TheCyberThrone – Thinking Security ! Always

The Gentlemen Ransomware Dissection

October 10, 2026

CISSP Executive Briefing: The Digital Sovereignty Dilemma

October 9, 2026

Critical NetScaler RCE Vulnerability CVE-2026-107406

October 9, 2026

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

October 8, 2026

CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

October 7, 2026

Microsoft Releases Out-of-Band Exchange Security Update

October 6, 2026

CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

October 5, 2026

CISM Domain 2 — Information Risk Management and Compliance

October 4, 2026

The CISO Journey – Part 9

October 4, 2026

CVE-2026-90970: Critical GitLab AI Gateway Vulnerability

October 3, 2026

FortiMail Zero-Day Exploited in the Wild — CVE-2026-104286

October 2, 2026

CVE-2026-76504: Cisco SD-WAN Manager Zero-Day Exploited in Wild

October 1, 2026

How the Citrix NetScaler Zero-Days Are Actually Being Exploited

September 30, 2026

Apple CoreGraphics Zero-Day: CVE-2026-86950

September 29, 2026

Four More Vulnerabilities Enter CISA KEV

September 28, 2026

Citrix NetScaler Zero-Days Exploited in the Wild: CISA Adds Them to KEV

September 28, 2026

CISM Domain 1 — Information Security Governance Detailed Notes

September 27, 2026

Microsoft Cybersecurity Blueprint – Part 8: Zero Trust

September 26, 2026

When an AI Agent Crossed the Australian Security Boundary

September 26, 2026

CISA Moves the CVE Program Into a Quality Era

September 25, 2026

TheCyberThrone Universe – Episode 12

September 24, 2026

BigDiskBuster: Microsoft Defender Update DoS PoC

September 24, 2026

CISA adds Five Vulnerabilities to Exploitable Catalog

September 23, 2026

€403 Million GDPR Lesson: When Location Data Becomes a Governance Failure

September 22, 2026

CISM Executive Briefing 6 – Beyond the Dashboard

September 21, 2026

OpenAI Codex Sandbox Escape: When the AI Coding Agent Crossed the Security Boundary

