Security – Page 8 – TheCyberThrone

CISA Adds Eight Actively Exploited Vulnerabilities to KEV Catalog

CISA expanded its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, adding eight security flaws spanning enterprise print management, CI/CD platforms, CMS infrastructure, appliance management, email collaboration, and SD-WAN…

PravinKarthik April 21, 2026

Vercel Confirms Security Breach

One of the most widely deployed frontend cloud platforms in the world just confirmed a security breach — and the attack chain runs straight through a third-party AI tool sitting…

PravinKarthik April 20, 2026

Microsoft Defender Under Siege

Overview Three zero-day exploits targeting Microsoft Defender — BlueHammer, RedSun, and UnDefend — have been confirmed exploited in the wild by threat actors. All three were publicly released on GitHub…

PravinKarthik April 18, 2026

McGraw Hill Data Breach — 13.5 Million Records Exposed

Educational publishing giant McGraw Hill has confirmed a significant data breach following an extortion attempt by the ShinyHunters threat group, resulting in the exposure of over 13.5 million user records.…

PravinKarthik April 17, 2026

NIST Limits NVD Enrichment to High-Priority CVEs

The Breaking Point The National Institute of Standards and Technology (NIST) has officially conceded what the security industry suspected for two years: the National Vulnerability Database's universal enrichment model is…

PravinKarthik April 17, 2026

Fortinet FortiSandbox — Critical Vulnerability Advisory

Fortinet published a sweeping security advisory on April 14, 2026, disclosing multiple vulnerabilities across its FortiSandbox platform. Two of the flaws are rated Critical with unauthenticated attack vectors, demanding immediate…

PravinKarthik April 16, 2026

Microsoft Patch Tuesday — April 2026

TheCyberThrone | Vulnerability Advisory | April 15, 2026 Volume & Scale — A Near-Record Release Microsoft patched 163 CVEs in the April 2026 Patch Tuesday release — the second largest…

PravinKarthik April 15, 2026

CISA Adds Seven Vulnerabilities to KEV Catalog — April 13, 2026

CISA has expanded the Known Exploited Vulnerabilities catalog with seven new entries on April 13, 2026, based on evidence of active exploitation. The batch spans three vendors — Microsoft, Adobe,…

PravinKarthik April 14, 2026