TheCyberThrone

CVE-2026-20245 — Cisco Catalyst SD-WAN Manager Privilege Escalation

The Core Flaw CVE-2026-20245 affects the command-line interface of Cisco Catalyst SD-WAN Manager and stems from insufficient validation of user-supplied input. An authenticated local attacker can exploit it by uploading…

PravinKarthik June 6, 2026

CVE-2026-20230 — Cisco Unified CM SSRF to Potential Root Escalation

Overview CVE-2026-20230 is a critical vulnerability affecting Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (SME). The flaw is caused by improper validation of HTTP requests…

PravinKarthik June 5, 2026

CISA adds Three Vulnerabilities to KEV Catalog

Overview CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation — CVE-2022-0492, a Linux Kernel Improper Authentication vulnerability, and CVE-2025-48595,…

PravinKarthik June 4, 2026

TCT Universe

TheCyberThrone Universe — Episode 1

The Silence Before the Breach 02:13 AM — MSDCorp Global Operations Center Nobody noticed the breach when it began. There were no flashing dashboards.No alarms screaming across the SOC.No encrypted…

PravinKarthik June 3, 2026

Google Android June 2026 Security Bulletin

Overview Google has released the June 2026 Android security patches to address 124 vulnerabilities, including one zero-day flaw exploited in targeted attacks. The bulletin spans Framework, System, Kernel, and multiple…

PravinKarthik June 2, 2026

CVE-2026-40933 — Flowise: Authenticated RCE via MCP stdio Adapter

Overview CVE-2026-40933 is a critical command injection vulnerability in Flowise, the drag-and-drop UI platform for building customized LLM flows. The vulnerability exists in the Model Context Protocol (MCP) adapter's unsafe…

PravinKarthik June 1, 2026

TCT Universe

TheCyberThrone Universe Begins

Most cybersecurity stories begin after the breach. This one begins long before it. Before the ransomware.Before the boardroom panic.Before the incident reports.Before the headlines. It begins with invisible risk. TheCyberThrone…

PravinKarthik May 31, 2026

The Synthetic Threat: Voice on the call is Not Human

The Attack That Does Not Need a Single Line of Code Social engineering has always been the most effective attack vector in cybersecurity. Humans are easier to manipulate than systems…

PravinKarthik May 31, 2026