Security – Page 3 – TheCyberThrone

OpenSSL HollowByte: A DoS that Exhaust Server Memory

Introduction More than a decade after Heartbleed changed the way organizations viewed OpenSSL security, another OpenSSL issue has captured the cybersecurity community's attention. Dubbed HollowByte by Okta's Red Team, this…

PravinKarthik July 19, 2026

CISA Expands KEV Catalog Again adds Zeroday Vulnerabilities

The pace of additions to the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) Catalog continues to accelerate. Between July 14 and July 15, 2026, CISA added eight…

PravinKarthik July 16, 2026

Australian Cyber Security Centre Warns of CMS Exploitation Campaign

Executive Summary The Australian Cyber Security Centre (ACSC) has issued a warning about a widespread exploitation campaign targeting internet-facing Content Management Systems (CMS). Rather than relying on novel zero-day vulnerabilities,…

PravinKarthik July 13, 2026

CISA KEV Update: 6 Vulnerabilities added

Executive Summary CISA has expanded its Known Exploited Vulnerabilities (KEV) Catalog by adding several critical vulnerabilities affecting enterprise web applications and AI platforms. These vulnerabilities are confirmed to be exploited…

PravinKarthik July 12, 2026

Microsoft Patches RoguePlanet Defender Elevation-of-Privilege Flaw

Microsoft has shipped the fix, closing out a vulnerability that's been live since June 10. What happened: Microsoft addressed the RoguePlanet vulnerability by releasing Microsoft Malware Protection Engine 1.1.26060.3008, an…

PravinKarthik July 9, 2026

Adobe ColdFusion CVE-2026-48282: Under Active Exploitation

Executive Summary Adobe has released an emergency security update for CVE-2026-48282, a critical vulnerability affecting Adobe ColdFusion. With a CVSS v3.1 score of 10.0, this vulnerability represents the highest possible…

PravinKarthik July 7, 2026

JadePuffer: The Dawn of Agentic AI Ransomware

When Artificial Intelligence Stops Assisting Attackers and Starts Becoming the Attacker Cybersecurity has long anticipated the day when Artificial Intelligence would transition from being a supporting tool for threat actors…

PravinKarthik July 6, 2026