Siber Güvenlik
Son güncelleme| Konu | |
|---|---|
| Sabit CVE-2026-19868 — SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: SonicWall SonicOS SSLVPN |
|
| Sabit CVE-2024-27834 — Apple Multiple Products Improper Authentication Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: Apple Multiple Products |
|
| Sabit CVE-2026-119977 — WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: WordPress WordPress Core |
|
| Sabit CVE-2026-118527 — Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını doğruladı. Etkilenen: Ivanti Connect Secure |
|
| BC | FBI agent stole $2.5 million in crypto from hackers under investigation Yeni A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation. [...] BleepingComputer · |
| BC | US bans MEXC crypto exchange over sanctions evasion, cybercrime links Yeni The US Department of the Treasury has cut off the MEXC Global crypto exchange from the US financial system over sanctions evasion and links with cybercrime gangs. [...] BleepingComputer · |
| THN | ⚡ Weekly Recap: SSHole Exploited, APT Root RCE, Robot Takeovers, 15K Hacked Sites, and More Yeni A system doesn't always need a complicated bug to let someone in. Sometimes, a blank password is enough. That's one of the bigger stories this week. And it gets worse when the tools meant to keep systems updated or runni… The Hacker News · |
| BC | Ukraine dismantles crypto scam network that stole €4.3 million Yeni Ukrainian law enforcement arrested four suspects in a case involving the theft of more than €4.3 million using a network of cryptocurrency investment scam call centers. [...] BleepingComputer · |
| THN | Default 'admin:admin' Server Password Helps Researchers Hack Two Automakers, Unlock and Start Cars Yeni The login systems behind two car brands' mobile apps could be taken over completely, two security researchers found, allowing them to access any customer's account and, for an owner with a connected car, unlock the doors… The Hacker News · |
| THN | Web3Auth Flaw Exploited to Steal Keplr Crypto, Provider Empties Other Wallets for Safety Yeni Some people who set up a Keplr crypto wallet with their Google or Apple account have had money stolen by an attacker. Keplr uses a company called Web3Auth to run that Google and Apple sign-in. The attacker used a securit… The Hacker News · |
| THN | LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks Yeni Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to release and aske… The Hacker News · |
| THN | Taiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch Records Yeni A single attacker using AI agents pulled emergency dispatch records covering seven Taipei districts, researchers at Acronis's Threat Research Unit said last week. The agents also found a Taipei fire department platform e… The Hacker News · |
| THN | Former OpenAI Engineer Pleads Not Guilty to Planting Covert Device in Executive Meeting Room Yeni The OpenAI engineer who was arrested and charged last month for planting a covert audio recording device in the company's office has pleaded not guilty. According to reports from Bloomberg and CNBC, Saudi national Abdulr… The Hacker News · |
| THN | U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses Yeni U.S. government agencies have warned that threat actors are actively targeting industrial refrigeration and cold-chain monitoring systems globally with an aim to cause service disruptions, fire hazards, and loss of inven… The Hacker News · |
| THN | CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation Yeni The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity vulnerability impacting SonicWall SonicOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports that it said ma… The Hacker News · |
| BC | Iris Ohyama data cloud breach exposes info of 7.7 million customers Yeni Japanese manufacturer Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to a third-pa… BleepingComputer · |
| BC | Hackers pull off $133 million French bank heist via service provider French cooperative bank Crédit Mutuel Arkéa was targeted in a cyberattack that enabled fraudulent transactions of up to $133 million, forcing it to respond by suspending certain systems.v [...] BleepingComputer · |
| BC | CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands Scammers are impersonating major brands and celebrities to lure consumers into fake gift card giveaways that collect personal information and trigger unwanted subscriptions. CTM360 reveals how these campaigns use decepti… BleepingComputer · |
| THN | Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects "Yes, and don't ask again," Anthropic's A… The Hacker News · |
| BC | SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. [...] BleepingComputer · |
Başlıklar ve kısa özetler kaynakların herkese açık RSS akışlarından otomatik alınır; tüm hakları kaynaklarına aittir. Konular 30 dakikada bir yenilenir.