TheCyberThrone

FortiMail Zero-Day Exploited in the Wild — CVE-2026-104286

Executive Summary Fortinet has confirmed active exploitation of a critical FortiMail zero-day, CVE-2026-104286. The vulnerability carries a CVSS score of 9.8 and can allow an unauthenticated attacker to write arbitrary…

PravinKarthik October 2, 2026

CVE-2026-76504: Cisco SD-WAN Manager Zero-Day Exploited in Wild

Executive Summary Cisco Catalyst SD-WAN Manager is dealing with a serious zero-day that is already being exploited in the wild. Tracked as CVE-2026-76504, the flaw allows an unauthenticated attacker to…

PravinKarthik October 1, 2026

How the Citrix NetScaler Zero-Days Are Actually Being Exploited

The story around the Citrix NetScaler zero-days has become much clearer over the last few days. Initially, we knew that CVE-2026-88771 and CVE-2026-88772 were being exploited in the wild. Now,…

PravinKarthik September 30, 2026

Apple CoreGraphics Zero-Day: CVE-2026-86950

Apple has released security updates to address a newly disclosed CoreGraphics vulnerability, CVE-2026-86950. The vulnerability is an out-of-bounds write that can potentially lead to arbitrary code execution when a maliciously…

PravinKarthik September 29, 2026

CISA KEV

Four More Vulnerabilities Enter CISA KEV

CISA has added four vulnerabilities affecting WSO2, Adobe Commerce, Microsoft SharePoint and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) Catalog. The common factor is simple: these vulnerabilities are associated…

PravinKarthik September 28, 2026

Citrix NetScaler Zero-Days Exploited in the Wild: CISA Adds Them to KEV

Executive Summary Citrix has confirmed that two NetScaler ADC and NetScaler Gateway zero-day vulnerabilities — CVE-2026-88771 and CVE-2026-88772 — are being exploited in the wild. Both are rated CVSS 9.5,…

PravinKarthik September 28, 2026

CISM

CISM Domain 1 — Information Security Governance Detailed Notes

Domain Weightage: 17% Flagship Digital Notes | Easy Reference | Natural Human-Language Revision After completing my CISSP, I went back to something very personal to me — my handwritten notes.…

PravinKarthik September 27, 2026

Microsoft Cybersecurity Blueprint – Part 8: Zero Trust

The Principle Behind the Blueprint We have covered a lot so far. We started with the cloud foundation. We moved into security adoption. Then came security architecture. We looked at…

PravinKarthik September 26, 2026