TheCyberThrone – Thinking Security ! Always

Oracle October 2026 Critical Patch Update: 1295 Patches Across Products

October 21, 2026

PHP Zero-Day Alert: Critical RCE Vulnerabilities Under Investigation

October 21, 2026

eMudhra Certificate Leak: Eight Intermediate CA Keys Compromised

October 21, 2026

Ahold Delhaize Cybersecurity Incident

October 20, 2026

Proofpoint to Acquire Varonis for $6.3 Billion

October 20, 2026

The Cloud Control Blueprint – Prioritizing Risk and Enforcing Guardrails Across Subscriptions

October 19, 2026

CCSP Executive Briefing 8 – Cloud Identity Is the New Security Perimeter

October 18, 2026

CISSP Curriculum Change 2027: What Aspirants Need to Know

October 18, 2026

Microsoft Cybersecurity Blueprint – Part 9: The Complete Blueprint

October 17, 2026

F5 Addresses Multiple NGINX Vulnerabilities in October Security Update

October 17, 2026

CVE-2026-102764: BeyondTrust Remote Support Vulnerability Exploited in the Wild

October 16, 2026

Drupal Fixes Critical Remote Code Execution Vulnerability

October 16, 2026

Japan’s Cybersecurity Emergency: Is a fact check or an over reaction

October 15, 2026

TheCyberThrone Top 5 Articles — August and September 2026

October 15, 2026

CISA Adds Microsoft, Ivanti, Cisco and Palo Alto Networks Vulnerabilities to KEV Catalog

October 15, 2026

Microsoft Patch Tuesday – October 2026

October 14, 2026

The CISO Journey – Part 10

October 13, 2026

CISM Executive Briefing 7: The Risk You Don’t Control

October 13, 2026

CVE-2026-97229: Critical GitLab Vulnerability Could Allow Remote Code Execution

October 12, 2026

CISM Domain 3 — Information Security Program Development and Management Detailed Notes

October 11, 2026

The Gentlemen Ransomware Dissection

October 10, 2026

CISSP Executive Briefing: The Digital Sovereignty Dilemma

October 9, 2026

Critical NetScaler RCE Vulnerability CVE-2026-107406

October 9, 2026

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

October 8, 2026

CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

October 7, 2026

Microsoft Releases Out-of-Band Exchange Security Update

October 6, 2026

CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

October 5, 2026

CISM Domain 2 — Information Risk Management and Compliance

October 4, 2026

The CISO Journey – Part 9

October 4, 2026

CVE-2026-90970: Critical GitLab AI Gateway Vulnerability

October 3, 2026

FortiMail Zero-Day Exploited in the Wild — CVE-2026-104286

October 2, 2026

CVE-2026-76504: Cisco SD-WAN Manager Zero-Day Exploited in Wild

October 1, 2026

How the Citrix NetScaler Zero-Days Are Actually Being Exploited

September 30, 2026

Apple CoreGraphics Zero-Day: CVE-2026-86950

September 29, 2026

Four More Vulnerabilities Enter CISA KEV

September 28, 2026

Citrix NetScaler Zero-Days Exploited in the Wild: CISA Adds Them to KEV

September 28, 2026

CISM Domain 1 — Information Security Governance Detailed Notes

September 27, 2026

Microsoft Cybersecurity Blueprint – Part 8: Zero Trust

September 26, 2026

When an AI Agent Crossed the Australian Security Boundary

September 26, 2026

CISA Moves the CVE Program Into a Quality Era

September 25, 2026

TheCyberThrone Universe – Episode 12

September 24, 2026

BigDiskBuster: Microsoft Defender Update DoS PoC

September 24, 2026

CISA adds Five Vulnerabilities to Exploitable Catalog

September 23, 2026

€403 Million GDPR Lesson: When Location Data Becomes a Governance Failure

September 22, 2026

CISM Executive Briefing 6 – Beyond the Dashboard

September 21, 2026

OpenAI Codex Sandbox Escape: When the AI Coding Agent Crossed the Security Boundary

