Skip to content

TheCyberThrone

Thinking Security ! Always

  • Latest Story
  • AI
  • Application Security
  • Cloud Security
    • AWS Security
    • Azure Security
    • Google Security
  • Container Security
  • Data Breaches
  • Email Security
  • Mobile Security
  • Security Acquisition
  • ZeroDay
  • Certification Guide
    • Cloud Certifications
    • Network Certifications
    • Security Certifications
  • Security NewsLetter
  • About Author
  • facebook.com
  • twitter.com
  • t.me
  • instagram.com
  • youtube.com
Subscribe
Top Stories
CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000
October 8, 2026
CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access
October 7, 2026
Microsoft Releases Out-of-Band Exchange Security Update
October 6, 2026
CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild
October 5, 2026
CISM Domain 2 — Information Risk Management and Compliance
October 4, 2026
The CISO Journey – Part 9
October 4, 2026
CVE-2026-90970: Critical GitLab AI Gateway Vulnerability
October 3, 2026
FortiMail Zero-Day Exploited in the Wild — CVE-2026-104286
October 2, 2026
CVE-2026-76504: Cisco SD-WAN Manager Zero-Day Exploited in Wild
October 1, 2026
How the Citrix NetScaler Zero-Days Are Actually Being Exploited
September 30, 2026
Apple CoreGraphics Zero-Day: CVE-2026-86950
September 29, 2026
Four More Vulnerabilities Enter CISA KEV
September 28, 2026
Citrix NetScaler Zero-Days Exploited in the Wild: CISA Adds Them to KEV
September 28, 2026
CISM Domain 1 — Information Security Governance Detailed Notes
September 27, 2026
Microsoft Cybersecurity Blueprint – Part 8: Zero Trust
September 26, 2026
When an AI Agent Crossed the Australian Security Boundary
September 26, 2026
CISA Moves the CVE Program Into a Quality Era
September 25, 2026
TheCyberThrone Universe – Episode 12
September 24, 2026
BigDiskBuster: Microsoft Defender Update DoS PoC
September 24, 2026
CISA adds Five Vulnerabilities to Exploitable Catalog
September 23, 2026
€403 Million GDPR Lesson: When Location Data Becomes a Governance Failure
September 22, 2026
CISM Executive Briefing 6 – Beyond the Dashboard
September 21, 2026
OpenAI Codex Sandbox Escape: When the AI Coding Agent Crossed the Security Boundary
September 21, 2026
CISSP Executive Briefing: The Price of Cyber Risk
September 20, 2026
Google Gemini breached three real companies during a cybersecurity test
September 20, 2026
CISM — The Complete Certification Overview
September 19, 2026
The CISO Journey – Part 8
September 19, 2026
CISA KEV Update: Three Linux Kernel Bugs, Acronis Backup and Google Pixel
September 19, 2026
CrowdStrike SafeMind: When AI Learns to Attack to Defend and Adapt
September 18, 2026
CCSP Executive Briefing – The Cloud Control Plane Is the Real Crown
September 17, 2026
Cisco ISE and Secure Email Gateway Enter the KEV Spotlight
September 17, 2026
CenterPoint Energy Data Breach
September 16, 2026
Oracle September 2026 Security Patch Tuesday
September 16, 2026
ENISA CRA Single Reporting Platform
September 15, 2026
CISA Insider Threat Mitigation – The Enemy Doesn’t Always Break In
September 14, 2026
From 6000 Questions to One Word: Congratulations
September 13, 2026
TheCyberThrone Universe – Episode 11
September 13, 2026
The Economics of Defence – When Secure Enough Is No Longer Enough
September 12, 2026
CISA adds Six Vulnerabilities in Two Days
September 12, 2026
My CISSP Journey Part 6 – Climax
September 12, 2026
CISM Executive Briefing 5 – When the Incident Happens
September 11, 2026
CISA KEV Update – 8 Vulnerabilities Added in Two Days
September 10, 2026
Microsoft’s Cybersecurity Blueprint – Part 7: Well-Architected Security
September 9, 2026
Microsoft Patch Tuesday — September 2026
September 9, 2026
The CISO Journey – Part 7
September 8, 2026
Rhysida Attack On Berlin
September 8, 2026
