Siber Güvenlik
Son güncelleme| Konu | |
|---|---|
| Sabit CVE-2026-102895 — GPUStack Improper Authentication Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: GPUStack GPUStack |
|
| Sabit CVE-2026-123158 — OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: OpenBSD OpenSSH |
|
| Sabit CVE-2026-116779 — SignalWire FreeSwitch Code Injection Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: SignalWire FreeSwitch |
|
| Sabit CVE-2026-123218 — IBM Aspera Faspex Incorrect Authorization Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: IBM Aspera Faspex |
|
| BC | Turla hackers use new Ceral malware to spy on govt Exchange servers Yeni The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations. [...] BleepingComputer · |
| THN | SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution Yeni Four flaws that attackers could exploit without logging in were fixed today as part of SAP's monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score. Three are in the SAP NetWeaver application s… The Hacker News · |
| THN | France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites Yeni An October cyberattack on refrigeration controllers at about 700 French retail sites was carried out by a cyber unit of Iran's Islamic Revolutionary Guard Corps (IRGC), the French government said yesterday. The attackers… The Hacker News · |
| BC | Google patches eighth Chrome zero-day exploited in attacks this year Yeni Google has released emergency security updates to patch a new Chrome vulnerability exploited in zero-day attacks, the eighth such flaw since the start of the year. [...] BleepingComputer · |
| THN | Anthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack Benchmark Yeni Anthropic on Monday released Claude Fable 5.2 and Claude Mythos 5.2 models, which it said exhibit improvements in coding, reasoning, and vision. During pre-release training, the large language models (LLMs) helped its en… The Hacker News · |
| BC | Fireworks AI discloses new breach after cloud provider hack Yeni AI infrastructure startup Fireworks has disclosed a new security breach in which attackers accessed its development machines after breaching a third-party cloud provider. [...] BleepingComputer · |
| THN | Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 Yeni Google on Monday released updates to patch nine security vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, assigned the CVE identifier CVE-2026-125350 (C… The Hacker News · |
| THN | N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits Yeni N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabilities collectively t… The Hacker News · |
| THN | CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws Yeni The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilitie… The Hacker News · |
| BC | Vanderbilt University hit in BYOD ransomware attack, data theft claimed Yeni Vanderbilt University warns it is responding to a cyberattack claimed by the BYOD ransomware gang, which claims to have encrypted the university's databases and stolen sensitive student, employee, and research data. [...… BleepingComputer · |
| BC | SEGA newsletter data breach exposes 2.2 million email addresses Yeni Japanese gaming giant SEGA has disclosed that a data breach at its third-party newsletter provider, ARARA, exposed the email addresses of 2.2 million newsletter subscribers. [...] BleepingComputer · |
| BC | N-able takes cloud platform offline after 30+ "zero-days" published Yeni N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, includin… BleepingComputer · |
| BC | York University breach exposed personal information dating to 2007 Yeni York University has announced it suffered a cybersecurity incident in which a threat actor stole personal information people submitted through online forms. [...] BleepingComputer · |
| BC | France blames Iranian hackers for supermarket attacks that sparked fires Yeni France has linked October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian state-backed hackers, saying the attacks caused food losses and sparked at l… BleepingComputer · |
| THN | Hackers Exploit Qubole's Trusted AWS Access to Breach Customer Accounts and Steal Data Yeni An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today. The attacker used credentials for an… The Hacker News · |
| BC | Russian cloud firm Beget rebuilds from scratch after data wiper attack Yeni A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said. [...] BleepingComputer · |
Haberler, belirtilen kaynaklardaki bilgilerden derlenerek editörümüzce yeniden yazılır; her haberin altında kaynağı ve orijinal bağlantısı yer alır. Konular 30 dakikada bir güncellenir.