Posted inCISO Journey
The CISO Journey – Part 5
Start Thinking in Risk As you move closer to the CISO level, one capability becomes increasingly important: The ability to think in risk. Security professionals often look at problems through…
Posted inCISA KEV
CISA adds TrueConf and Zimbra and Oracle WebLogic to KEV
CISA has added multiple vulnerabilities affecting TrueConf Server, Zimbra Collaboration Suite and Oracle HTTP Server/WebLogic Server Proxy Plug-in to its Known Exploited Vulnerabilities (KEV) catalog. These entries are important because…
TheCyberThrone Universe – Episode 10
The Invisible Director “The most powerful person in a system isn’t always the person with access. Sometimes, it’s the person who decides how access works.” Previously in TheCyberThrone Universe The…
CVE-2026-69836: Critical RCE Vulnerability in Microsoft Entra ID
Microsoft has disclosed CVE-2026-69836, a critical remote-code-execution vulnerability affecting Microsoft Entra ID. The vulnerability is classified as CWE-502 — Deserialization of Untrusted Data. Microsoft describes the issue as allowing an…
Posted inCISSP
CISSP Executive Briefing: Security Decision Quality
When the Wrong Security Decision Is Worse Than No Decision Executive Reality Cybersecurity leadership involves making decisions every day. Patch now or wait. Accept the risk or remediate it. Replace…
Microsoft’s Cybersecurity Blueprint – Part 5: Security Adoption Framework
Security Modernization Is More Than Deploying Technology An organization can have excellent security products and still have a fragmented security program. Identity may be mature. Endpoint security may be strong.…
Posted inCISSP Podcasts
CISSP Domain 3 – Secure Design Principles
Listen to the Podcast Episode https://open.spotify.com/episode/4Tm8HSz2rE2iLmo4m9RL61?si=pRdNMsAkQWKoIM0CCG0CJw&utm_source=copy-link&sci=spotify%3Acard-config%3A2pqIBMfDxBa9gBEowuVSBf The Foundation of Secure Architecture Security architecture does not begin with a firewall, encryption algorithm, security product, or access-control mechanism. It begins with design.…
Critical NetScaler Security Update Patching Two Vulnerabilities
Cloud Software Group has released security updates for NetScaler ADC and NetScaler Gateway addressing two vulnerabilities, including a critical authentication-bypass flaw rated CVSS 9.3. The more serious issue, CVE-2026-19490, can…