My CISSP Journey Part 5 – When CISSP Became Part of My Everyday Life
September 7, 2026
90% Compliant But Still Risk Exist – Rethinking Control Implementation
September 6, 2026
The Certification Trap : Why Passing the Exam Is Just a Beginning
September 5, 2026
VMware VM Escape: When the Guest Becomes the Path to the Host
September 5, 2026
Cloudflare VDR and the CVE Tsunami: The Race from Discovery to Remediation
September 4, 2026
CISSP Executive Briefing: The Efficiency Trap
September 3, 2026
CISA Adds 7 Vulnerabilities to KEV: A New Wave of Actively Exploited Flaws
September 3, 2026
The CISO Journey – Part 6
September 2, 2026
The CVE Tsunami: AI Can Find Them Faster. Can We Fix Them Faster?
September 2, 2026
Aesto Health Data Breach: 9.5 Million Individuals Impacted
September 1, 2026
My CISSP Journey Part 4 – What My Wrong Answers Taught Me
August 31, 2026
McKesson Data Breach 2026: What We Know So Far
August 31, 2026
CCSP Executive Briefing – Cloud Resilience Begins with Governance
August 30, 2026
Microsoft’s Cybersecurity Blueprint – Part 6: Microsoft Cloud Security Benchmark
August 30, 2026
CISM Executive Briefing – Beyond Security Controls
August 29, 2026
My CISSP Journey Part 3 – When Experience Becomes a Bias
August 29, 2026
ServiceNow fixes Three Perfect 10 Vulnerabilities
August 28, 2026
Next.js Patches Two Critical RCE Vulnerabilities: AVIF Processing and Windows Path Traversal
August 28, 2026
My CISSP Journey Part 2 – The Difference Between Knowing and Choosing
August 27, 2026
CISA Adds Six Actively Exploited Vulnerabilities to KEV on Aug 26 2026
August 27, 2026
My CISSP Journey – 6000 Questions Prepared Me but the Exam Tested Me Differently
August 26, 2026
The CISO Journey – Part 5
August 26, 2026
CISA adds TrueConf and Zimbra and Oracle WebLogic to KEV
August 25, 2026
TheCyberThrone Universe – Episode 10
August 24, 2026
CVE-2026-69836: Critical RCE Vulnerability in Microsoft Entra ID
August 24, 2026
CISSP Executive Briefing: Security Decision Quality
August 23, 2026
Microsoft’s Cybersecurity Blueprint – Part 5: Security Adoption Framework
August 22, 2026
CISSP Domain 3 – Secure Design Principles
August 22, 2026
Critical NetScaler Security Update Patching Two Vulnerabilities
August 21, 2026
CISA Adds Five Actively Exploited Vulnerabilities to KEV in Just Two Days
August 20, 2026
The CISO Journey – Part 4
August 19, 2026
GitLab 19.2.4: Critical GraphQL Vulnerability patched
August 19, 2026
CISSP and AI in 2026: What Actually Changed?
August 18, 2026
CISM Executive Briefing-Risk Register Is Not Risk Management
August 17, 2026
Microsoft’s Cybersecurity Blueprint – Part 4
August 16, 2026
CVE-2026-59310: Critical VMware vCenter Vulnerability
August 16, 2026
CCSP Executive Briefing – Governance Gap between Cloud Models
August 15, 2026
The CISO Journey – Part 3
August 14, 2026
ShieldBreak: Windows Defender Zero-Day
August 14, 2026
Adobe August 2026 Security Update- Three Perfect 10
August 13, 2026
CISA Adds Cisco ASA and Microsoft Windows WinSock Vulnerabilities to KEV
August 12, 2026
The CISO Journey-Part 2
August 12, 2026
Microsoft Patch Tuesday August 2026
August 12, 2026
StormEncryptor Ransomware Dissection
August 11, 2026
The CISO Journey
August 10, 2026
Microsoft’s Cybersecurity Blueprint – Part 3: Microsoft Cybersecurity Reference Architecture
August 10, 2026
TheCyberThrone CyberSecurity Newsletter Top 5 Articles – July 2026
August 10, 2026
CISSP Executive Briefing: Risk Blindness
August 10, 2026
Cisco IOS XE Security Hardening Release
August 9, 2026
CISM Executive Briefing: Security Strategy Must Begin With Business Strategy
August 8, 2026
TheCyberThrone Universe – Episode 9
August 7, 2026
CISA Adds Four Vulnerabilities to KEV Catalog Aug 6 2026
August 6, 2026
Amgen Data Breach Insights
August 5, 2026
Microsoft’s Cybersecurity Blueprint – Part II
August 4, 2026

