Siber Güvenlik Haberleri

Güvenilir yayınlardan canlı haberler, DayBreach CVE verileriyle eşleştirilmiş olarak.

Tüm kaynaklarArs Technica · 63BleepingComputer · 154CERT Polska · 78Cisco Talos · 46CrowdStrike · 32Dark Reading · 64DataBreaches.net · 29Krebs on Security · 12Microsoft Security Blog · 37Proofpoint · 37Rapid7 · 64SANS Internet Storm Center · 54Security.NL · 291SecurityWeek · 57SentinelOne · 32The Cyber Express · 67TheCyberThrone · 54The Hacker News · 279The Record · 33Unit 42 · 45
The Hacker News2 ay önce

Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent

Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent. The researchers said the public agent could be prompt-injected into posting /adk-issue-fix as adk-bot. They identified the bot as a collaborator, so that comment satisfied

İlişkili Şirketler
W
watchguard logo
watchguard
K
kerberos-io logo
kerberos-io
G
google logo
google
G
github logo
github
İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
Rapid72 ay önce

CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild

OverviewOn August 2, 2026, N-able published a security advisory for CVE-2026-18577, an authentication bypass vulnerability affecting N-central that was discovered being exploited in-the-wild after an incomplete fix for an earlier authentication bypass issue, CVE-2026-18556 was disclosed. CVE-2026-18577 allows a remote unauthenticated attacker to bypass authentication and obtain administrative control of vulnerable N-central servers in affected deployments.N-able N-central is a widely deployed Remote Monitoring and Management (RMM) platform used by managed service providers (MSPs) and enterpris

İlişkili Şirketler
N
N-able logo
N-able
C
cakephp logo
cakephp
İlgili CVE'ler
CVE-2026-18577 CVE-2026-18556
Kaynakta oku
The Hacker News2 ay önce

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries. The database bug is tracked as CVE-2026-58048 (CVSS 4.0 score: 9.4) and affects

İlişkili Şirketler
W
webpros logo
webpros
M
microsoft logo
microsoft
C
cpanel logo
cpanel
O
oracle logo
oracle
İlgili CVE'ler
CVE-2026-58048 CVE-2026-58047 CVE-2026-50522
Kaynakta oku
The Cyber Express2 ay önce

PNLD Data Breach Exposes Police and Government Contact Details on Dark Web

The PNLD data breach has exposed contact information belonging to police officers, government partners, criminal justice professionals and customers after data from the Police National Legal Database (PNLD) was published on the dark web. The data breach at PNLD, identified on July 26, 2026, also affected some users of Ask the Police, raising concerns about targeted phishing attacks. PNLD Data Breach Exposes Police and Contact Details According to PNLD, the compromised data includes names, organizations and work email addresses of police officers, police staff, criminal justice professionals, g

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
The Cyber Express2 ay önce

Liechtenstein Cyberattack Exposes Data From Beneficial Ownership Register

The Liechtenstein cyberattack has prompted authorities to investigate a major security breach after copies of sensitive data linked to around 31,000 legal entities were unlawfully accessed from the country's Register of Beneficial Owners (VwbP). Following the cyberattack on Liechtenstein, officials temporarily suspended external access to the register while investigations continue. Although data was exfiltrated, the government said there is currently no evidence that records were altered or deleted. Cyberattack on Liechtenstein's VwbP Register According to the Liechtenstein government, the Vwb

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
The Hacker News2 ay önce

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

A new Russian loader-as-a-service (LaaS) codenamed DOUBLECUP has been using ClickFix lures as a way to stage malware-laced PNG images in victims' browser cache and ultimately deliver CountLoader and a previously undocumented remote access trojan called DeviceManager. "The first stage drops a steganographic PNG image into the browser's cache, retrieves its hidden content, and executes the second

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

1071-1080 / 1390 haber gösteriliyor