Security – Page 2 – TheCyberThrone

Apple Patches numerous vulnerabilities across its products

Apple's latest security update wave — covering iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, watchOS 26.4, tvOS 26.4, visionOS 26.4, Safari 26.4, and Xcode 26.4 — resolves over 85 vulnerabilities.…

PravinKarthik March 26, 2026

TeamPCP Supply Chain Campaign

What Happened — The Attack Chain This is a deliberate, multi-hop campaign, not opportunistic. The attack on LiteLLM started five days earlier with Trivy. On March 19, attackers rewrote Git…

PravinKarthik March 26, 2026

Wiped From Within The Stryker Aftermath

A post-incident deep dive into containment, forensics, legal fallout, and the systemic lessons for enterprise security The dust is beginning to settle around one of the most consequential cyberattacks ever…

PravinKarthik March 25, 2026

FCC Bans All New Foreign-Made Consumer Routers

What happened On March 23, 2026, the FCC updated its Covered List to include all consumer-grade routers produced in foreign countries, following a determination by a White House-convened Executive Branch…

PravinKarthik March 25, 2026

CVE-2026-3055 – Citrix NetScaler Critical SAML IDP Memory Leak

Overview On March 23, 2026, Citrix published a security advisory for a critical vulnerability affecting NetScaler ADC and NetScaler Gateway. CVE-2026-3055 is classified as an out-of-bounds read with a CVSS…

PravinKarthik March 24, 2026

Quest KACE SMA flaw CVE-2025-32975 Actively Exploited

Overview CVE-2025-32975 is a critical authentication bypass vulnerability in Quest KACE SMA's SSO authentication handling mechanism. The root cause lies in improper validation of authentication tokens or session states during…

PravinKarthik March 23, 2026

Oracle Patches CVE-2026-21992 — Unauthenticated RCE

Overview Oracle has released security updates to address a critical vulnerability impacting Oracle Identity Manager and Oracle Web Services Manager that could be exploited to achieve remote code execution. Tracked…

PravinKarthik March 22, 2026

CISA adds Five Vulnerabilities to KEV Catalog- March 20, 2026

Overview CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog on March 20, 2026, with a remediation due date of April 3, 2026 for all entries. The batch spans…

PravinKarthik March 21, 2026