Siber Güvenlik
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.
Siber Güvenlik
Son haberler
Siber Güvenlik
UK Housing Ombudsman Service investigates ‘security incident’
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday.
Siber Güvenlik
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as another user. Docker fixed the flaw on September 30 and says it found no evidence that anyone exploited it.
Siber Güvenlik
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to “act immediately.”
Siber Güvenlik
Adobe Patches 140 Vulnerabilities Across 10 Products
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
Siber Güvenlik
Google Partially Reverses Chrome Bug Bounty Cuts
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.
Siber Güvenlik
TFG London cyberattack disrupts systems at Hobbs and Whistles retailers
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands.
Siber Güvenlik
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user’s package without having to steal their credentials.
Siber Güvenlik
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.
Siber Güvenlik
Enable This Secret iOS 27 Feature to Help Protect Against Scams
Impersonation Risk Detection uses on-device analysis and simple risk warnings to help protect you from scams.
Siber Güvenlik
VPN dark web alerts vs. free tools: Are you paying extra for repackaged data?
Tracing where VPN breach data actually comes from
Siber Güvenlik
Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.
Siber Güvenlik
Docker Hub flaw let attackers impersonate users, tamper with images
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT).
Siber Güvenlik
Hackers turn business backup servers into crypto mines after sneaking malware disguised as Microsoft Edge
At least five organizations were targeted by the malware in just a few days.
Siber Güvenlik
Ahold Delhaize takes systems offline after cyberattack — global retail giant says ‘cybersecurity incident’ hit systems, but stores remain open
Ahold Delhaize loses its hold on cybersecurity once again, as retailers report trouble operating.
Siber Güvenlik
The MFA Gaps Attackers are Still Exploiting
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn’t enough and how organizations can close these authentication gaps.
Siber Güvenlik
SAP warns of maximum severity OAuth2 SSRF security flaw
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python.
Siber Güvenlik
Hacker claims ‘123456’ password let them breach the Danish national registry, accessing 8.8 million records
The Danish Central Register of Persons (CPF) was breached through the account of an IT and data services business. The hacker claimed that one of the breached accounts was only protected by a ‘123456’ password.
Siber Güvenlik
Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying Grindr users’ sensitive data to advertisers.
Siber Güvenlik
I asked Google about its new multi-year partnership with Flo Health, in light of privacy concerns
Google assured me that its algos are ‘designed not to log or store sensitive women’s health-related events’.
Siber Güvenlik
Over 8.7 million karaoke fans at risk after major data breach — Japanese giant Nippon Columbia says malware infection was to blame for exposing records
Daiichi Kosho had outsourced the handling of its customers’ personal information to NCG.
Siber Güvenlik
Cyberattacks crank French supermarket refrigeration systems up to 50°C
Stock spoiled at hundreds of stores as manufacturer says affected equipment ran outdated firmware
Siber Güvenlik
[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls
The dangerous part of a stolen identity isn’t always the initial login. It’s what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security teams can investigate.
Siber Güvenlik
‘123456’ password linked to Denmark data breach affecting 8.8M people
Local media reports three weakly protected accounts at small IT biz whose access to national register was abused
Son bülten
Hafta 41
TR
Popüler haberler
Kaynaklar
72 aktif kaynak
27 Türkçe · 45 İngilizce
Tüm kaynaklar
