Microsoft – TheCyberThrone

Microsoft Releases Out-of-Band Exchange Security Update

Executive Summary Microsoft has released an out-of-band security update for Exchange Server to address CVE-2026-96940, an Elevation of Privilege vulnerability that could allow an authenticated attacker to access email and…

PravinKarthik October 6, 2026

Microsoft Cybersecurity Blueprint – Part 8: Zero Trust

The Principle Behind the Blueprint We have covered a lot so far. We started with the cloud foundation. We moved into security adoption. Then came security architecture. We looked at…

PravinKarthik September 26, 2026

BigDiskBuster: Microsoft Defender Update DoS PoC

A new proof-of-concept called BigDiskBuster has been released by security researcher Abdelhamid Naceri, also known as Nightmare Eclipse. The tool targets the Microsoft Defender Antivirus update mechanism rather than directly…

PravinKarthik September 24, 2026

CISA KEV

CISA KEV Update – 8 Vulnerabilities Added in Two Days

CISA’s Known Exploited Vulnerabilities (KEV) Catalog saw a significant two-day update on September 8 and September 9, 2026, with eight vulnerabilities added based on evidence of active exploitation. The interesting…

PravinKarthik September 10, 2026

Microsoft’s Cybersecurity Blueprint – Part 7: Well-Architected Security

Security Doesn't End With the Enterprise We have spent the previous parts looking at security from an enterprise perspective. We discussed the cloud foundation. We looked at security modernization. We…

PravinKarthik September 9, 2026

Microsoft Patch Tuesday — September 2026

When Patch Volume Becomes a Security Risk Microsoft’s September 2026 Patch Tuesday is not an ordinary monthly security update. Released on September 8, Microsoft addressed 974 vulnerabilities across its product…

PravinKarthik September 9, 2026

Microsoft’s Cybersecurity Blueprint – Part 6: Microsoft Cloud Security Benchmark

We Have the Strategy. We Have the Architecture. Now What Do We Configure? Imagine a CISO has completed the security strategy. The organization understands its risks. The cloud foundation is…

PravinKarthik August 30, 2026

CVE-2026-69836: Critical RCE Vulnerability in Microsoft Entra ID

Microsoft has disclosed CVE-2026-69836, a critical remote-code-execution vulnerability affecting Microsoft Entra ID. The vulnerability is classified as CWE-502 — Deserialization of Untrusted Data. Microsoft describes the issue as allowing an…

PravinKarthik August 24, 2026