Siber Güvenlik Haberleri

Güvenilir yayınlardan canlı haberler, DayBreach CVE verileriyle eşleştirilmiş olarak.

The Hacker News14 gün önce

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro. The attack works only when the program's Java support is enabled. So far, it has only been shown as a proof of concept, and there are no reports of its use in

İlişkili Şirketler

The Document Foundation

İlgili CVE'ler

CVE-2026-88772

Kaynakta oku

TheCyberThrone14 gün önce

Microsoft Releases Out-of-Band Exchange Security Update

Executive Summary Microsoft has released an out-of-band security update for Exchange Server to address CVE-2026-96940, an Elevation of Privilege vulnerability that could allow an authenticated attacker to access email and…

İlişkili Şirketler

İlgili CVE'ler

SANS Internet Storm Center14 gün önce

ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

İlişkili Şirketler

octobercms

isc

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Hacker News14 gün önce

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise Etherpad, a public note-taking tool, and edit Wikipedia pages. "The unauthorized bot activities included edits to our wikis, some unsuccessful attempts to exploit a public note-taking tool we host, and heavy traffic,

İlişkili Şirketler

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Hacker News14 gün önce

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

In 2024, MCP (Model Context Protocol) set out to become the USB-C of AI: one standard for connecting models, agents, and IDEs to tools and data. The protocol delivered. Thousands of developers built servers, and enterprises plugged them into agent workflows. The ecosystem around it fell short. Earlier this year, our team at OX Security, traced critical vulnerabilities in Anthropic's MCP

İlişkili Şirketler

rubygems

03-lovepreetSingh

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

CERT Polska14 gün önce

Podatności w oprogramowaniu GNU Aspell

W oprogramowaniu GNU Aspell wykryto 3 podatności różnego typu (od CVE-2026-75818 do CVE-2026-75820)

İlişkili Şirketler

gnu

İlgili CVE'ler

CVE-2026-75818 CVE-2026-75820

Kaynakta oku

Unit 4214 gün önce

Blinder Tunnel Campaign Targets Iraqi Infrastructure

Analysis of Blinder Tunnel, an Iran-nexus campaign using fake Dubai Airports recruitment lures and GitHub C2 malware to target critical infrastructure. The post Blinder Tunnel Campaign Targets Iraqi Infrastructure appeared first on Unit 42.

İlişkili Şirketler

İlgili CVE'ler

The Hacker News14 gün önce

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers can no longer submit security flaws in the code of projects such as Go, Angular, and Protocol Buffers there for a reward. Reports about supply chain compromises are still accepted, and reports filed before October 1 are

İlişkili Şirketler

google

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Hacker News15 gün önce

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product's web application root directory. The attacker must already know a file's exact name and path and cannot list what the directory holds. Atlassian disclosed the flaw, CVE-2026-21589, on October 5, rated it 9.3 out of 10, and

İlişkili Şirketler

İlgili CVE'ler

The Hacker News15 gün önce

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That's according to a report from Reuters, citing two sources familiar with the matter. "To date, our review has determined that the incident occurred as the result of a security failure

İlişkili Şirketler

İlgili CVE'ler

451-460 / 1404 haber gösteriliyor

Siber Güvenlik Haberleri

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

Microsoft Releases Out-of-Band Exchange Security Update

ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th)

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

Podatności w oprogramowaniu GNU Aspell

Blinder Tunnel Campaign Targets Iraqi Infrastructure

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

DayBreach

Sözlük & Referans

Dizinler & Akışlar

RSS & Entegrasyon