September 21, 2026

CISSP Executive Briefing: The Price of Cyber Risk

September 20, 2026

Google Gemini breached three real companies during a cybersecurity test

September 20, 2026

CISM — The Complete Certification Overview

September 19, 2026

The CISO Journey – Part 8

September 19, 2026

CISA KEV Update: Three Linux Kernel Bugs, Acronis Backup and Google Pixel

September 19, 2026

CrowdStrike SafeMind: When AI Learns to Attack to Defend and Adapt

September 18, 2026

CCSP Executive Briefing – The Cloud Control Plane Is the Real Crown

September 17, 2026

Cisco ISE and Secure Email Gateway Enter the KEV Spotlight

September 17, 2026

CenterPoint Energy Data Breach

September 16, 2026

Oracle September 2026 Security Patch Tuesday

September 16, 2026

ENISA CRA Single Reporting Platform

September 15, 2026

CISA Insider Threat Mitigation – The Enemy Doesn’t Always Break In

September 14, 2026

From 6000 Questions to One Word: Congratulations

September 13, 2026

TheCyberThrone Universe – Episode 11

September 13, 2026

The Economics of Defence – When Secure Enough Is No Longer Enough

September 12, 2026

CISA adds Six Vulnerabilities in Two Days

September 12, 2026

My CISSP Journey Part 6 – Climax

September 12, 2026

CISM Executive Briefing 5 – When the Incident Happens

September 11, 2026

CISA KEV Update – 8 Vulnerabilities Added in Two Days

September 10, 2026

Microsoft’s Cybersecurity Blueprint – Part 7: Well-Architected Security

September 9, 2026

Microsoft Patch Tuesday — September 2026

September 9, 2026

The CISO Journey – Part 7

September 8, 2026

Rhysida Attack On Berlin

September 8, 2026

My CISSP Journey Part 5 – When CISSP Became Part of My Everyday Life

September 7, 2026

90% Compliant But Still Risk Exist – Rethinking Control Implementation

September 6, 2026

The Certification Trap : Why Passing the Exam Is Just a Beginning

September 5, 2026

VMware VM Escape: When the Guest Becomes the Path to the Host

September 5, 2026

Cloudflare VDR and the CVE Tsunami: The Race from Discovery to Remediation

September 4, 2026

CISSP Executive Briefing: The Efficiency Trap

September 3, 2026

CISA Adds 7 Vulnerabilities to KEV: A New Wave of Actively Exploited Flaws

September 3, 2026

The CISO Journey – Part 6

September 2, 2026

The CVE Tsunami: AI Can Find Them Faster. Can We Fix Them Faster?

September 2, 2026

Aesto Health Data Breach: 9.5 Million Individuals Impacted

September 1, 2026

My CISSP Journey Part 4 – What My Wrong Answers Taught Me

August 31, 2026

McKesson Data Breach 2026: What We Know So Far

August 31, 2026

CCSP Executive Briefing – Cloud Resilience Begins with Governance

August 30, 2026

Microsoft’s Cybersecurity Blueprint – Part 6: Microsoft Cloud Security Benchmark

August 30, 2026

CISM Executive Briefing – Beyond Security Controls

August 29, 2026

My CISSP Journey Part 3 – When Experience Becomes a Bias

August 29, 2026

ServiceNow fixes Three Perfect 10 Vulnerabilities

August 28, 2026

Next.js Patches Two Critical RCE Vulnerabilities: AVIF Processing and Windows Path Traversal

August 28, 2026

My CISSP Journey Part 2 – The Difference Between Knowing and Choosing

August 27, 2026

CISA Adds Six Actively Exploited Vulnerabilities to KEV on Aug 26 2026

August 27, 2026

My CISSP Journey – 6000 Questions Prepared Me but the Exam Tested Me Differently

August 26, 2026

The CISO Journey – Part 5

August 26, 2026

CISA adds TrueConf and Zimbra and Oracle WebLogic to KEV

August 25, 2026

TheCyberThrone Universe – Episode 10

August 24, 2026

CVE-2026-69836: Critical RCE Vulnerability in Microsoft Entra ID

August 24, 2026

CISSP Executive Briefing: Security Decision Quality

August 23, 2026

Microsoft’s Cybersecurity Blueprint – Part 5: Security Adoption Framework

August 22, 2026

CISSP Domain 3 – Secure Design Principles

August 22, 2026

Critical NetScaler Security Update Patching Two Vulnerabilities

August 21, 2026

CISA Adds Five Actively Exploited Vulnerabilities to KEV in Just Two Days

August 20, 2026

The CISO Journey – Part 4

August 19, 2026

GitLab 19.2.4: Critical GraphQL Vulnerability patched

August 19, 2026

CISSP and AI in 2026: What Actually Changed?

August 18, 2026

CISM Executive Briefing-Risk Register Is Not Risk Management

August 17, 2026

Microsoft’s Cybersecurity Blueprint – Part 4

August 16, 2026

CVE-2026-59310: Critical VMware vCenter Vulnerability

August 16, 2026

CCSP Executive Briefing – Governance Gap between Cloud Models

August 15, 2026

The CISO Journey – Part 3

August 14, 2026

ShieldBreak: Windows Defender Zero-Day

August 14, 2026

Adobe August 2026 Security Update- Three Perfect 10

August 13, 2026

CISA Adds Cisco ASA and Microsoft Windows WinSock Vulnerabilities to KEV

August 12, 2026

The CISO Journey-Part 2

August 12, 2026

Microsoft Patch Tuesday August 2026

August 12, 2026

StormEncryptor Ransomware Dissection

August 11, 2026

The CISO Journey

August 10, 2026

Microsoft’s Cybersecurity Blueprint – Part 3: Microsoft Cybersecurity Reference Architecture

