November 2025 – Page 3 – TheCyberThrone

CISSP Executive Briefing Enterprise Risk Management

Introduction: Risk Is No Longer a Technical Problem — It Is a Business Reality Modern organisations operate in an age where cybersecurity is inseparable from business performance, regulatory reputation, and…

PravinKarthik November 16, 2025

Critical Fortinet FortiWeb Vulnerability CVE-2025-64446

On November 14, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) officially added CVE-2025-64446 to its Known Exploited Vulnerabilities (KEV) catalog. This critical vulnerability affects Fortinet FortiWeb web application firewall…

PravinKarthik November 15, 2025

Kraken and Zorab: New Menaces in the 2025 Ransomware Landscape

The evolving cyber threat landscape of 2025 has brought to light two ransomware actors that demand the attention of security professionals and organizations worldwide: Kraken ransomware and Zorab ransomware. These…

PravinKarthik November 14, 2025

Operation Endgame: Striking a Major Blow to Global Cybercrime

Between November 10 and 14, 2025, a landmark international law enforcement operation known as Operation Endgame delivered a significant strike against major cybercrime infrastructure worldwide. Coordinated by Europol and Eurojust…

PravinKarthik November 13, 2025

CISA KEV Catalog Update November 2025

The following vulnerabilities were recently added to the CISA Known Exploited Vulnerabilities (KEV) catalog and involve WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox products: WatchGuard Firebox CVE-2025-9242: Out-of-Bounds Write VulnerabilityThis…

PravinKarthik November 13, 2025

Microsoft Patch Tuesday November 2025

November 11, 2025 marked another important Patch Tuesday from Microsoft, releasing security updates that address 63 vulnerabilities impacting a wide range of Microsoft products. This month’s updates are particularly crucial…

PravinKarthik November 12, 2025

Understanding the OWASP Top 10 for 2025

The Open Web Application Security Project (OWASP) has updated its essential list of the most critical web application security risks with its 2025 edition. This new list reflects how the…

PravinKarthik November 11, 2025