TheCyberThrone

ENISA Introduces the European Vulnerability Database (EUVD) — A Strategic Alternative to CVE

In a significant move toward strengthening the European Union’s cybersecurity autonomy and resilience, the European Union Agency for Cybersecurity (ENISA) has officially launched the European Vulnerability Database (EUVD) — a…

PravinKarthik June 8, 2025

Security Certifications

CISSP Domain 1 Security and Risk Management Detailed Notes

🎯 Purpose of this Domain Domain 1 is the foundation of information security. It sets the stage for all other domains by focusing on the principles, policies, and practices that…

PravinKarthik June 7, 2025

PathWiper Malware: A Targeted Data Destruction Threat

PathWiper is a sophisticated and destructive piece of malware designed specifically for data wiping and system incapacitation. It has recently been deployed in a series of coordinated cyberattacks targeting critical…

PravinKarthik June 7, 2025

CVE-2025-4318 Critical RCE in AWS Amplify Codegen UI

CVE-2025-4318 is a critical remote code execution (RCE) vulnerability identified in the @aws-amplify/codegen-ui NPM package—a core component used by AWS Amplify Studio for generating UI components based on declarative models.…

PravinKarthik June 6, 2025

Lyrix Ransomware Dissection

Lyrix ransomware is a sophisticated and recently identified strain of malware that primarily targets Windows systems. First observed in April 2025, Lyrix stands out due to its use of modern…

PravinKarthik June 6, 2025

CVE-2025-20286 Credential Reuse Vulnerability in Cisco ISE

CVE-2025-20286 is a critical security vulnerability identified in Cisco Identity Services Engine (ISE) when deployed on certain cloud platforms, including: Amazon Web Services (AWS) Microsoft Azure Oracle Cloud Infrastructure (OCI)…

PravinKarthik June 5, 2025

CISA Adds Qualcomm Vulnerabilities to KEV Catalog

On June 3, 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities (KEV) Catalog to include three newly discovered and actively exploited vulnerabilities in Qualcomm…

PravinKarthik June 4, 2025

CVE-2025-5419 Zero-Day Vulnerability in Chrome’s V8 Engine

CVE-2025-5419 is a critical zero-day vulnerability discovered in Google Chrome’s V8 JavaScript engine, the core component responsible for executing JavaScript code in the browser. This flaw enables out-of-bounds memory access,…

PravinKarthik June 3, 2025