PravinKarthik

My CISSP Journey Part 2 – The Difference Between Knowing and Choosing

While preparing for CISSP, I became quite comfortable with questions. I worked through almost 6,000 practice questions. Over time, that volume gave me confidence. I started recognising patterns, understanding what…

PravinKarthik August 27, 2026

CISA KEV

CISA Adds Six Actively Exploited Vulnerabilities to KEV on Aug 26 2026

On August 26, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation. The list is…

PravinKarthik August 27, 2026

Certification Guide CISSP

My CISSP Journey – 6000 Questions Prepared Me but the Exam Tested Me Differently

I walked into my CISSP exam with confidence. Not overconfidence, but the confidence that comes after putting in serious preparation. I had worked through nearly 6,000 practice questions. Those questions…

PravinKarthik August 26, 2026

CISO Journey

The CISO Journey – Part 5

Start Thinking in Risk As you move closer to the CISO level, one capability becomes increasingly important: The ability to think in risk. Security professionals often look at problems through…

PravinKarthik August 26, 2026

CISA KEV

CISA adds TrueConf and Zimbra and Oracle WebLogic to KEV

CISA has added multiple vulnerabilities affecting TrueConf Server, Zimbra Collaboration Suite and Oracle HTTP Server/WebLogic Server Proxy Plug-in to its Known Exploited Vulnerabilities (KEV) catalog. These entries are important because…

PravinKarthik August 25, 2026

TheCyberThrone Universe – Episode 10

The Invisible Director “The most powerful person in a system isn’t always the person with access. Sometimes, it’s the person who decides how access works.” Previously in TheCyberThrone Universe The…

PravinKarthik August 24, 2026

CVE-2026-69836: Critical RCE Vulnerability in Microsoft Entra ID

Microsoft has disclosed CVE-2026-69836, a critical remote-code-execution vulnerability affecting Microsoft Entra ID. The vulnerability is classified as CWE-502 — Deserialization of Untrusted Data. Microsoft describes the issue as allowing an…

PravinKarthik August 24, 2026

CISSP

CISSP Executive Briefing: Security Decision Quality

When the Wrong Security Decision Is Worse Than No Decision Executive Reality Cybersecurity leadership involves making decisions every day. Patch now or wait. Accept the risk or remediate it. Replace…

PravinKarthik August 23, 2026