PravinKarthik

CISSP Domain 2 – Privacy Roles – Data Controller vs Processor vs Subject

When personal data is involved, one question matters more than anything else: Who is responsible? Not who stores the data.Not who processes it. But who decides what happens to it.…

PravinKarthik April 18, 2026

McGraw Hill Data Breach — 13.5 Million Records Exposed

Educational publishing giant McGraw Hill has confirmed a significant data breach following an extortion attempt by the ShinyHunters threat group, resulting in the exposure of over 13.5 million user records.…

PravinKarthik April 17, 2026

NIST Limits NVD Enrichment to High-Priority CVEs

The Breaking Point The National Institute of Standards and Technology (NIST) has officially conceded what the security industry suspected for two years: the National Vulnerability Database's universal enrichment model is…

PravinKarthik April 17, 2026

Fortinet FortiSandbox — Critical Vulnerability Advisory

Fortinet published a sweeping security advisory on April 14, 2026, disclosing multiple vulnerabilities across its FortiSandbox platform. Two of the flaws are rated Critical with unauthenticated attack vectors, demanding immediate…

PravinKarthik April 16, 2026

Microsoft Patch Tuesday — April 2026

TheCyberThrone | Vulnerability Advisory | April 15, 2026 Volume & Scale — A Near-Record Release Microsoft patched 163 CVEs in the April 2026 Patch Tuesday release — the second largest…

PravinKarthik April 15, 2026

Beyond Detection: Engineering the AI Incident Response Control Plane

This Is Not an Incident Response Problem We built Incident Response for systems that fail deterministically. Something executes Something breaks Something is logged AI systems do none of this. They:…

PravinKarthik April 14, 2026

CISA Adds Seven Vulnerabilities to KEV Catalog — April 13, 2026

CISA has expanded the Known Exploited Vulnerabilities catalog with seven new entries on April 13, 2026, based on evidence of active exploitation. The batch spans three vendors — Microsoft, Adobe,…

PravinKarthik April 14, 2026

Booking.com Confirms Data Breach

On April 13, 2026, Booking.com confirmed that unauthorized third parties accessed customer booking information. The company began notifying affected users via email on Sunday evening, stating it had detected "suspicious…

PravinKarthik April 13, 2026