Microsoft – TheCyberThrone

Microsoft Releases Out-of-Band .NET Security Updates: Four Vulnerabilities Addressed

Microsoft released out-of-band security updates for .NET on October 25, 2026, outside its regular monthly servicing schedule. The release addresses a buffer overflow vulnerability in Brotli decompression, an unsafe Linux…

PravinKarthik October 26, 2026

Microsoft Cybersecurity Blueprint – Part 9: The Complete Blueprint

The Real Challenge Is Making Security Work Together Imagine presenting your cybersecurity strategy to the board. Your organization has invested in identity protection, cloud security, vulnerability management, threat detection, and…

PravinKarthik October 17, 2026

CISA KEV

CISA Adds Microsoft, Ivanti, Cisco and Palo Alto Networks Vulnerabilities to KEV Catalog

CISA has expanded its Known Exploited Vulnerabilities (KEV) catalog with four vulnerabilities affecting Microsoft Windows, Ivanti Connect Secure, Cisco Secure Email Gateway, and Palo Alto Networks PAN-OS. What makes these…

PravinKarthik October 15, 2026

Microsoft Patch Tuesday – October 2026

1,411 Vulnerabilities and Three Zero-Days An actively exploited Windows Shell flaw, publicly disclosed vulnerabilities and a record-breaking security release put enterprise patch management under pressure. 1. October’s Patch Tuesday Is…

PravinKarthik October 14, 2026

Microsoft Releases Out-of-Band Exchange Security Update

Executive Summary Microsoft has released an out-of-band security update for Exchange Server to address CVE-2026-96940, an Elevation of Privilege vulnerability that could allow an authenticated attacker to access email and…

PravinKarthik October 6, 2026

Microsoft Cybersecurity Blueprint – Part 8: Zero Trust

The Principle Behind the Blueprint We have covered a lot so far. We started with the cloud foundation. We moved into security adoption. Then came security architecture. We looked at…

PravinKarthik September 26, 2026

BigDiskBuster: Microsoft Defender Update DoS PoC

A new proof-of-concept called BigDiskBuster has been released by security researcher Abdelhamid Naceri, also known as Nightmare Eclipse. The tool targets the Microsoft Defender Antivirus update mechanism rather than directly…

PravinKarthik September 24, 2026

CISA KEV

CISA KEV Update – 8 Vulnerabilities Added in Two Days

CISA’s Known Exploited Vulnerabilities (KEV) Catalog saw a significant two-day update on September 8 and September 9, 2026, with eight vulnerabilities added based on evidence of active exploitation. The interesting…

PravinKarthik September 10, 2026