Siber Güvenlik Haberleri

Güvenilir yayınlardan canlı haberler, DayBreach CVE verileriyle eşleştirilmiş olarak.

Tüm kaynaklarArs Technica · 61BleepingComputer · 135CERT Polska · 74Cisco Talos · 45CrowdStrike · 32Dark Reading · 52DataBreaches.net · 19Krebs on Security · 12Microsoft Security Blog · 36Proofpoint · 31Rapid7 · 61SANS Internet Storm Center · 51Security.NL · 266SecurityWeek · 39SentinelOne · 30The Cyber Express · 60TheCyberThrone · 46The Hacker News · 253The Record · 24Unit 42 · 43
Rapid72 ay önce

Metasploit Framework 6.5 Released

Today we’re proud to announce that Metasploit Framework version 6.5 has been released. Over the past two years, with the help of countless contributors, we’ve added 422 new modules along with a whole slew of new features.Malleable C2 Profiles for HTTPOne of the latest and most requested features is support for Malleable C2 profiles across all current Meterpreter payloads. This feature enables users to load a standard profile into Meterpreter and change the shape of its HTTP(S) traffic. All Meterpreters, including Windows, Java, Python, PHP and Linux, have been updated with this functionality.

İlişkili Şirketler
A
Android logo
Android
F
freepbx logo
freepbx
L
Laravel logo
Laravel
V
vaadin logo
vaadin
C
cleverbrush logo
cleverbrush
İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
The Hacker News2 ay önce

Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database

A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service's Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, which codenamed the chain CosmosEscape, said the exploit chain began with a crafted query against a Gremlin database controlled by the attacker. From there, code execution on a

İlişkili Şirketler
FL
fuyang lipengjun logo
fuyang lipengjun
R
runZero logo
runZero
X
xwiki logo
xwiki
O
OpenC3 logo
OpenC3
H
hcengineering logo
hcengineering
J
jetbrains logo
jetbrains
M
microsoft logo
microsoft
R
rapid7 logo
rapid7
İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
TheCyberThrone2 ay önce

Bank of Baroda Confirms Cyber Incident

The recent cybersecurity incident at Bank of Baroda serves as another reminder that sophisticated attacks do not always begin with sophisticated techniques. Sometimes, a single compromised employee email account is…

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
The Cyber Express2 ay önce

CVE-2026-63077 Exposes TeamCity Servers to Unauthenticated RCE

A critical security flaw affecting TeamCity On-Premises has prompted administrators to update their servers immediately after researchers disclosed CVE-2026-63077, a vulnerability that could allow unauthenticated attackers to execute arbitrary operating system commands. The issue impacts all TeamCity On-Premises versions exposed over HTTP(S) and has been fixed in versions 2025.11.7 and 2026.1.3. Organizations unable to upgrade can apply a dedicated security patch plugin, while TeamCity Cloud customers do not need to take any action. CVE-2026-63077 Enables Unauthenticated Access Over HTTP(S) Ac

İlişkili Şirketler
J
jetbrains logo
jetbrains
E
exim logo
exim
İlgili CVE'ler
CVE-2026-63077 CVE-2026-45185
Kaynakta oku
The Hacker News2 ay önce

Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents

Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instructions into the finished file. Håkon Måløy disclosed the technique on July 28, 144 days after reporting it to Microsoft. In his proof of concept, the internally generated file triggered the same behavior when it was used in a second Copilot drafting session. Måløy's

İlişkili Şirketler
M
microsoft logo
microsoft
İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

1171-1180 / 1370 haber gösteriliyor