Haberler
Güncel zafiyetler ve siber güvenlik haberleri; her saat yenilenir.
Aşağıda iki şey var: resmî kaynaklarda şu anda saldırganlarca kullanıldığı doğrulanmış zafiyetler ve dünyadan siber güvenlik haberleri. Başlıklar ve kısa özetler kaynaklarından alınır; ayrıntı için her satır kendi kaynağına gider. Listede kullandığınız bir yazılım görürseniz güncellemeyi ertelemeyin; ne yapacağınızı CVE yazısında anlattık.
Aktif istismar edilen zafiyetlerKaynak: CISA KEV kataloğu
CVE-2026-10961826 Ekim 2026PHP Group PHPPHP Memory Corruption VulnerabilityPHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution.CVE-2026-10961926 Ekim 2026PHP Group PHPPHP Stale Internal Request-State VulnerabilityPHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution.CVE-2026-11462523 Ekim 2026Arista VeloCloud OrchestratorArista VeloCloud Orchestrator SQL Injection VulnerabilityArista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality,…CVE-2026-11044723 Ekim 2026Collabora Collabora Online – Built-in CODE ServerCollabora Online – Built-in CODE Server OS Command Injection VulnerabilityCollabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.CVE-2026-10693120 Ekim 2026EG Secure Solutions SiteGuard Server EditionEG Secure Solutions SiteGuard Server Edition OS Command Injection VulnerabilityEG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.CVE-2026-9665620 Ekim 2026Plex Media ServerPlex Media Server External Control of File Name or Path VulnerabilityPlex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654,…CVE-2026-9665520 Ekim 2026Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This…CVE-2026-9665420 Ekim 2026Plex Media ServerPlex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page VulnerabilityPlex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters. This vulnerability can be chained with…CVE-2026-9665220 Ekim 2026Plex Media ServerPlex Media Server Server-Side Request Forgery (SSRF) VulnerabilityPlex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's…CVE-2026-11093620 Ekim 2026Siemens Software CenterSiemens Software Center Uncontrolled Search Path Element VulnerabilitySiemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code…CVE-2026-10276416 Ekim 2026BeyondTrust Remote SupportBeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityBeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.CVE-2025-6162416 Ekim 2026Fortinet Multiple ProductsFortinet Multiple Products Path Traversal VulnerabilityFortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI…
Siber güvenlik haberleriThe Hacker News · BleepingComputer · SecurityWeek · Krebs on Security · Wordfence
- Unexplained DreamHost Incident Prompts Email, FTP Password ResetsThe company says it reacted to an issue affecting some of its systems, including DreamHost webmail. The post Unexplained DreamHost Incident Prompts Email, FTP Password Resets appeared first on SecurityWeek .Kaynakta oku
- iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones. The post iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18…Kaynakta oku
- Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AIAnthropic presents its own initial public offering as a step toward mitigating the risks it believes AI poses. The post Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI appeared first on…Kaynakta oku
- Apple backports CoreGraphics zero-day patches to older iPhonesApple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in "extremely sophisticated" targeted attacks on iOS devices. [...]Kaynakta oku
- This is Fine: What NetScaler Zero-Days Tell Us About the New NormalKeep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon. The post This is Fine: What NetScaler Zero-Days Tell Us About the New Normal appeared first on SecurityWeek…Kaynakta oku
- Dead Popcorn Time Updater Put Millions of Computers at Risk of TakeoverRunning at system boot, it periodically polled the update domain to execute any code served, with full privileges. The post Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover appeared first on…Kaynakta oku
- Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected ComputersA criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency's operators…Kaynakta oku
- Energy giant ENGIE discloses data breach affecting customersFrench energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners. [...]Kaynakta oku
- OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning ProtectionsOpenAI's compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model's hidden reasoning out in plain text, security firm Xint has shown. OpenAI's reasoning models work…Kaynakta oku
- CISA confirms PHP2Shell vulnerabilities now exploited in attacksThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch their systems by…Kaynakta oku
- Maritime Coalition Launches Free Vulnerability Database for Ship and Port SystemsBlue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products. The post Maritime Coalition Launches Free Vulnerability Database for Ship and Port…Kaynakta oku
- Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth WeaknessesThe Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP cameras and DVRs with…Kaynakta oku
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code ExecutionThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities (KEV) catalog. The…Kaynakta oku
- Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close ClinicsThe University of New Mexico Health System told people not to show up at its main hospital in Albuquerque and canceled appointments at more than 30 clinics. The post Cybersecurity Issue Forces a Major New Mexico Hospital…Kaynakta oku
- University of Copenhagen data breach exposes data of 525,000 peopleThe University of Copenhagen in Denmark confirmed that hackers accessed one of its test environments containing personal data belonging to 525,000 people. [...]Kaynakta oku
- Former pentester used ARTEX AI to steal 8.2 million data recordsSouth Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks. [...]Kaynakta oku
- OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricingOpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than its larger models. [...]Kaynakta oku
- Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AIA string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks. The post Anthropic Files for Potentially the Biggest IPO…Kaynakta oku
- DreamHost forces password resets in ongoing "incident"DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface. [...]Kaynakta oku
- Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on MagentoAn unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is…Kaynakta oku
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution FlawPHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and…Kaynakta oku
- Critical 'HTTP2Shell' Brotli vulnerability triggers emergency patchesA critical flaw dubbed 'HTTP2Shell' in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data. [...]Kaynakta oku
- Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and RansomwareCybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in which threat actors use Microsoft Teams' external chat creation feature to conduct…Kaynakta oku
- Microsoft releases emergency .NET patches for critical Brotli flawMicrosoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell. [...]Kaynakta oku
- Introducing the Wordfence Threat Response Team: A New Way to Report Active Threats in the WordPress EcosystemThe Wordfence Threat Response Team is a new small, technically hands-on team responsible for turning rapidly emerging threats into customer protection and clear customer guidance. Spot an active threat? Report it…Kaynakta oku
- Industrial Vendors Check Products for PHP2Shell VulnerabilitiesSiemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities. The post Industrial Vendors Check Products for PHP2Shell Vulnerabilities appeared…Kaynakta oku
- Genesys Hack Exposes Customer Data From Internal SystemsThe Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected. The post Genesys Hack Exposes Customer Data From Internal Systems appeared first on SecurityWeek .Kaynakta oku
- ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and MoreThis2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, some flaws are already…Kaynakta oku
- When an AI Agent Is the Incident, the Identity Record Is the EvidenceA new NIST, CISA, and NSA guide treats runaway agents as incidents to be rehearsed. The hard part of the response is answering whose authority the agent used, and that answer has to exist before the incident does. [...]Kaynakta oku
- Chinese man extradited for role in $36 million cryptocurrency scamA Chinese national was arraigned in California after being extradited from the Netherlands for his alleged involvement in a cryptocurrency investment scam that stole nearly $37 million from 174 victims in the United…Kaynakta oku
- Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape SandboxesTwo critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An…Kaynakta oku
- Between alerts: What Attackers Do in the Spaces Ordinary Detection MissesEvery SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed. Network data, like that from a network detection and response (NDR) platform, connects individual…Kaynakta oku
- Kali Linux 2026.3 released with 6 new tools, desktop updatesKali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. [...]Kaynakta oku
- uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat AccountsA rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these…Kaynakta oku
- Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 OrganizationsCybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into…Kaynakta oku
- Wordfence Intelligence Weekly WordPress Vulnerability Report (October 12, 2026 to October 18, 2026)Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this…Kaynakta oku
Sitenizde bu açıklardan biri var mı?
WordPress eklentisi, sunucu yazılımı, form kütüphanesi… Listedekilerden birini kullanıyorsanız ya da emin değilseniz sitenizi birlikte tarayalım.