Siber Güvenlik Haberleri

Güvenilir yayınlardan canlı haberler, DayBreach CVE verileriyle eşleştirilmiş olarak.

Tüm kaynaklarArs Technica · 63BleepingComputer · 160CERT Polska · 78Cisco Talos · 46CrowdStrike · 32Dark Reading · 66DataBreaches.net · 29Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 54Security.NL · 300SecurityWeek · 65SentinelOne · 33The Cyber Express · 70TheCyberThrone · 55The Hacker News · 286The Record · 36Unit 42 · 45
The Cyber Express2 ay önce

FTC Sues Hims & Hers Over Health Data Privacy, Billing Practices

The Hims & Hers lawsuit has put the telehealth provider under scrutiny after the FTC, along with Utah and California authorities, accused the company of deceptive billing practices and unlawfully sharing consumers' sensitive health information with third-party advertising platforms. According to a complaint filed in federal court, regulators allege that Hims & Hers misled consumers about its privacy protections, enrolled users in recurring subscriptions without clear disclosure, and shared health-related data with companies including Meta and Snap. The complaint alleges that the San Fr

İlişkili Şirketler
S
samsung logo
samsung
İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
The Cyber Express2 ay önce

FBI Warns of PLC Cyberattacks Disrupting Water Utilities Across Seven States

The PLC cyberattacks targeting the Water and Wastewater Sector have prompted a joint warning from the Federal Bureau of Investigation (FBI) and the Environmental Protection Agency (EPA), after multiple cyber incidents disrupted water operations across the United States. Since July 27, 2026, utility companies in at least seven states have reported attacks involving internet-facing PLCs, with some incidents resulting in degraded operations after threat actors altered device configurations. According to the Public Service Announcement (PSA), malicious cyber actors targeted Programmable Logic Cont

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
The Cyber Express2 ay önce

CVE-2026-63077 Exposes TeamCity Servers to Unauthenticated RCE

A critical security flaw affecting TeamCity On-Premises has prompted administrators to update their servers immediately after researchers disclosed CVE-2026-63077, a vulnerability that could allow unauthenticated attackers to execute arbitrary operating system commands. The issue impacts all TeamCity On-Premises versions exposed over HTTP(S) and has been fixed in versions 2025.11.7 and 2026.1.3. Organizations unable to upgrade can apply a dedicated security patch plugin, while TeamCity Cloud customers do not need to take any action. CVE-2026-63077 Enables Unauthenticated Access Over HTTP(S) Ac

İlişkili Şirketler
J
jetbrains logo
jetbrains
E
exim logo
exim
İlgili CVE'ler
CVE-2026-63077 CVE-2026-45185
Kaynakta oku
The Cyber Express2 ay önce

Critical wp2shell Vulnerability Hits WordPress Core, Patch Released

WordPress has released security updates to address the wp2shell vulnerability, a critical flaw that allowed attackers to achieve remote code execution (RCE) on vulnerable sites using a single anonymous web request. Unlike many previous attacks, this issue did not require plugins, authentication, or third-party code, making affected core installations particularly vulnerable. Security patches were released in WordPress 6.9.5 and 7.0.2. wp2shell Vulnerability Exposed Core WordPress Sites Tracked as CVE-2026-63030, the wp2shell vulnerability is described in the official WordPress release notes as

İlişkili Şirketler
W
wordpress logo
wordpress
W
webpros logo
webpros
C
cpanel logo
cpanel
@
@auth logo
@auth
A
angular logo
angular
L
limanmys logo
limanmys
B
bolt logo
bolt
R
redaxo logo
redaxo
İlgili CVE'ler
CVE-2026-60137 CVE-2026-63030 CVE-2026-41940
Kaynakta oku
The Cyber Express2 ay önce

Student Hacks IIT Kanpur Website After Rejection, Gets Technical Assessment

The IIT Kanpur Website Hack has taken an unexpected turn after the institute decided to assess the technical skills of a student who allegedly breached parts of the IIT Kanpur and IIT Madras websites following his rejection from the newly launched undergraduate cybersecurity program. Instead of immediately pursuing legal action, IIT Kanpur said it would conduct a formal technical evaluation, though admission for the current academic session remains closed. The incident of IIT Kanpur website hack came to light after the student shared posts on X and Reddit, claiming he had breached sections of

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
The Cyber Express2 ay önce

Two Joyfill npm Packages Found Delivering DEV#POPPER Malware

Two beta releases of joyfill npm Packages have been found distributing a malware implant capable of delivering the DEV#POPPER remote access trojan (RAT) . The compromised Node.js packages use an import-time loader that retrieves encrypted payloads through blockchain transactions instead of traditional command-and-control infrastructure. The affected releases are @joyfill/layouts@0.1.2-2773.beta.0 and @joyfill/components@4.0.0-rc24-2773-beta.4. Joyfill develops software development kits for embedding forms, documents, and PDFs into web and mobile applications. While both packages collectively r

İlişkili Şirketler
N
npm logo
npm
İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku
The Cyber Express2 ay önce

New CI Fortify Guide Reveals How Critical Infrastructure Can Contain Cyber Attacks

Malicious cyber actors routinely target critical infrastructure to conduct espionage, extort victims, or establish access for disruptive and destructive attacks. The new CI Fortify Guide advises owners and operators to strengthen their ability to isolate vital systems from other networks, helping contain incidents and maintain critical services during a crisis or service disruption. The CI Fortify Guide, titled CI Fortify: Advice for isolating vital systems, details steps for isolating operational technology (OT) and enabling systems from other networks. The guidance states that this capabilit

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

61-67 / 67 haber gösteriliyor