The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators.
The Citizen Lab’s Ron Deibert warns the US government is pushing for pervasive surveillance and says certain technology executives are all too happy to help.
Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone after compromising third-party operators and modifying authoritative DNS records.
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The activity is assessed to be the work of a…
SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company’s network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions. SonicWall…
Quoth the LLM, ‘More and more’
Gaming chat app Discord has suffered another user data breach, with a suspected 1 million email addresses stolen alongside (potentially many more) user IDs and IP addresses. While Discord was not targeted directly, third party security service Double Counter have reported a “deliberate, multi-stage…
Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month.
Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intelligence (AI) and large language model (LLM) infrastructure with an aim to deploy cryptocurrency miners and further expand the scale of the botnet. The financially…
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads.
Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach.
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle “Rey,” was…
Her yıl Ekim ayı, dünya genelinde “Siber Güvenlik Farkındalık Ayı” olarak kutlanıyor ve bu dönem, kurumların hem çalışanlarını hem de teknoloji altyapılarını siber tehditlere karşı yeniden gözden geçirmesi için önemli bir fırsat sunuyor.
A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication.
The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and board scrutiny are converging inside the systems where work actually happens. For years, the enterprise cybersecurity story has been told as a…
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. “The…
Threat actors have begun to exploit a newly disclosed critical security flaw impacting Atlassian Data Center products that could allow access to sensitive files under certain conditions. The arbitrary file access flaw, tracked as CVE-2026-21589 (CVSS score: 9.3) affects multiple products, including…
The English language can be a way of communicating, and it can be a way of subjugating. Patience is a Virtue protagonist Louis knows this intimately. In this “cozy-meets-creepy” conversation puzzle game from teaisfortoby!, some interactions require you to answer only using the words spoken by the…
If you’re evaluating an agentic pentesting solution right now, you’ve probably heard the same pitch more than once: point it at a target, and it discovers, validates, and exploits attack paths autonomously, the way a real attacker would. That promise is worth taking seriously. It’s also worth…
Tens of thousands more victims and more ransomware groups getting in on the act
A data breach of partner MVNO Liberty Mobile exposed Trump Mobile’s full subscriber base.
Yapay zekâ ile üretilen dolandırıcılık amaçlı oltalama e-postaları hızla yaygınlaşırken, Türkiye’nin öncü teknoloji şirketlerinden Softtech, siber güvenlik alanındaki ürün portföyüne Zoka Suite ile yeni ve güçlü bir çözüm ekledi. Zoka Suite; oltalama simülasyonu, çalışan eğitimi ve gerçek şüpheli…
The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing malware called LunexStealer (aka Psychedelic Stealer). The activity, which was observed by the agency in…
Yapay zekâ ile üretilen dolandırıcılık amaçlı oltalama e-postaları hızla yaygınlaşırken, Softtech, siber güvenlik alanındaki ürün portföyüne Zoka Suite ile yeni ve güçlü bir çözüm ekledi.
72 aktif kaynak
27 Türkçe · 45 İngilizce
Tüm kaynaklar
