Gündem
PHP, WordPress güvenliği, siber güvenlik ve dünyadan güncel başlıklar. Son güncelleme: 15 dk önce
WordPress'te aktif istismar edilen açıklar
CISA KEV ↗| CVE | Açık |
|---|---|
| CVE-2026-119977 | WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability |
| CVE-2026-87902 | WordPress Core Remote File Inclusion Vulnerability |
| CVE-2026-60137 | WordPress Core SQL Injection Vulnerability |
| CVE-2026-63030 | WordPress Core Interpretation Conflict Vulnerability |
| CVE-2026-41940 | WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability Fidye yazılımı |
PHP Haberleri
php.net resmi duyuruları ve sürüm notları
PHP 8.6.0 RC5 available for testing
The PHP team is pleased to announce the fourth release candidate of PHP 8.6.0, RC5. This continues the PHP 8.6 release cycle, whose rough outline is specified in the PHP Wiki. Source downloads of PHP 8.6.0 RC5 are availa…
Kaynağa git ↗Updated PHP Windows builds for Brotli security fix
The PHP team announces updated Windows builds: PHP 8.5.12-1, 8.4.27-1, 8.3.36-1 and 8.2.35-1. These builds include Brotli 1.2.1, which fixes CVE-2026-111497, an out-of-bounds write vulnerability in Brotli decompression.…
Kaynağa git ↗Informational advisory: Session upload progress
We suggest you set session.upload_progress.enabled=0 until the next regular bugfix release, to fully protect from an unlikely RCE vector. This setting was already listed as a mitigation in the GHSA-6wmf-4rv5-p3rp advisor…
Kaynağa git ↗PHP 8.6.0 RC4 available for testing
The PHP team is pleased to announce the third release candidate of PHP 8.6.0, RC4. This continues the PHP 8.6 release cycle, whose rough outline is specified in the PHP Wiki. Source downloads of PHP 8.6.0 RC4 are availab…
Kaynağa git ↗Security advisory: Critical remote code execution vulnerabilities, update now
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately. Who is at risk: all PHP installati…
Kaynağa git ↗PHP 8.5.12 Released!
The PHP development team announces the immediate availability of PHP 8.5.12. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code ex…
Kaynağa git ↗WordPress Güvenlik
WordPress güvenlik sürümleri ve eklenti/tema açıkları
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 26, 2026 to November 1, 2026)
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this repo…
Kaynağa git ↗Attackers Actively Probing for Upgrade-Window RCE Vulnerability in WordPress Core
On October 28th, 2026, the WordPress Security Team released WordPress 7.1.4, along with backported security releases for older branches, addressing several security issues, most notably an Unauthenticated Remote Code Exe…
Kaynağa git ↗Wordfence Price Increase Coming December 3, 2026
On Thursday, December 3, 2026, pricing for Wordfence Premium, Care, and Response will increase. We’re announcing this change a month in advance so you have time to purchase new licenses or renew eligible subscriptions at…
Kaynağa git ↗HTTP2Shell: What the Critical Brotli Vulnerability Means for WordPress Sites
On October 22, 2026, Google published CVE-2026-111497, a critical vulnerability in Brotli, one day after the Brotli project released fixed versions. The vulnerability has circulated under several unofficial names, includ…
Kaynağa git ↗WordPress 7.1.4 Patches Unauthenticated Upgrade-Window RCE; Exploitation Attempts Detected After Release
WordPress 7.1.4 was released on October 28, 2026. According to WordPress, it includes fixes for 22 security vulnerabilities. The most serious is an unauthenticated race condition in the Core update process that can lead…
Kaynağa git ↗Wordfence Bug Bounty Program Monthly Report – July 2026
In July 2026, the Wordfence Bug Bounty Program received 1077 vulnerability submissions from our growing community of security researchers working to improve the overall security posture of the WordPress ecosystem. These…
Kaynağa git ↗Siber Güvenlik
Dünyadan güncel güvenlik açıkları ve saldırılar
FBI agent stole $2.5 million in crypto from hackers under investigation
A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation. [...]
Kaynağa git ↗US bans MEXC crypto exchange over sanctions evasion, cybercrime links
The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs. [...]
Kaynağa git ↗⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More
A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep systems updated or runni…
Kaynağa git ↗Ukraine dismantles crypto scam network that stole €4.3 million
Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers. [...]
Kaynağa git ↗Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars
The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors…
Kaynağa git ↗Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety
Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a securit…
Kaynağa git ↗Dünyadan
Dünya gündeminden başlıklar
İBB davasında söz alan Murat Çalık: 'Yaşam hakkımın korunmasını istiyorum'
Görevden uzaklaştırılan İBB Başkanı Ekrem İmamoğlu'nun da aralarında bulunduğu 46'sı tutuklu 436 sanığın yargılandığı İBB davasının üçüncü celsesi devam ediyor. Celsenin beşinci gününde, Beylikdüzü Belediye Başkanı iken…
Kaynağa git ↗İzmir'de demir çelik fabrikasında patlama: Can kaybı 10'a yükseldi
İzmir'in Aliağa ilçesinde faaliyet gösteren HABAŞ Demir Çelik Fabrikası'nda meydana gelen patlamada can kaybı 10'a yükseldi. İzmir Valisi Elban, 15 yaralıdan dördünün durumunun ağır olduğunu ve enkaz altında dört kişinin…
Kaynağa git ↗Thirteen migrants die after boat sinks off Crete
The Greek coastguard says it has rescued 18 people, all of whom were Sudanese nationals.
Kaynağa git ↗Türkiye-Azerbaycan arasındaki buzlar eridi mi?
Türkiye ile Azerbaycan arasında son iki aydır yaşanan gerilim, Cumhurbaşkanı Recep Tayyip Erdoğan ile Azerbaycan Devlet Başkanı İlham Aliyev'in 8 Kasım'da Şuşa'da yaptıkları görüşme sonunda yatışmış görünüyor.
Kaynağa git ↗Fon krizinde şimdiye kadar neler oldu, ne kadar ödeme yapıldı?
Eylül ayında Borsa İstanbul'da sert düşüşlere yol açan fon krizi gündemdeki yerini koruyor. Peki, krizin patlak vermesinden bu yana hangi gelişmeler yaşandı?
Kaynağa git ↗COP31, 2026'da yeni bir sıcaklık rekoru kırılacağı uyarıları eşliğinde başladı
Türkiye ve Avustralya eş başkanlığında düzenlenen Birleşmiş Milletler iklim konferansı COP31, 9 Kasım'da Antalya'da başladı. Konferansın açılış gününde bilim insanları 2026'nın kayıtlara geçen en sıcak yıl olacağı uyarıs…
Kaynağa git ↗Başlıklar ve kısa özetler ilgili kaynakların herkese açık RSS akışlarından otomatik alınır; içeriklerin tüm hakları kaynaklarına aittir. Veriler 30 dakikada bir yenilenir.