TheCyberThrone

CISM Executive Briefing – Beyond Security Controls

Building a Security Capability That Can Actually Protect the Business The Executive Perspective Walk into almost any reasonably mature organization and ask a simple question: "What security controls do you…

PravinKarthik August 29, 2026

Certification Guide CISSP

My CISSP Journey Part 3 – When Experience Becomes a Bias

There was another thing I realised during my CISSP preparation that I didn't expect. My experience, which I initially considered one of my biggest advantages, could sometimes become a disadvantage.…

PravinKarthik August 29, 2026

ServiceNow fixes Three Perfect 10 Vulnerabilities

ServiceNow has patched four security vulnerabilities affecting its AI Platform and Now Platform. Three of them received the maximum CVSS v4.0 score of 10.0. The three most serious flaws are…

PravinKarthik August 28, 2026

Next.js Patches Two Critical RCE Vulnerabilities: AVIF Processing and Windows Path Traversal

Next.js has released security updates for two critical vulnerabilities that can lead to unauthenticated remote code execution. The two vulnerabilities are separate and affect different deployment scenarios. One involves AVIF…

PravinKarthik August 28, 2026

Certification Guide CISSP

My CISSP Journey Part 2 – The Difference Between Knowing and Choosing

While preparing for CISSP, I became quite comfortable with questions. I worked through almost 6,000 practice questions. Over time, that volume gave me confidence. I started recognising patterns, understanding what…

PravinKarthik August 27, 2026

CISA KEV

CISA Adds Six Actively Exploited Vulnerabilities to KEV on Aug 26 2026

On August 26, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation. The list is…

PravinKarthik August 27, 2026

Certification Guide CISSP

My CISSP Journey – 6000 Questions Prepared Me but the Exam Tested Me Differently

I walked into my CISSP exam with confidence. Not overconfidence, but the confidence that comes after putting in serious preparation. I had worked through nearly 6,000 practice questions. Those questions…

PravinKarthik August 26, 2026

CISO Journey

The CISO Journey – Part 5

Start Thinking in Risk As you move closer to the CISO level, one capability becomes increasingly important: The ability to think in risk. Security professionals often look at problems through…

PravinKarthik August 26, 2026