Siber Güvenlik Haberleri

Güvenilir yayınlardan canlı haberler, DayBreach CVE verileriyle eşleştirilmiş olarak.

The Hacker News10 gün önce

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-on. The other thousand are invisible to identity infrastructure by default, not because anyone hid them, but because an identity stack can only govern what authenticates through it, and most agents never do. That gap is the clearest

İlişkili Şirketler

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Hacker News10 gün önce

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Anthropic on Friday said it's cutting off live internet access for all its internal evaluations until further notice following the discovery of new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior and targeted real websites. The AI company said it identified four broad categories of unintended model actions during evaluations and internal use of Claude

İlişkili Şirketler

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Hacker News10 gün önce

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel, the attacker pushed a malicious workflow to 27 repositories starting at 13:20 UTC," StepSecurity

İlişkili Şirketler

github

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Hacker News10 gün önce

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in a post on X. ShinyHunters is the extortion group that said in September it had breached the FBI's jobs portal and stolen sensitive data on almost all FBI agents and job applicants. The FBI has not named the suspect, and no charges have been made public. The

İlişkili Şirketler

oracle

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Hacker News11 gün önce

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

Four more U.S. states sued router maker TP-Link Systems on October 6, bringing the total to five, with Texas filing a suit in February. Florida, Iowa, Montana and Nebraska allege the California company misled buyers about how secure its routers are and how separate it is from China. TP-Link denies the claims and says it will fight them in court. TP-Link Systems is based in

İlişkili Şirketler

İlgili CVE'ler

CVE-2023-50224 CVE-2025-30237 CVE-2025-30238 CVE-2025-30239 CVE-2025-30240 CVE-2025-30241 CVE-2026-88772

Kaynakta oku

The Hacker News11 gün önce

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Security researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that gives attackers root access before anyone approves the connection. AnyDesk patched the flaw in version 8.0.3 in June, but its changelog described the fix only as "fixed a bug that could lead to a crash," with no CVE assigned and no security

İlişkili Şirketler

anydesk

Citrix NetScaler

citrix

The Linux Kernel Organization

İlgili CVE'ler

CVE-2025-27918 CVE-2026-88772

Kaynakta oku

The Hacker News11 gün önce

Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects

Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). "It's an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing," Anthropic said. "Projects that join will receive thorough, periodic security scans by our strongest models at no cost."

İlişkili Şirketler

StableBit

anthropic

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

The Hacker News11 gün önce

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. Details of the flaws are below - CVE-2026-105133 (CVSS v4 score: 5.5) - An improper authentication vulnerability in the checkSysPwd() function in the "com/ahsay/obs/api/ApiStructsAction.java"

İlişkili Şirketler

İlgili CVE'ler

CVE-2026-105133 CVE-2026-105134 CVE-2026-88772

Kaynakta oku

The Hacker News11 gün önce

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below - CVE-2015-3306 (CVSS score: 10.0) - An improper access control vulnerability in ProFTPD that could allow

İlişkili Şirketler

n/a

İlgili CVE'ler

CVE-2015-3306 CVE-2026-88772 CVE-2023-22894 CVE-2021-22205 CVE-2021-3199 CVE-2019-11510 CVE-2016-3081 CVE-2015-5477 CVE-2014-6278

Kaynakta oku

The Hacker News11 gün önce

The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition

As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era. The "Horizons of Identity Security" report from SailPoint highlights a critical “velocity paradox,” in which organizations invest in AI-speed business operations while continuing to rely on human-speed security controls, creating a

İlişkili Şirketler

gentoo

Soft-Machine-io

İlgili CVE'ler

Bu haber için doğrulanmış CVE bağlantısı bulunamadı.

Kaynakta oku

71-80 / 289 haber gösteriliyor

Siber Güvenlik Haberleri

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition

DayBreach

Sözlük & Referans

Dizinler & Akışlar

RSS & Entegrasyon