Siber Güvenlik Haberleri

Güvenilir yayınlardan canlı haberler, DayBreach CVE verileriyle eşleştirilmiş olarak.

The Cyber Express10 gün önce

Splunk Patches 22 Vulnerabilities, Including Critical Flaw With CVSS 9.8

Splunk has patched a large set of Splunk vulnerabilities in Splunk Enterprise, the most severe of which carries a CVSSv3.1 score of 9.8. The fixes are described in two advisories, SVD-2026-1001 and SVD-2026-1002, both published on October 7, 2026, and together they cover 22 CVE identifiers, CVE-2026-76264 through CVE-2026-76285. A security bulletin issued on October 9, 2026, rated the overall risk as medium and warned that a remote attacker could exploit some of the flaws to achieve remote code execution, denial of service, elevation of privilege, security restriction bypass, sensitive informa

İlişkili Şirketler

splunk

linux

İlgili CVE'ler

CVE-2026-76264 CVE-2026-76285 CVE-2026-76268 CVE-2026-76266 CVE-2026-76265 CVE-2026-76272 CVE-2026-76280 CVE-2026-76269 CVE-2026-76275 CVE-2026-76270+12 CVE daha

Kaynakta oku

The Cyber Express10 gün önce

How Fake Journalists Got Iranian Articles Into Real Outlets

Two covert influence operations, one from Russia and one from Iran, used ChatGPT not to invent new tactics but to speed up old ones. That is the central finding of a new OpenAI threat report, which describes banning both networks after tracing how they built false-front entities to push geopolitical, conflict-related messaging into target audiences. The report frames the activity as a return to pre-AI playbooks. The Iranian network's personas resemble "Alice Donovan," a front for Russian military intelligence whose articles appeared in Western outlets in 2016-17. The Russian network's use of u

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Cyber Express10 gün önce

Andover Confirms Cyberattack Reached Its Systems, Investigation Continues

An attacker got into some of Andover's computer systems during the Andover cyberattack in August; Town officials confirmed Thursday, though they cannot yet say whether any data was taken. "The Town has identified unauthorized access to certain systems and is continuing to determine the nature, scope, and sensitivity of any data that may have been accessed or acquired," Chief Communications Officer Phil Geoffroy said in written answers to Andover News. Some reviewed material appears routine or publicly available, he said, but the full data set remains uncharacterized. What Is Known About the An

İlişkili Şirketler

Andover

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Cyber Express10 gün önce

FBI Takes Down China-Linked Tools That Scanned US Utilities

The U.S. Justice Department and FBI have seized two hacking tools, Microscan and FishHub, that court documents say were operated and used by Flax Typhoon actors working for a China-based company. According to the government, the tools were used to scan, and in some cases hack, U.S. and foreign critical infrastructure systems and other networks. The court-authorized seizures were announced alongside court documents unsealed in the Western District of Pennsylvania. Prosecutors allege the actors worked for Integrity Technology Group (Integrity Tech), a company based in the People's Republic of Ch

İlişkili Şirketler

takes

vmware

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Cyber Express11 gün önce

Hacked Social Media Photos Sold Online: FBI Takes Down the Site

Law enforcement agencies in the United States and France have seized two CSAM domains linked to NudeLeaksTeens (NLT), a website that advertised hacked and stolen sexually explicit images and videos of young women and girls for sale. French authorities simultaneously arrested a 25-year-old man in Northern France suspected of being the site's main administrator. The action was announced by the U.S. Attorney's Office for the Eastern District of Virginia (EDVA), the FBI Washington Field Office, and the Cybercrime Division of France's Parquet de Paris. It was carried out under Operation Inevitable,

İlişkili Şirketler

Collabora

takes

microsoft

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Cyber Express11 gün önce

US Puts $10 Million Bounty on Chinese Hacker Accused of Stealing COVID Research

The U.S. Department of State's Rewards for Justice (RFJ) program is offering up to $10 million for information on Zhang Yu, a Chinese national accused of hacking COVID-19 research at U.S. universities on behalf of China's Ministry of State Security (MSS). U.S. officials also describe Zhang as a key figure in the HAFNIUM hacking campaign, which compromised thousands of computers worldwide. His alleged partner, Xu Zewei, was arrested in Italy in July 2025 and extradited to the United States in April 2026. Zhang remains at large. Who Is Zhang Yu Zhang is a director at Shanghai Firetech Informatio

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Cyber Express12 gün önce

Atlassian Warns of Critical Flaw Affecting Eight Self-Managed Products

Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting Confluence Data Center and seven other self-managed products. The advisory, published on October 5, 2026, warns that every version of the affected software is exposed and urges administrators to act right away, either by upgrading or by putting temporary safeguards in place. Beyond Confluence Data Center, the flaw reaches Bitbucket Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye. Atlassian is tracking the issue

İlişkili Şirketler

Atlassian

İlgili CVE'ler

CVE-2026-21589

Kaynakta oku

The Cyber Express12 gün önce

86,644 Firewalls in 194 Countries Breached With Stolen Passwords

The FBI and the U.S. Secret Service (USSS) have issued a joint cybersecurity advisory warning organizations about FortiBleed, an active global credential-compromise campaign targeting internet-facing Fortinet FortiGate firewalls and SSL VPN gateways. The advisory, published on October 6, 2026, cites SOCRadar data verifying more than 86,644 compromised devices across 194 countries. According to the advisory, the campaign exploits reused or leaked credentials and legacy SHA-256 password storage, allowing threat actors to harvest and crack authentication data at scale. Attackers continue to scan

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Cyber Express12 gün önce

Singapore Plans Major Changes to Port Rules After 30 Years

Singapore is preparing the most significant update to its port legislation in nearly three decades. A new MPA Amendment Bill would give the Maritime and Port Authority of Singapore dedicated powers over maritime cybersecurity, along with fresh authority to regulate drones, autonomous vessels and artificial intelligence. The Maritime and Port Authority of Singapore (Amendment) Bill was tabled for First Reading in Parliament this week. It seeks to amend the MPA Act, which was enacted in 1996 and has remained largely unchanged since. According to the MPA Amendment Bill, maritime operations have s

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Cyber Express1 ay önce

China-Linked Fire Ant Turned Cisco Routers, TACACS Servers Into Espionage Platforms

The China-nexus espionage group Fire Ant has moved from compromising virtualization platforms to implanting Cisco IOS XR routers and TACACS authentication servers. They are using them to capture traffic, harvest administrator credentials and suppress the logs defenders rely on, said researchers at Sygnia, an incident response firm. Researchers first documented Fire Ant in July 2025 for deep intrusions into VMware ESXi and vCenter environments. The new report describes the same actor operating a layer lower, in what researchers call the trust layer — the routers, authentication servers and Linu

İlişkili Şirketler