August 10, 2026

TheCyberThrone CyberSecurity Newsletter Top 5 Articles – July 2026

August 10, 2026

CISSP Executive Briefing: Risk Blindness

August 10, 2026

Cisco IOS XE Security Hardening Release

August 9, 2026

CISM Executive Briefing: Security Strategy Must Begin With Business Strategy

August 8, 2026

TheCyberThrone Universe – Episode 9

August 7, 2026

The Gentlemen Ransomware Dissection

Ransomware attacks are no longer limited to encrypting files and demanding payment. Modern operations combine data theft, security-tool disruption and network-wide propagation to increase pressure on victims. The Gentlemen is…

PravinKarthik October 10, 2026

CISSP Executive Briefing: The Digital Sovereignty Dilemma

Executive Summary Digital sovereignty is an organisation’s ability to retain meaningful control over the technology, data and digital services its business depends on. As platforms, providers and geopolitical conditions change,…

PravinKarthik October 9, 2026

Critical NetScaler RCE Vulnerability CVE-2026-107406

Executive Summary Citrix has disclosed CVE-2026-107406, a critical memory overflow vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway under specific SAML authentication configurations. The vulnerability carries a CVSS v4.0 score…

PravinKarthik October 9, 2026

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

A new critical vulnerability in SonicWall SMA1000 appliances deserves immediate attention from organizations using the platform as an internet-facing remote-access gateway. Tracked as CVE-2026-102255, the vulnerability is a pre-authentication Server-Side…

PravinKarthik October 8, 2026

CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

Executive Summary Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting multiple Atlassian Data Center products. The vulnerability carries a CVSS v4.0 score of 9.3 (Critical) and can…

PravinKarthik October 7, 2026

Microsoft Releases Out-of-Band Exchange Security Update

Executive Summary Microsoft has released an out-of-band security update for Exchange Server to address CVE-2026-96940, an Elevation of Privilege vulnerability that could allow an authenticated attacker to access email and…

PravinKarthik October 6, 2026

The Gentlemen Ransomware Dissection

The Gentlemen Ransomware Dissection

Ransomware attacks are no longer limited to encrypting files and demanding payment. Modern operations combine data theft, security-tool disruption and network-wide propagation to increase pressure on victims. The Gentlemen is…

PravinKarthik October 10, 2026

CISSP Executive Briefing: The Digital Sovereignty Dilemma

CISSP Executive Briefing: The Digital Sovereignty Dilemma

Executive Summary Digital sovereignty is an organisation’s ability to retain meaningful control over the technology, data and digital services its business depends on. As platforms, providers and geopolitical conditions change,…

PravinKarthik October 9, 2026

Critical NetScaler RCE Vulnerability CVE-2026-107406

Critical NetScaler RCE Vulnerability CVE-2026-107406

Executive Summary Citrix has disclosed CVE-2026-107406, a critical memory overflow vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway under specific SAML authentication configurations. The vulnerability carries a CVSS v4.0 score…

PravinKarthik October 9, 2026

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

A new critical vulnerability in SonicWall SMA1000 appliances deserves immediate attention from organizations using the platform as an internet-facing remote-access gateway. Tracked as CVE-2026-102255, the vulnerability is a pre-authentication Server-Side…

PravinKarthik October 8, 2026

CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

Executive Summary Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting multiple Atlassian Data Center products. The vulnerability carries a CVSS v4.0 score of 9.3 (Critical) and can…

PravinKarthik October 7, 2026

Microsoft Releases Out-of-Band Exchange Security Update

Microsoft Releases Out-of-Band Exchange Security Update

Executive Summary Microsoft has released an out-of-band security update for Exchange Server to address CVE-2026-96940, an Elevation of Privilege vulnerability that could allow an authenticated attacker to access email and…

PravinKarthik October 6, 2026

CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

A new Citrix NetScaler zero-day has moved quickly from discovery to active exploitation. CVE-2026-88779 affects NetScaler ADC and NetScaler Gateway deployments using SAML authentication and can cause the appliance to…

PravinKarthik October 5, 2026

CISM Domain 2 — Information Risk Management and Compliance

CISM Domain 2 — Information Risk Management and Compliance

Domain Weightage: 20% After completing my CISSP, I converted my handwritten notes into a digital version because I wanted them to be more than just personal study material. Over time,…

PravinKarthik October 4, 2026