TheCyberThrone Universe – Episode 10
The Invisible Director “The most powerful person in a system isn’t always the person with access. Sometimes, it’s the person who decides how access works.” Previously in TheCyberThrone Universe The…
CVE-2026-69836: Critical RCE Vulnerability in Microsoft Entra ID
Microsoft has disclosed CVE-2026-69836, a critical remote-code-execution vulnerability affecting Microsoft Entra ID. The vulnerability is classified as CWE-502 — Deserialization of Untrusted Data. Microsoft describes the issue as allowing an…
Posted inCISSP
CISSP Executive Briefing: Security Decision Quality
When the Wrong Security Decision Is Worse Than No Decision Executive Reality Cybersecurity leadership involves making decisions every day. Patch now or wait. Accept the risk or remediate it. Replace…
Microsoft’s Cybersecurity Blueprint – Part 5: Security Adoption Framework
Security Modernization Is More Than Deploying Technology An organization can have excellent security products and still have a fragmented security program. Identity may be mature. Endpoint security may be strong.…
Posted inCISSP Podcasts
CISSP Domain 3 – Secure Design Principles
Listen to the Podcast Episode https://open.spotify.com/episode/4Tm8HSz2rE2iLmo4m9RL61?si=pRdNMsAkQWKoIM0CCG0CJw&utm_source=copy-link&sci=spotify%3Acard-config%3A2pqIBMfDxBa9gBEowuVSBf The Foundation of Secure Architecture Security architecture does not begin with a firewall, encryption algorithm, security product, or access-control mechanism. It begins with design.…
Critical NetScaler Security Update Patching Two Vulnerabilities
Cloud Software Group has released security updates for NetScaler ADC and NetScaler Gateway addressing two vulnerabilities, including a critical authentication-bypass flaw rated CVSS 9.3. The more serious issue, CVE-2026-19490, can…
CISA Adds Five Actively Exploited Vulnerabilities to KEV in Just Two Days
A Five-Vulnerability Warning: From AI Infrastructure to Virtualization and Enterprise Collaboration The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog…
Posted inCISO Journey
The CISO Journey – Part 4
Learn to Speak Business One of the biggest differences between a security leader and a CISO is how they communicate risk. Security professionals naturally speak in security language. Vulnerabilities.Threats.Controls.CVEs.Incidents.Compliance.Security tools.…