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

A new critical vulnerability in SonicWall SMA1000 appliances deserves immediate attention from organizations using the platform as an internet-facing remote-access gateway. Tracked as CVE-2026-102255, the vulnerability is a pre-authentication Server-Side…
Continue Reading
Posted by PravinKarthik October 8, 2026

CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

Executive Summary Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting multiple Atlassian Data Center products. The vulnerability carries a CVSS v4.0 score of 9.3 (Critical) and can…
Continue Reading
Posted by PravinKarthik October 7, 2026

Microsoft Releases Out-of-Band Exchange Security Update

Executive Summary Microsoft has released an out-of-band security update for Exchange Server to address CVE-2026-96940, an Elevation of Privilege vulnerability that could allow an authenticated attacker to access email and…
Continue Reading
Posted by PravinKarthik October 6, 2026

CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

A new Citrix NetScaler zero-day has moved quickly from discovery to active exploitation. CVE-2026-88779 affects NetScaler ADC and NetScaler Gateway deployments using SAML authentication and can cause the appliance to…
Continue Reading
Posted by PravinKarthik October 5, 2026
Posted inCISM

CISM Domain 2 — Information Risk Management and Compliance

Domain Weightage: 20% After completing my CISSP, I converted my handwritten notes into a digital version because I wanted them to be more than just personal study material. Over time,…
Continue Reading
Posted by PravinKarthik October 4, 2026
Posted inCISO Journey

The CISO Journey – Part 9

Learn to Communicate at the Executive Level You can have the right strategy. You can have the right metrics. You can understand the risks. But if you cannot communicate them…
Continue Reading
Posted by PravinKarthik October 4, 2026
CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

A new critical vulnerability in SonicWall SMA1000 appliances deserves immediate attention from organizations using the platform as an internet-facing remote-access gateway. Tracked as CVE-2026-102255, the vulnerability is a pre-authentication Server-Side…
Posted by PravinKarthik October 8, 2026
CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access

Executive Summary Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting multiple Atlassian Data Center products. The vulnerability carries a CVSS v4.0 score of 9.3 (Critical) and can…
Posted by PravinKarthik October 7, 2026
Microsoft Releases Out-of-Band Exchange Security Update

Microsoft Releases Out-of-Band Exchange Security Update

Executive Summary Microsoft has released an out-of-band security update for Exchange Server to address CVE-2026-96940, an Elevation of Privilege vulnerability that could allow an authenticated attacker to access email and…
Posted by PravinKarthik October 6, 2026
CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

CVE-2026-88779: NetScaler SAML Zero-Day Exploited in the Wild

A new Citrix NetScaler zero-day has moved quickly from discovery to active exploitation. CVE-2026-88779 affects NetScaler ADC and NetScaler Gateway deployments using SAML authentication and can cause the appliance to…
Posted by PravinKarthik October 5, 2026
CISM Domain 2 — Information Risk Management and Compliance
Posted inCISM

CISM Domain 2 — Information Risk Management and Compliance

Domain Weightage: 20% After completing my CISSP, I converted my handwritten notes into a digital version because I wanted them to be more than just personal study material. Over time,…
Posted by PravinKarthik October 4, 2026
The CISO Journey – Part 9
Posted inCISO Journey

The CISO Journey – Part 9

Learn to Communicate at the Executive Level You can have the right strategy. You can have the right metrics. You can understand the risks. But if you cannot communicate them…
Posted by PravinKarthik October 4, 2026
CVE-2026-90970: Critical GitLab AI Gateway Vulnerability

CVE-2026-90970: Critical GitLab AI Gateway Vulnerability

AI infrastructure is quickly becoming part of the enterprise attack surface, and CVE-2026-90970 is a good example of why. The vulnerability affects GitLab AI Gateway and carries a CVSS score…
Posted by PravinKarthik October 3, 2026
FortiMail Zero-Day Exploited in the Wild — CVE-2026-104286

FortiMail Zero-Day Exploited in the Wild — CVE-2026-104286

Executive Summary Fortinet has confirmed active exploitation of a critical FortiMail zero-day, CVE-2026-104286. The vulnerability carries a CVSS score of 9.8 and can allow an unauthenticated attacker to write arbitrary…
Posted by PravinKarthik October 2, 2026

Posts pagination

1 2 3 … 744 Next page
Trending post
  • CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000
    CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000
  • CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access
    CVE-2026-21589: Critical Atlassian Flaw Enables Unauthenticated File Access
  • Microsoft Releases Out-of-Band Exchange Security Update
    Microsoft Releases Out-of-Band Exchange Security Update
  • ZeroFox Partners Mandiant
    ZeroFox Partners Mandiant
  • PHILIPS VUE Pacs Critical Flaw
    PHILIPS VUE Pacs Critical Flaw
  • Four More Vulnerabilities Enter CISA KEV
    Four More Vulnerabilities Enter CISA KEV
Archives

Click to Subscribe

Follow Us

  • Facebook
  • Twitter
  • Instagram
Copyright 2026 — TheCyberThrone. All rights reserved. Bloghash WordPress Theme
Scroll to Top