September 21, 2026

CISSP Executive Briefing: The Price of Cyber Risk

September 20, 2026

Google Gemini breached three real companies during a cybersecurity test

September 20, 2026

CISM — The Complete Certification Overview

September 19, 2026

The CISO Journey – Part 8

September 19, 2026

CISA KEV Update: Three Linux Kernel Bugs, Acronis Backup and Google Pixel

September 19, 2026

CrowdStrike SafeMind: When AI Learns to Attack to Defend and Adapt

September 18, 2026

CCSP Executive Briefing – The Cloud Control Plane Is the Real Crown

September 17, 2026

Cisco ISE and Secure Email Gateway Enter the KEV Spotlight

September 17, 2026

CenterPoint Energy Data Breach

September 16, 2026

Oracle September 2026 Security Patch Tuesday

September 16, 2026

ENISA CRA Single Reporting Platform

September 15, 2026

CISA Insider Threat Mitigation – The Enemy Doesn’t Always Break In

September 14, 2026

From 6000 Questions to One Word: Congratulations

September 13, 2026

TheCyberThrone Universe – Episode 11

September 13, 2026

The Economics of Defence – When Secure Enough Is No Longer Enough

September 12, 2026

CISA adds Six Vulnerabilities in Two Days

September 12, 2026

My CISSP Journey Part 6 – Climax

September 12, 2026

CISM Executive Briefing 5 – When the Incident Happens

September 11, 2026

CISA KEV Update – 8 Vulnerabilities Added in Two Days

September 10, 2026

Microsoft’s Cybersecurity Blueprint – Part 7: Well-Architected Security

September 9, 2026

Microsoft Patch Tuesday — September 2026

September 9, 2026

The CISO Journey – Part 7

September 8, 2026

Rhysida Attack On Berlin

September 8, 2026

My CISSP Journey Part 5 – When CISSP Became Part of My Everyday Life

September 7, 2026

90% Compliant But Still Risk Exist – Rethinking Control Implementation

September 6, 2026

The Certification Trap : Why Passing the Exam Is Just a Beginning

September 5, 2026

VMware VM Escape: When the Guest Becomes the Path to the Host

September 5, 2026

Cloudflare VDR and the CVE Tsunami: The Race from Discovery to Remediation

September 4, 2026

CISSP Executive Briefing: The Efficiency Trap

September 3, 2026

CISA Adds 7 Vulnerabilities to KEV: A New Wave of Actively Exploited Flaws

September 3, 2026

The CISO Journey – Part 6

September 2, 2026

The CVE Tsunami: AI Can Find Them Faster. Can We Fix Them Faster?

September 2, 2026

Aesto Health Data Breach: 9.5 Million Individuals Impacted

September 1, 2026

My CISSP Journey Part 4 – What My Wrong Answers Taught Me

August 31, 2026

McKesson Data Breach 2026: What We Know So Far

August 31, 2026

CCSP Executive Briefing – Cloud Resilience Begins with Governance

August 30, 2026

Microsoft’s Cybersecurity Blueprint – Part 6: Microsoft Cloud Security Benchmark

August 30, 2026

CISM Executive Briefing – Beyond Security Controls

August 29, 2026

My CISSP Journey Part 3 – When Experience Becomes a Bias

August 29, 2026

ServiceNow fixes Three Perfect 10 Vulnerabilities

August 28, 2026

Next.js Patches Two Critical RCE Vulnerabilities: AVIF Processing and Windows Path Traversal

