefing 7: The Risk You Don’t Control

Third-Party Risk, Accountability and Enterprise Governance Modern organizations depend on external providers for cloud infrastructure, business applications, cybersecurity services, and essential operational capabilities. These relationships create business value, but they…

PravinKarthik October 13, 2026

Japan’s Cybersecurity Emergency: Is a fact check or an over reaction

Attack Surface Management

Japan’s Cybersecurity Emergency: Is a fact check or an over reaction

Japan's recent cybersecurity concerns have raised an important question: why has the situation attracted so much attention when data breaches and ransomware incidents are reported worldwide every day? The answer…

PravinKarthik October 15, 2026

CISA Adds Microsoft, Ivanti, Cisco and Palo Alto Networks Vulnerabilities to KEV Catalog

CISA Adds Microsoft, Ivanti, Cisco and Palo Alto Networks Vulnerabilities to KEV Catalog

CISA has expanded its Known Exploited Vulnerabilities (KEV) catalog with four vulnerabilities affecting Microsoft Windows, Ivanti Connect Secure, Cisco Secure Email Gateway, and Palo Alto Networks PAN-OS. What makes these…

PravinKarthik October 15, 2026

Microsoft Patch Tuesday – October 2026

Microsoft Patch Tuesday – October 2026

1,411 Vulnerabilities and Three Zero-Days An actively exploited Windows Shell flaw, publicly disclosed vulnerabilities and a record-breaking security release put enterprise patch management under pressure. 1. October’s Patch Tuesday Is…

PravinKarthik October 14, 2026

The CISO Journey – Part 10

The CISO Journey – Part 10

Build a Team, Not a Dependency If your team cannot function without you, are you really leading the team—or have you become its biggest dependency? It is a question worth…

PravinKarthik October 13, 2026

CISM Executive Briefing 7: The Risk You Don’t Control

CISM Executive Briefing 7: The Risk You Don’t Control

Third-Party Risk, Accountability and Enterprise Governance Modern organizations depend on external providers for cloud infrastructure, business applications, cybersecurity services, and essential operational capabilities. These relationships create business value, but they…

PravinKarthik October 13, 2026

CVE-2026-97229: Critical GitLab Vulnerability Could Allow Remote Code Execution

CVE-2026-97229: Critical GitLab Vulnerability Could Allow Remote Code Execution

GitLab has addressed CVE-2026-97229, a critical vulnerability in its CI/CD Regular Expression Compiler that could allow an unauthenticated attacker to execute arbitrary code on a vulnerable server. The vulnerability affects…

PravinKarthik October 12, 2026

CISM Domain 3 — Information Security Program Development and Management Detailed Notes

CISM Domain 3 — Information Security Program Development and Management Detailed Notes

Domain Weightage: 33% After completing my CISSP, I converted my handwritten notes into a digital format so they could help other aspirants beyond my own preparation. That experience inspired me…

PravinKarthik October 11, 2026