August 28, 2026

My CISSP Journey Part 2 – The Difference Between Knowing and Choosing

August 27, 2026

CISA Adds Six Actively Exploited Vulnerabilities to KEV on Aug 26 2026

August 27, 2026

My CISSP Journey – 6000 Questions Prepared Me but the Exam Tested Me Differently

August 26, 2026

The CISO Journey – Part 5

August 26, 2026

CISA adds TrueConf and Zimbra and Oracle WebLogic to KEV

August 25, 2026

TheCyberThrone Universe – Episode 10

August 24, 2026

CVE-2026-69836: Critical RCE Vulnerability in Microsoft Entra ID

August 24, 2026

CISSP Executive Briefing: Security Decision Quality

August 23, 2026

Microsoft’s Cybersecurity Blueprint – Part 5: Security Adoption Framework

August 22, 2026

CISSP Domain 3 – Secure Design Principles

August 22, 2026

Critical NetScaler Security Update Patching Two Vulnerabilities

August 21, 2026

CISA Adds Five Actively Exploited Vulnerabilities to KEV in Just Two Days

August 20, 2026

The CISO Journey – Part 4

August 19, 2026

Oracle October 2026 Critical Patch Update: 1295 Patches Across Products

Oracle released its October 2026 Critical Patch Update (CPU) on 20 October, delivering 1,295 new security patches across its enterprise product portfolio. The update covers Oracle Database Server, E-Business Suite,…

PravinKarthik October 21, 2026

PHP Zero-Day Alert: Critical RCE Vulnerabilities Under Investigation

Two critical PHP vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, have raised concerns about potential remote code execution (RCE) on vulnerable web servers. Both vulnerabilities have reportedly received CVSS v4.0 scores…

PravinKarthik October 21, 2026

eMudhra Certificate Leak: Eight Intermediate CA Keys Compromised

A certificate-security incident involving India's eMudhra came to light in October 2026 after eight intermediate Certificate Authority (CA) private keys were found to be recoverable. Mozilla received a report on…

PravinKarthik October 21, 2026

Ahold Delhaize Cybersecurity Incident

Ahold Delhaize, the international grocery retailer behind Albert Heijn, Delhaize, Food Lion and Stop & Shop, has been dealing with a cybersecurity incident since October 11, 2026. The company took…

PravinKarthik October 20, 2026

Proofpoint to Acquire Varonis for $6.3 Billion

The cybersecurity industry is increasingly focused on protecting not just users and devices, but also the sensitive information they can access. As organisations adopt AI assistants and autonomous agents, controlling…

PravinKarthik October 20, 2026

Oracle October 2026 Critical Patch Update: 1295 Patches Across Products

Oracle October 2026 Critical Patch Update: 1295 Patches Across Products

Oracle released its October 2026 Critical Patch Update (CPU) on 20 October, delivering 1,295 new security patches across its enterprise product portfolio. The update covers Oracle Database Server, E-Business Suite,…

PravinKarthik October 21, 2026

PHP Zero-Day Alert: Critical RCE Vulnerabilities Under Investigation

PHP Zero-Day Alert: Critical RCE Vulnerabilities Under Investigation

Two critical PHP vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, have raised concerns about potential remote code execution (RCE) on vulnerable web servers. Both vulnerabilities have reportedly received CVSS v4.0 scores…

PravinKarthik October 21, 2026

eMudhra Certificate Leak: Eight Intermediate CA Keys Compromised

eMudhra Certificate Leak: Eight Intermediate CA Keys Compromised

A certificate-security incident involving India's eMudhra came to light in October 2026 after eight intermediate Certificate Authority (CA) private keys were found to be recoverable. Mozilla received a report on…

PravinKarthik October 21, 2026

Ahold Delhaize Cybersecurity Incident

Ahold Delhaize Cybersecurity Incident

Ahold Delhaize, the international grocery retailer behind Albert Heijn, Delhaize, Food Lion and Stop & Shop, has been dealing with a cybersecurity incident since October 11, 2026. The company took…

PravinKarthik October 20, 2026

Proofpoint to Acquire Varonis for $6.3 Billion

Proofpoint to Acquire Varonis for $6.3 Billion

The cybersecurity industry is increasingly focused on protecting not just users and devices, but also the sensitive information they can access. As organisations adopt AI assistants and autonomous agents, controlling…

PravinKarthik October 20, 2026

CISSP Curriculum Change 2027: What Aspirants Need to Know

CISSP Curriculum Change 2027: What Aspirants Need to Know

The CISSP certification is evolving once again. ISC2 has published a revised CISSP Certification Exam Outline, effective April 15, 2027. The update revises the domain weightings, renames the first domain…

PravinKarthik October 18, 2026